Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/1tP6HbCLfJQolIJff1meJLf4HpI.roa
File: 1tP6HbCLfJQolIJff1meJLf4HpI.roa (raw, json)
Hash identifier: Jqq8+MBFvN33b5MWz0+bttdbA5gDNeaR+L9jbZUqu6E=
Subject key identifier: D6:D3:FA:1D:B0:8B:7C:94:28:94:82:5F:7F:59:9E:24:B7:F8:1E:92
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 01964E14D5DA9B23ABF75B8CC51A173B2105
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/1tP6HbCLfJQolIJff1meJLf4HpI.roa
Signing time: Sat 19 Apr 2025 12:45:10 +0000
ROA not before: Sat 19 Apr 2025 12:45:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198926
IP address blocks: 188.212.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:14:d5:da:9b:23:ab:f7:5b:8c:c5:1a:17:3b:21:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Apr 19 12:45:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6d3fa1db08b7c942894825f7f599e24b7f81e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bf:1a:02:c8:7a:93:34:72:40:14:73:32:e5:
0d:15:01:a6:56:10:6d:9c:bb:7a:fc:85:b9:67:28:
2e:c6:48:e0:16:8f:6c:38:39:e8:46:d2:c2:9e:b5:
76:d9:db:53:06:a4:74:83:e1:a3:b2:5c:95:fd:c7:
df:26:46:7a:a0:8b:b8:e3:f9:00:18:7d:c7:39:e9:
c3:5f:00:14:f2:3e:4f:64:71:eb:20:df:1f:7e:85:
0e:ff:85:9b:4f:fe:1a:53:8b:91:12:ec:ad:2f:29:
2e:8b:9d:83:82:ff:a1:c9:28:78:a1:fd:69:c9:38:
4d:92:1c:63:4c:56:e0:c6:85:4f:42:1b:ef:66:1e:
00:61:48:0d:b2:bd:5d:6f:fe:fb:25:c9:c8:02:73:
59:c3:b1:0d:0b:b8:04:63:f0:33:96:cf:39:27:e9:
21:bb:73:7a:b7:64:f5:e8:42:d2:26:ce:a8:d8:02:
79:99:59:9e:3c:85:ff:3c:bc:94:64:35:bf:f1:4b:
14:92:18:6c:4d:31:18:79:b7:fa:e3:b7:44:bc:37:
8b:b1:38:c7:66:a3:24:3a:82:78:93:89:9a:00:b3:
32:77:40:e7:0a:f2:9d:f0:16:17:95:cb:c4:bb:ee:
d0:e2:f1:d3:dc:32:1b:b4:66:6e:7f:7c:19:ad:5b:
6e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D3:FA:1D:B0:8B:7C:94:28:94:82:5F:7F:59:9E:24:B7:F8:1E:92
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/1tP6HbCLfJQolIJff1meJLf4HpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.212.97.0/24
Signature Algorithm: sha256WithRSAEncryption
16:3a:0d:8c:33:3e:47:3f:96:1b:84:04:26:c8:fe:5f:fd:e0:
04:8b:73:26:56:bb:1f:e8:d2:a3:5d:f4:dc:74:38:0c:e3:fa:
0d:75:f9:d4:1c:4e:db:0f:41:85:6a:f2:69:16:e7:7b:33:bf:
0b:a7:4c:8c:2d:0f:00:53:42:76:14:1f:6f:91:74:4f:bb:5b:
d3:e1:31:45:42:f7:2d:b3:ca:05:34:ee:e5:75:12:35:85:08:
ad:72:a2:be:6d:09:36:13:88:68:48:da:fd:f6:05:16:47:1b:
9c:c3:30:a0:02:7c:87:03:e6:38:ed:84:3e:03:e2:f5:7d:cc:
c0:43:66:64:a7:2b:90:17:bb:78:49:96:9e:b2:1d:50:77:ee:
86:e4:2e:3b:a4:b6:7a:a0:3d:70:8d:ac:10:f0:89:2e:5a:be:
01:17:63:6b:0c:2f:f3:a7:d6:06:8a:d6:f7:ad:a4:cb:d0:fe:
10:96:d7:4e:55:a7:09:64:b5:60:cc:88:2f:82:88:77:f8:3c:
4c:7d:61:7c:14:df:9d:44:31:91:24:ff:18:3d:f6:76:f2:68:
3f:43:05:ad:0a:c2:7d:eb:ae:c3:29:6e:d8:66:84:d3:7d:51:
49:c6:9d:3f:77:70:36:31:e9:04:66:71:28:ee:65:0f:12:df:
2f:78:a7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:12:23 2025 by rpki-client