Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/6C2Szm3cfjp9bAf9_VEG9JmuRyM.roa
File: 6C2Szm3cfjp9bAf9_VEG9JmuRyM.roa (raw, json)
Hash identifier: m6tO4ROtbLwqmMtYoGkRxelczMRQ44EOZBvyjQVDxjY=
Subject key identifier: E8:2D:92:CE:6D:DC:7E:3A:7D:6C:07:FD:FD:51:06:F4:99:AE:47:23
Certificate issuer: /CN=0f827a5a24e771cc14fa69bb74b3e760167b026b
Certificate serial: 01942747995A318EA6EA0DAFDC29B7B3A493
Authority key identifier: 0F:82:7A:5A:24:E7:71:CC:14:FA:69:BB:74:B3:E7:60:16:7B:02:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/6C2Szm3cfjp9bAf9_VEG9JmuRyM.roa
Signing time: Thu 02 Jan 2025 13:49:51 +0000
ROA not before: Thu 02 Jan 2025 13:49:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57732
IP address blocks: 37.98.128.0/20 maxlen: 20
62.106.48.0/20 maxlen: 20
85.209.168.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft
rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:99:5a:31:8e:a6:ea:0d:af:dc:29:b7:b3:a4:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f827a5a24e771cc14fa69bb74b3e760167b026b
Validity
Not Before: Jan 2 13:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e82d92ce6ddc7e3a7d6c07fdfd5106f499ae4723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6b:c6:aa:38:e4:04:da:7b:57:e0:2e:4c:1f:
0c:f4:e5:a2:39:d6:91:54:03:e2:e7:6a:8a:75:45:
98:16:93:f1:60:a2:5f:3a:95:51:94:d2:25:a7:eb:
dd:e3:bc:59:2c:b0:91:ed:44:a2:0b:3c:e6:e3:de:
57:30:4e:e7:b1:dc:51:f6:a5:62:4b:17:6c:a9:cf:
9b:f7:00:f9:98:22:10:9b:88:a3:78:be:b9:c3:90:
a5:11:09:81:79:69:79:f1:aa:88:11:4e:b6:8b:4f:
dc:05:39:06:f2:b4:4d:ba:e5:f3:1e:aa:c1:7e:d5:
7f:38:bd:6a:4a:98:00:d2:46:fe:aa:0e:d6:2e:23:
c0:4b:d4:b3:0c:2c:7a:d4:99:bc:b1:13:b9:ce:42:
d5:17:ba:91:be:90:f4:47:e4:eb:e2:6c:0b:26:a5:
e0:f0:b1:f0:75:74:24:fd:04:e6:ba:dd:25:2b:bd:
ce:13:e1:06:de:0e:d9:36:68:ab:96:fe:4a:f1:15:
72:68:26:e6:2a:82:68:9f:e7:60:ca:b8:94:51:f5:
6f:2e:2b:9c:ba:9f:f3:25:ea:00:64:f6:bf:af:62:
29:ae:da:fb:4a:fd:79:97:67:b7:20:78:2e:12:39:
3c:fe:82:4b:9f:25:2a:9b:6d:5e:1a:b2:88:76:73:
ac:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:2D:92:CE:6D:DC:7E:3A:7D:6C:07:FD:FD:51:06:F4:99:AE:47:23
X509v3 Authority Key Identifier:
keyid:0F:82:7A:5A:24:E7:71:CC:14:FA:69:BB:74:B3:E7:60:16:7B:02:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/6C2Szm3cfjp9bAf9_VEG9JmuRyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.128.0/20
62.106.48.0/20
85.209.168.0/22
Signature Algorithm: sha256WithRSAEncryption
41:a2:f2:88:ef:d1:cc:e0:03:4f:b9:0f:85:61:95:11:fb:5c:
