Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/6_a-aeOKvfIVcw7qcE2cQDyNLOY.roa
File: 6_a-aeOKvfIVcw7qcE2cQDyNLOY.roa (raw, json)
Hash identifier: WdgelCFy5E02aPpURS4UTgXi3wN5eWjkYjrBc+OZPSI=
Subject key identifier: EB:F6:BE:69:E3:8A:BD:F2:15:73:0E:EA:70:4D:9C:40:3C:8D:2C:E6
Certificate issuer: /CN=a3e6e823f6dda67d283a9f41a72909906ac9a837
Certificate serial: 019424452FB7C054EEE46F9AC94CE9380D63
Authority key identifier: A3:E6:E8:23:F6:DD:A6:7D:28:3A:9F:41:A7:29:09:90:6A:C9:A8:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/6_a-aeOKvfIVcw7qcE2cQDyNLOY.roa
Signing time: Wed 01 Jan 2025 23:48:21 +0000
ROA not before: Wed 01 Jan 2025 23:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197838
IP address blocks: 2a03:6607::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:2f:b7:c0:54:ee:e4:6f:9a:c9:4c:e9:38:0d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e6e823f6dda67d283a9f41a72909906ac9a837
Validity
Not Before: Jan 1 23:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebf6be69e38abdf215730eea704d9c403c8d2ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cf:3f:ee:7e:65:63:4e:7e:69:da:fa:be:b3:
1b:02:03:e2:ce:4f:db:92:cc:f2:61:79:b6:94:6c:
54:3c:ad:5b:4a:cd:11:a9:3a:27:5c:54:db:86:ce:
ca:c2:0b:bc:5e:1c:16:78:4a:4f:bf:27:e6:8e:66:
ee:29:02:66:ad:ba:83:fa:70:67:4c:12:b2:ce:50:
13:f1:26:0e:64:1a:4a:6c:c3:bd:7e:1a:8f:e4:fb:
40:ed:b8:f8:8a:a5:a6:c9:0b:87:22:46:42:51:73:
11:b4:9e:3c:44:42:7a:26:8b:73:64:f0:64:47:db:
71:e8:31:81:e8:6b:d0:02:d8:43:16:bc:5f:eb:98:
da:6c:db:fd:df:dc:a7:0e:3d:a8:aa:d7:80:36:52:
82:73:79:88:a7:73:74:a9:7a:32:ed:c8:d1:c9:74:
ff:c0:82:62:24:ff:ad:0d:f6:bf:20:d0:c3:53:22:
cc:bb:f3:6e:b2:7d:43:01:c0:dd:e9:b3:f3:09:6e:
77:b5:79:4c:99:28:2e:b7:45:25:b3:9d:1e:ee:d6:
fa:13:6b:e3:21:85:89:72:91:29:ec:e6:86:17:db:
05:d8:5d:d0:87:85:56:1e:92:8e:57:ae:e2:a4:33:
00:4b:a8:87:90:4a:d1:36:a4:cd:6c:53:ca:3e:96:
ab:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F6:BE:69:E3:8A:BD:F2:15:73:0E:EA:70:4D:9C:40:3C:8D:2C:E6
X509v3 Authority Key Identifier:
keyid:A3:E6:E8:23:F6:DD:A6:7D:28:3A:9F:41:A7:29:09:90:6A:C9:A8:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/6_a-aeOKvfIVcw7qcE2cQDyNLOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:6607::/32
Signature Algorithm: sha256WithRSAEncryption
04:1a:e5:6d:8d:0f:c3:68:41:96:5f:f8:aa:a3:49:6f:c3:8e:
54:f6:95:46:97:0f:68:ed:f8:2b:3f:67:00:d4:3d:fa:dd:50:
