Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/r6QzNtUWS8LqjO5zMkFtGGDH8lg.roa
File: r6QzNtUWS8LqjO5zMkFtGGDH8lg.roa (raw, json)
Hash identifier: l3MXhVwlaN7WZQxmnLfdtChq7kKxEP3Qy/454Bdw0ho=
Subject key identifier: AF:A4:33:36:D5:16:4B:C2:EA:8C:EE:73:32:41:6D:18:60:C7:F2:58
Certificate issuer: /CN=66d8a84f0e8cf755137a9680ebcc4fccd20a34b2
Certificate serial: 019420D62D080E654588523835C2E7A0A04A
Authority key identifier: 66:D8:A8:4F:0E:8C:F7:55:13:7A:96:80:EB:CC:4F:CC:D2:0A:34:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/r6QzNtUWS8LqjO5zMkFtGGDH8lg.roa
Signing time: Wed 01 Jan 2025 07:48:14 +0000
ROA not before: Wed 01 Jan 2025 07:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31463
IP address blocks: 195.246.200.0/22 maxlen: 24
2a0d:12c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:2d:08:0e:65:45:88:52:38:35:c2:e7:a0:a0:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d8a84f0e8cf755137a9680ebcc4fccd20a34b2
Validity
Not Before: Jan 1 07:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=afa43336d5164bc2ea8cee7332416d1860c7f258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:cb:f1:0f:eb:6a:7e:d2:c9:2a:ee:25:d4:d0:
f3:6a:59:c2:86:06:f9:9e:7b:91:16:e5:04:7c:a6:
fc:de:25:19:8c:ca:9d:bf:3e:d2:c6:51:7a:37:f4:
d5:d7:3d:ad:8f:c9:69:09:54:8d:dd:41:34:c7:00:
87:59:38:d7:fc:4e:d9:67:82:e8:fc:8e:09:b9:42:
22:e7:87:0b:48:cb:a1:67:fd:4f:e6:87:a5:f9:53:
db:85:97:7f:7a:34:c5:f2:d4:0c:4e:1b:1b:73:1b:
fc:b8:ec:7d:0c:9a:d9:6e:be:cb:43:e6:9d:58:08:
46:93:79:ac:cb:4d:0d:15:4d:33:bb:67:f7:e9:f8:
8c:55:e3:06:c0:9e:4e:57:52:22:92:ec:e5:97:3b:
1d:1c:a3:52:f5:12:d8:19:73:41:9d:2f:17:e0:62:
dc:ff:bb:63:9d:fb:1c:33:7a:bd:2a:d3:7e:41:92:
ea:a8:a7:40:c8:1a:87:09:c1:94:a8:fd:d0:ef:5c:
db:e7:fc:6f:6b:2f:ca:4d:e0:2f:9c:ce:f2:e7:66:
1e:54:3b:57:85:49:3a:c1:f9:ce:83:d1:08:2b:ac:
15:f2:6b:2b:9e:fa:04:f3:e5:86:61:00:35:98:d7:
ae:fd:ae:33:67:7d:c6:c8:b4:54:92:e5:cf:3c:99:
f0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A4:33:36:D5:16:4B:C2:EA:8C:EE:73:32:41:6D:18:60:C7:F2:58
X509v3 Authority Key Identifier:
keyid:66:D8:A8:4F:0E:8C:F7:55:13:7A:96:80:EB:CC:4F:CC:D2:0A:34:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/r6QzNtUWS8LqjO5zMkFtGGDH8lg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.246.200.0/22
IPv6:
2a0d:12c0::/32
Signature Algorithm: sha256WithRSAEncryption
78:9b:63:37:2f:91:b0:38:db:ae:a3:09:5c:53:c5:dc:70:f4:
01:83:c5:ad:a0:67:32:35:02:72:f6:1a:be:d1:58:f6:74:93:
63:71:94:22:6f:3f:1e:d3:87:c4:dd:8b:f2:45:7c:d5:1c:81:
38:6f:1c:23:82:70:ff:07:92:53:89:dc:ba:a3:83:86:71:5a:
e4:5b:48:52:4d:53:30:cb:f5:0e:84:96:ec:1a:db:7d:fd:67:
f9:1a:13:2d:18:21:1b:58:53:9a:22:88:bd:7e:59:aa:b5:a2:
c9:56:a9:21:dc:2b:0f:e7:69:df:49:ea:42:98:3d:49:cb:e5:
45:cd:8c:13:b5:7c:49:39:7a:0b:e6:63:20:ee:0a:32:ab:5c:
6f:10:5a:2d:76:7b:53:14:b6:51:6f:5a:f8:62:9c:24:ef:c0:
70:f9:33:a1:da:5f:c5:d2:9a:c2:e4:65:e4:d8:74:2c:02:e2:
53:cc:0a:14:6c:9b:f4:1e:0e:b6:96:a2:3b:c7:ab:7d:58:c2:
13:57:c7:9f:2e:de:62:21:5c:89:8d:a1:5c:6c:4a:22:a1:65:
66:7a:3a:76:27:3d:b7:82:7b:bc:75:72:ca:bf:bf:b0:1b:3f:
83:89:8b:cb:b8:9d:52:36:f5:d8:1e:57:2d:35:ae:a2:3a:8d:
7c:0d:e6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:08:13 2025 by rpki-client