6d:cf:c8:2f:c0:12:97:cf:a9:34:b4:3f:5a:0a:5b:10:1b:90:
35:18:67:e2:51:38:8d:4c:15:0e:6f:f8:0d:c9:06:8b:d2:cf:
69:ea:0c:c6:fe:d4:8a:56:94:9d:3b:45:5e:40:a7:a3:76:91:
1e:38:6e:4a:a3:6e:74:9a:dc:64:fc:2f:5a:56:35:c7:7f:82:
66:a0:ea:b1:a8:2c:d0:0e:29:98:d5:20:56:00:90:35:90:93:
fd:14:b2:e9:a9:d6:ea:86:2a:2a:52:5e:53:15:74:25:0c:cc:
eb:60:89:60:0e:df:1f:27:74:43:b9:9f:dc:d1:97:cd:eb:dc:
0b:92:91:26:86:7a:ff:99:0d:58:af:7b:27:28:8e:37:16:91:
c9:ac:fa:95:dd:63:39:6f:77:c0:39:57:6d:ae:62:92:84:fa:
74:bf:f1:5e:54:ff:42:13:67:b8:d0:de:53:d5:ca:4d:61:8d:
1f:5e:d1:c8:09:d3:ed:12:66:1a:c5:0e:16:7c:fa:34:e1:c5:
cc:ac:d1:e5:c7:f0:16:b9:5f:9a:06:0f:5f:06:3d:00:16:6f:
c8:be:a5:da:0a:02:8e:c0:e7:2e:b1:c7:77:17:bc:0e:97:b1:
36:b9:da:79
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQnR5laMY6m6g2v3Cm3s6STMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmODI3YTVhMjRlNzcxY2MxNGZhNjliYjc0YjNlNzYwMTY3
YjAyNmIwHhcNMjUwMTAyMTM0OTUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODJkOTJjZTZkZGM3ZTNhN2Q2YzA3ZmRmZDUxMDZmNDk5YWU0NzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGvGqjjkBNp7V+AuTB8M9OWiOdaR
VAPi52qKdUWYFpPxYKJfOpVRlNIlp+vd47xZLLCR7USiCzzm495XME7nsdxR9qVi
Sxdsqc+b9wD5mCIQm4ijeL65w5ClEQmBeWl58aqIEU62i0/cBTkG8rRNuuXzHqrB
ftV/OL1qSpgA0kb+qg7WLiPAS9SzDCx61Jm8sRO5zkLVF7qRvpD0R+Tr4mwLJqXg
8LHwdXQk/QTmut0lK73OE+EG3g7ZNmirlv5K8RVyaCbmKoJon+dgyriUUfVvLiuc
up/zJeoAZPa/r2Iprtr7Sv15l2e3IHguEjk8/oJLnyUqm21eGrKIdnOsGwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOgtks5t3H46fWwH/f1RBvSZrkcjMB8GA1UdIwQY
MBaAFA+Celok53HMFPppu3Sz52AWewJrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDRKNldpVG5jY3dVLW1tN2RMUG5ZQlo3QW1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8yNGE2YjMtMmU2MC00NDYzLTkyMGIt
Y2JkYWVkMGQwMGFkLzEvNkMyU3ptM2NmanA5YkFmOV9WRUc5Sm11UnlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8yNGE2YjMtMmU2MC00NDYzLTkyMGItY2JkYWVkMGQwMGFk
LzEvRDRKNldpVG5jY3dVLW1tN2RMUG5ZQlo3QW1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEJWKAAwQE
PmowAwQCVdGoMA0GCSqGSIb3DQEBCwUAA4IBAQBBovKI79HM4ANPuQ+FYZUR+1xt
z8gvwBKXz6k0tD9aClsQG5A1GGfiUTiNTBUOb/gNyQaL0s9p6gzG/tSKVpSdO0Ve
QKejdpEeOG5Ko250mtxk/C9aVjXHf4JmoOqxqCzQDimY1SBWAJA1kJP9FLLpqdbq
hioqUl5TFXQlDMzrYIlgDt8fJ3RDuZ/c0ZfN69wLkpEmhnr/mQ1Yr3snKI43FpHJ
rPqV3WM5b3fAOVdtrmKShPp0v/FeVP9CE2e40N5T1cpNYY0fXtHICdPtEmYaxQ4W
fPo04cXMrNHlx/AWuV+aBg9fBj0AFm/IvqXaCgKOwOcuscd3F7wOl7E2udp5
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:32:20 2025 by rpki-client