Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/6Tq_leUsVpFgI85zp_wIyChN4WA.roa
File: 6Tq_leUsVpFgI85zp_wIyChN4WA.roa (raw, json)
Hash identifier: //rXy+p6IdrQ6jHZrRlFQGf563PHiLpmYBPTnbSHBxk=
Subject key identifier: E9:3A:BF:95:E5:2C:56:91:60:23:CE:73:A7:FC:08:C8:28:4D:E1:60
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 0196857A5A9A92D518FC24C9C2EF168A7F70
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/6Tq_leUsVpFgI85zp_wIyChN4WA.roa
Signing time: Wed 30 Apr 2025 06:55:10 +0000
ROA not before: Wed 30 Apr 2025 06:55:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 23470
IP address blocks: 213.137.93.0/24 maxlen: 24
213.137.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft
rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:7a:5a:9a:92:d5:18:fc:24:c9:c2:ef:16:8a:7f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Apr 30 06:55:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e93abf95e52c56916023ce73a7fc08c8284de160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:02:b9:95:53:ee:98:0d:85:66:c0:e1:b9:47:
c2:92:17:fd:e1:42:ff:3d:45:7d:a9:9c:16:ad:b9:
6a:84:5a:20:44:91:cf:c7:10:18:9f:1d:40:20:ce:
36:b9:cc:97:df:0e:20:55:a2:90:df:8b:ab:3e:00:
d7:de:ee:ea:be:bc:1a:08:a7:fb:2b:ce:f0:46:34:
8e:27:d4:48:32:25:21:6e:c1:7f:f7:5e:8f:13:69:
9e:37:11:f7:c0:72:94:cd:2d:24:fe:c9:7a:4a:fb:
d5:e7:04:eb:a0:0e:b5:cd:99:6b:1c:fe:1b:65:82:
63:ae:8f:2c:42:de:db:2d:4d:c1:b1:47:b3:f2:98:
e1:69:92:9f:3b:d6:57:23:4e:61:b0:5c:30:35:7e:
17:da:73:d9:81:dd:b3:17:c1:2e:05:6c:90:cc:02:
a7:8a:a7:f1:04:b5:d4:fb:3b:1e:1f:24:9a:f8:f1:
92:59:94:ee:e7:b7:1e:4d:d6:f5:a5:a7:34:c7:cd:
f3:33:85:55:de:74:ce:d6:ef:c7:86:4c:8a:fe:45:
d7:b9:6d:85:c5:37:a1:32:be:b4:01:c2:d2:b8:04:
9f:c7:6d:f5:64:25:f2:29:26:c0:68:3e:28:3f:43:
95:45:07:46:50:06:1f:af:18:40:5c:52:88:47:37:
6c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:3A:BF:95:E5:2C:56:91:60:23:CE:73:A7:FC:08:C8:28:4D:E1:60
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/6Tq_leUsVpFgI85zp_wIyChN4WA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.137.93.0-213.137.94.255
Signature Algorithm: sha256WithRSAEncryption
7d:2d:b0:ba:d8:45:ac:8f:12:17:c2:ee:d4:55:52:e2:7b:40:
c4:91:2f:ec:dd:c5:55:5e:97:5d:77:0e:ee:fd:67:14:bb:6f:
63:6a:2c:4b:fa:c6:8e:7d:ed:ad:f4:f2:db:36:9c:07:1c:51:
28:ca:cb:16:4a:95:9f:0a:0e:7c:ba:bb:38:b4:33:50:91:4c:
49:10:9b:e4:fe:35:ac:0e:31:6f:71:91:ca:a7:13:e1:62:ec:
2f:69:1b:77:e0:6d:e1:54:73:80:1e:72:bb:b7:a4:42:35:30:
42:75:6e:86:f6:63:9f:6c:a3:d6:a2:0b:34:06:80:66:2e:98:
55:0c:0d:c4:f2:75:e7:ce:c7:7a:7d:bc:4f:28:3f:f0:8e:e8:
52:e3:6f:3b:d3:df:5a:69:ed:e8:50:e8:86:a5:fe:ae:b3:99:
4b:dc:fa:4a:5e:c0:75:12:9f:1e:0c:72:69:24:ff:ad:16:d0:
65:11:d4:1e:e9:9e:55:c9:0d:df:05:d8:4a:cf:d2:eb:65:eb:
fe:91:9c:9f:be:8a:30:3b:7f:5f:e3:56:82:77:3a:2c:2e:ab:
41:12:c2:0f:31:49:84:c7:68:c1:43:83:45:51:58:2c:e4:c8:
13:da:29:59:44:7f:a9:2d:37:56:81:8d:6f:15:4f:9a:f2:c8:
66:5d:95:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:17:10 2025 by rpki-client