dd:1b:25:63:88:95:80:f6:25:6f:3f:b3:65:21:b6:8a:02:79:
78:4b:52:e4:ba:b6:95:85:a8:1a:3f:a5:e5:f9:ed:19:d2:4d:
d5:16:b4:a2:21:05:ac:c5:45:94:5c:d6:57:3c:46:76:3d:e8:
25:54:4c:ae:78:4f:bb:a4:a2:cf:c3:e2:f8:6a:66:24:c6:a7:
1c:f8:45:4e:09:ba:51:73:59:d4:87:14:43:02:60:69:ec:e7:
74:5b:8a:d4:89:ba:76:46:34:cd:93:c3:07:c1:fe:b7:20:23:
bc:7a:2f:32:3d:b3:6a:4e:3f:41:5a:f5:46:59:a4:e0:08:0d:
82:10:20:93:2b:1b:48:e1:10:5c:c7:ca:c4:8a:7a:86:b9:18:
93:a5:73:db:76:cb:17:e0:fb:63:0a:e2:d2:72:b1:0b:1c:fe:
f9:44:ef:84:0f:59:e6:5e:f4:46:f7:5d:d9:a0:b3:1c:75:99:
a8:83:99:64:34:2b:dc:0d:3e:7b:7c:2f:07:b0:5a:48:b8:cf:
5e:73:1b:ce:eb:4f:9c:c2:28:0e:3c:a3:ee:3b:a8:3d:53:6a:
0a:0c:a7:21
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQkRS+3wFTu5G+ayUzpOA1jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzZTZlODIzZjZkZGE2N2QyODNhOWY0MWE3MjkwOTkwNmFj
OWE4MzcwHhcNMjUwMTAxMjM0ODIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYmY2YmU2OWUzOGFiZGYyMTU3MzBlZWE3MDRkOWM0MDNjOGQyY2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1c8/7n5lY05+adr6vrMbAgPizk/b
kszyYXm2lGxUPK1bSs0RqTonXFTbhs7Kwgu8XhwWeEpPvyfmjmbuKQJmrbqD+nBn
TBKyzlAT8SYOZBpKbMO9fhqP5PtA7bj4iqWmyQuHIkZCUXMRtJ48REJ6JotzZPBk
R9tx6DGB6GvQAthDFrxf65jabNv939ynDj2oqteANlKCc3mIp3N0qXoy7cjRyXT/
wIJiJP+tDfa/INDDUyLMu/Nusn1DAcDd6bPzCW53tXlMmSgut0Uls50e7tb6E2vj
IYWJcpEp7OaGF9sF2F3Qh4VWHpKOV67ipDMAS6iHkErRNqTNbFPKPparhQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFOv2vmnjir3yFXMO6nBNnEA8jSzmMB8GA1UdIwQY
MBaAFKPm6CP23aZ9KDqfQacpCZBqyag3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvby1ib0lfYmRwbjBvT3A5QnB5a0prR3JKcURjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8xOGExYmMtOTY3Yy00OTMxLTg1YjUt
MDBmMDBhZjFjOGQ3LzEvNl9hLWFlT0t2ZklWY3c3cWNFMmNRRHlOTE9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8xOGExYmMtOTY3Yy00OTMxLTg1YjUtMDBmMDBhZjFjOGQ3
LzEvby1ib0lfYmRwbjBvT3A5QnB5a0prR3JKcURjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgNmBzAN
BgkqhkiG9w0BAQsFAAOCAQEABBrlbY0Pw2hBll/4qqNJb8OOVPaVRpcPaO34Kz9n
ANQ9+t1Q3RslY4iVgPYlbz+zZSG2igJ5eEtS5Lq2lYWoGj+l5fntGdJN1Ra0oiEF
rMVFlFzWVzxGdj3oJVRMrnhPu6Siz8Pi+GpmJManHPhFTgm6UXNZ1IcUQwJgaezn
dFuK1Im6dkY0zZPDB8H+tyAjvHovMj2zak4/QVr1Rlmk4AgNghAgkysbSOEQXMfK
xIp6hrkYk6Vz23bLF+D7Ywri0nKxCxz++UTvhA9Z5l70Rvdd2aCzHHWZqIOZZDQr
3A0+e3wvB7BaSLjPXnMbzutPnMIoDjyj7juoPVNqCgynIQ==
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:22 2025 by rpki-client