Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/6qgSMfZ3_YfeL-wTXFWx5LVQFts.roa
File: 6qgSMfZ3_YfeL-wTXFWx5LVQFts.roa (raw, json)
Hash identifier: avRjJs3tQZCWYxxzrvKfKWMx6I1KbzcTNaTHuCyd7uA=
Subject key identifier: EA:A8:12:31:F6:77:FD:87:DE:2F:EC:13:5C:55:B1:E4:B5:50:16:DB
Certificate issuer: /CN=c0cac8d524a5fec7fc83a23830fbf9226a7601ae
Certificate serial: 019424448CDAC33F643B8C5D8BCD7C41DE4C
Authority key identifier: C0:CA:C8:D5:24:A5:FE:C7:FC:83:A2:38:30:FB:F9:22:6A:76:01:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/6qgSMfZ3_YfeL-wTXFWx5LVQFts.roa
Signing time: Wed 01 Jan 2025 23:47:39 +0000
ROA not before: Wed 01 Jan 2025 23:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35575
IP address blocks: 46.149.240.0/20 maxlen: 20
84.19.32.0/19 maxlen: 19
84.19.32.0/21 maxlen: 21
84.19.40.0/21 maxlen: 21
84.19.48.0/21 maxlen: 21
84.19.56.0/21 maxlen: 21
88.211.64.0/18 maxlen: 18
88.211.64.0/21 maxlen: 21
88.211.72.0/21 maxlen: 21
88.211.80.0/20 maxlen: 20
88.211.96.0/21 maxlen: 21
88.211.104.0/21 maxlen: 21
88.211.112.0/21 maxlen: 21
88.211.120.0/22 maxlen: 22
88.211.124.0/23 maxlen: 23
88.211.126.0/23 maxlen: 23
185.25.236.0/22 maxlen: 22
185.152.216.0/22 maxlen: 22
185.219.92.0/22 maxlen: 22
188.127.64.0/19 maxlen: 19
209.42.0.0/23 maxlen: 23
2a02:29d0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:8c:da:c3:3f:64:3b:8c:5d:8b:cd:7c:41:de:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0cac8d524a5fec7fc83a23830fbf9226a7601ae
Validity
Not Before: Jan 1 23:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eaa81231f677fd87de2fec135c55b1e4b55016db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:46:6c:d4:f1:0a:76:c0:99:69:2f:c3:3b:60:
e6:c0:1c:94:3c:14:69:f6:4a:3b:f9:e0:1c:7a:3a:
78:de:90:e8:ef:b2:17:a9:48:81:2f:6a:1d:a6:e8:
2e:bb:2c:3d:38:69:ac:73:8a:48:23:c2:fd:84:5c:
52:35:2a:89:d9:b8:34:5f:56:4e:88:c1:d4:53:2e:
9b:f7:b2:35:28:ce:81:5c:be:50:30:b0:7f:04:c4:
fa:a1:03:a2:6f:62:f3:b4:4d:b5:d9:3c:b6:60:53:
03:07:9c:9c:76:79:98:e8:70:d0:ea:05:b0:00:95:
37:f5:81:0f:da:d4:e8:2e:45:0f:7e:ae:50:eb:74:
13:d1:9a:bd:00:58:a2:d1:9a:5d:77:d1:08:13:88:
6f:76:15:97:f6:89:02:a9:d9:34:5f:b5:17:7b:a5:
31:54:c2:69:ee:c0:8d:23:e4:14:59:15:c8:25:ed:
c0:32:eb:b8:c3:ca:93:4c:28:54:91:20:c7:47:e1:
b3:43:67:6d:9e:bb:71:a1:41:5f:0b:8b:1f:3a:e3:
00:d2:57:e0:77:68:b8:8e:ed:ed:f7:3c:e6:cc:d4:
bb:cf:e7:25:a3:01:12:65:8c:5b:db:99:6b:c0:d0:
0d:8f:99:9c:e9:2d:c8:5b:dd:51:1f:dc:15:89:f0:
b4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A8:12:31:F6:77:FD:87:DE:2F:EC:13:5C:55:B1:E4:B5:50:16:DB
X509v3 Authority Key Identifier:
keyid:C0:CA:C8:D5:24:A5:FE:C7:FC:83:A2:38:30:FB:F9:22:6A:76:01:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/6qgSMfZ3_YfeL-wTXFWx5LVQFts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.149.240.0/20
84.19.32.0/19
88.211.64.0/18
185.25.236.0/22
185.152.216.0/22
185.219.92.0/22
188.127.64.0/19
209.42.0.0/23
IPv6:
2a02:29d0::/32
Signature Algorithm: sha256WithRSAEncryption
e9:54:81:87:7f:b4:5d:c4:20:a3:81:d0:06:d6:b5:71:07:61:
b8:75:15:2a:61:4a:3a:e6:72:80:0c:c5:3f:92:09:a4:89:cb:
88:db:c4:b8:11:a0:cc:db:b1:e6:64:cc:84:75:32:fd:5c:46:
30:31:02:13:18:38:c4:16:2e:9d:24:2b:81:d9:62:c6:f8:93:
25:c4:53:a5:3b:3f:e6:01:c4:d6:c7:7c:dd:00:a8:6a:58:51:
98:6a:4b:a1:b7:f7:8b:16:9b:0a:7b:29:df:89:04:be:b7:33:
43:92:2f:e9:6c:39:de:c2:1d:02:ab:a3:c4:83:89:34:8e:75:
d9:f4:78:28:f5:1c:74:63:2d:4b:73:a9:cf:c4:a2:66:ac:25:
16:8c:a7:ca:2d:12:b4:4d:e6:1c:d7:2a:b2:14:a1:d9:a7:a4:
2e:3c:5c:43:30:a3:80:0f:a3:8d:f8:ce:7f:b6:21:16:e3:4e:
f0:2f:34:c6:cf:b6:12:dd:a6:ba:8f:c7:55:79:0b:2e:12:5f:
54:07:e4:de:1d:42:5b:c3:80:35:31:0e:d8:dd:ac:06:a6:2e:
34:e6:94:19:ef:85:d2:da:dc:51:c2:5f:35:15:4f:31:7c:3f:
b0:73:6b:d5:a8:f2:7f:be:b8:e3:1f:71:75:9a:e3:26:03:e4:
e9:8f:4b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:09:45 2025 by rpki-client