Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/e0hrDVtPTcuVIZ0bybivCyarPdY.roa
File: e0hrDVtPTcuVIZ0bybivCyarPdY.roa (raw, json)
Hash identifier: S6a+ooiK7Lly9jfvdFW0/62kq3Ycr4hiGyo5OfldcA4=
Subject key identifier: 7B:48:6B:0D:5B:4F:4D:CB:95:21:9D:1B:C9:B8:AF:0B:26:AB:3D:D6
Certificate issuer: /CN=6eab53640b0931924b73f760925845150a6ccca5
Certificate serial: 01971221CF00796B815612D2838D540F902A
Authority key identifier: 6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/e0hrDVtPTcuVIZ0bybivCyarPdY.roa
Signing time: Tue 27 May 2025 14:24:54 +0000
ROA not before: Tue 27 May 2025 14:24:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25447
IP address blocks: 62.93.64.0/19 maxlen: 19
62.93.68.0/24 maxlen: 24
62.93.73.0/24 maxlen: 24
62.93.74.0/24 maxlen: 24
62.93.76.0/24 maxlen: 24
62.93.88.0/24 maxlen: 24
62.93.96.0/20 maxlen: 20
62.93.96.0/21 maxlen: 21
62.93.104.0/21 maxlen: 24
62.93.112.0/22 maxlen: 22
62.93.120.0/21 maxlen: 21
82.192.0.0/19 maxlen: 19
82.192.0.0/23 maxlen: 23
82.192.5.0/24 maxlen: 24
82.192.6.0/24 maxlen: 24
82.192.18.0/24 maxlen: 24
85.13.0.0/18 maxlen: 18
85.13.2.0/24 maxlen: 24
85.13.8.0/24 maxlen: 24
85.13.14.0/24 maxlen: 24
85.13.16.0/24 maxlen: 24
176.61.160.0/19 maxlen: 24
185.51.222.0/23 maxlen: 24
188.117.192.0/18 maxlen: 18
188.117.200.0/22 maxlen: 22
188.117.208.0/22 maxlen: 22
188.117.220.0/22 maxlen: 22
188.117.240.0/20 maxlen: 20
217.16.112.0/20 maxlen: 20
217.16.113.0/24 maxlen: 24
217.16.114.0/24 maxlen: 24
217.16.124.0/24 maxlen: 24
217.16.127.0/24 maxlen: 24
217.199.80.0/20 maxlen: 20
217.199.83.0/24 maxlen: 24
217.199.90.0/24 maxlen: 24
2a03:4e40::/29 maxlen: 29
2a03:4e40::/32 maxlen: 32
2a03:4e47::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:12:21:cf:00:79:6b:81:56:12:d2:83:8d:54:0f:90:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eab53640b0931924b73f760925845150a6ccca5
Validity
Not Before: May 27 14:24:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b486b0d5b4f4dcb95219d1bc9b8af0b26ab3dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c4:ab:2d:db:24:ba:14:c3:f3:f6:31:9e:85:
7a:5d:b2:25:c1:72:2a:79:4f:33:2c:1e:35:dd:dc:
3e:06:15:db:19:ee:c7:52:b7:ba:64:ea:5f:3e:40:
af:79:df:b6:b7:64:9e:9b:f8:15:4c:0b:dc:a6:db:
3b:32:4f:24:6a:a2:8b:bb:0c:4a:5b:e1:ce:a9:4f:
34:c4:d2:7b:34:7a:40:1b:c9:e6:45:3b:be:f2:a0:
ba:a4:36:cd:ac:bc:c0:fc:8f:ef:b2:f3:4f:6d:af:
8c:66:be:2b:76:08:c3:51:ab:3e:43:ab:6e:ea:1a:
f4:8e:f6:9a:0e:a9:2d:9c:54:32:72:57:30:06:c6:
0a:cd:9f:75:26:5b:d8:c9:81:9a:48:52:19:d7:d3:
fe:bd:57:04:54:27:de:a9:69:ac:90:16:a2:13:35:
78:82:b8:7b:70:8a:a4:87:0b:e7:9d:7b:93:1e:38:
cf:59:f6:cc:5d:b8:d5:b7:e5:6b:86:f4:8d:0b:7d:
01:b5:c3:09:e5:99:39:91:a1:8a:ec:13:e2:fb:cd:
18:27:ef:61:5b:4a:ea:01:9b:35:e3:d1:98:d1:ed:
42:ea:ec:a8:f1:85:3b:87:7f:c4:5c:07:43:14:b5:
14:8d:e8:c7:ae:63:4d:a0:6e:ca:bd:60:3a:fb:32:
0d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:48:6B:0D:5B:4F:4D:CB:95:21:9D:1B:C9:B8:AF:0B:26:AB:3D:D6
X509v3 Authority Key Identifier:
keyid:6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/e0hrDVtPTcuVIZ0bybivCyarPdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.93.64.0-62.93.115.255
62.93.120.0/21
82.192.0.0/19
85.13.0.0/18
176.61.160.0/19
185.51.222.0/23
188.117.192.0/18
217.16.112.0/20
217.199.80.0/20
IPv6:
2a03:4e40::/29
Signature Algorithm: sha256WithRSAEncryption
a3:de:70:f8:f1:16:b1:00:30:51:6e:90:08:3b:bb:37:e4:b4:
9e:34:20:52:1d:01:db:c1:99:31:24:d1:ac:92:05:9f:52:07:
99:d0:4c:55:92:3e:07:38:d1:f1:a4:3d:a0:1b:c0:28:fa:52:
6b:30:b8:6a:76:69:f2:d9:b5:3f:39:ef:b2:ce:34:3b:e1:bf:
a2:ab:4e:ea:ed:55:07:ca:d3:6e:67:74:88:a9:94:b4:46:14:
68:ed:77:d2:a0:57:67:9a:8d:9f:9b:30:bb:ec:64:fa:18:d9:
95:26:20:39:b0:08:f7:c2:3d:6c:68:e1:01:4d:76:c9:68:79:
a5:4e:1d:16:fe:0b:a5:df:56:e0:a4:1a:1b:ab:4d:f8:87:cf:
cd:7f:e4:4f:41:fb:15:6f:ef:f8:8b:71:9f:cf:ae:8b:58:4f:
c4:f9:9f:e0:2c:41:91:80:59:22:b1:e9:fd:f5:80:e5:49:48:
18:22:35:10:54:07:e7:b6:45:1c:00:18:77:22:a5:6c:0d:bd:
90:e3:1b:27:64:01:68:ad:ac:dc:98:51:92:16:47:48:b1:b5:
03:69:87:44:af:06:a4:a2:33:9d:cf:86:46:a7:b2:ee:c5:e7:
2f:31:a1:b7:35:88:89:c9:c7:05:ce:c3:65:91:9d:93:52:dc:
cf:f1:09:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:55:07 2025 by rpki-client