Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/O6G70f_k228z-ZHm2ohB4tt-ekc.roa
File: O6G70f_k228z-ZHm2ohB4tt-ekc.roa (raw, json)
Hash identifier: /bGnkVKQw6cLnt6o6jgq/vbGsus5bIRs/NypwJUrJ1g=
Subject key identifier: 3B:A1:BB:D1:FF:E4:DB:6F:33:F9:91:E6:DA:88:41:E2:DB:7E:7A:47
Certificate issuer: /CN=642f241ccca2782b5fc407e1bbaf7a97a9847460
Certificate serial: 019427481B2A570D949683EE2E9F24BA1091
Authority key identifier: 64:2F:24:1C:CC:A2:78:2B:5F:C4:07:E1:BB:AF:7A:97:A9:84:74:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/O6G70f_k228z-ZHm2ohB4tt-ekc.roa
Signing time: Thu 02 Jan 2025 13:50:24 +0000
ROA not before: Thu 02 Jan 2025 13:50:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14907
IP address blocks: 195.200.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 07:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:1b:2a:57:0d:94:96:83:ee:2e:9f:24:ba:10:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642f241ccca2782b5fc407e1bbaf7a97a9847460
Validity
Not Before: Jan 2 13:50:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ba1bbd1ffe4db6f33f991e6da8841e2db7e7a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9c:61:3e:b1:4c:e0:0e:91:bd:ba:a5:84:e6:
fa:e9:45:79:61:0d:3c:81:1f:30:bf:c2:de:8f:9d:
f0:14:04:2b:50:5a:63:ce:d9:f5:49:c4:15:77:a0:
4e:f2:b2:6d:ac:4c:b6:1f:c7:68:04:c7:0a:54:89:
0c:60:42:69:c9:5c:f8:1b:89:45:0c:63:68:37:6b:
44:f4:f5:39:38:1f:0d:24:a9:42:af:76:0a:4b:51:
c9:20:0d:2d:cf:d0:ba:7c:49:3c:8c:5d:c3:ea:13:
9b:d0:78:e6:cd:2a:db:df:5d:4c:f7:90:ab:5f:bf:
ef:75:2d:f7:c2:b3:41:fa:0d:2f:d1:07:a9:af:13:
27:ee:b7:df:22:1d:86:8b:b8:1b:5f:bd:6e:c7:d1:
d9:ad:c6:5d:4b:6d:7f:70:6e:e0:86:2c:eb:55:1c:
9c:6b:d5:d2:09:75:de:3b:9e:a7:be:06:ae:d8:ef:
5d:cc:6b:d9:c1:4f:72:30:9f:ef:41:4b:8c:b0:6d:
2d:b2:58:b4:a0:d4:1a:7e:ff:92:41:c2:0d:7b:78:
e3:67:15:7e:64:b7:b0:79:30:27:67:63:95:48:3b:
68:0b:b7:86:d4:5f:d2:22:2c:70:8a:e7:97:74:fb:
d0:59:7c:4e:f7:18:c6:27:14:1a:70:4a:47:79:28:
7e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A1:BB:D1:FF:E4:DB:6F:33:F9:91:E6:DA:88:41:E2:DB:7E:7A:47
X509v3 Authority Key Identifier:
keyid:64:2F:24:1C:CC:A2:78:2B:5F:C4:07:E1:BB:AF:7A:97:A9:84:74:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/O6G70f_k228z-ZHm2ohB4tt-ekc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.200.68.0/24
Signature Algorithm: sha256WithRSAEncryption
25:d2:a5:aa:6c:f5:9c:87:47:81:01:d3:17:9e:7e:6d:23:03:
ce:90:06:5a:06:88:23:58:3f:7c:7c:34:95:06:28:fb:10:6c:
1d:a8:47:7c:0d:08:52:94:d4:ba:11:b7:f2:c7:9c:5e:9a:4f:
8a:2d:e5:bc:2f:78:c7:90:9a:94:de:44:12:3b:f5:74:b7:c6:
6c:69:42:86:e4:5b:cb:16:17:e5:01:e0:bc:28:06:f8:12:db:
dd:3e:90:09:91:04:ed:fa:02:dc:b8:2e:b4:c8:52:ac:6c:6c:
25:e0:36:c2:81:25:d7:03:a4:4d:1a:7c:76:77:77:bf:51:de:
25:9c:8c:ba:89:d4:13:4e:65:aa:01:5c:2e:f8:62:32:ce:12:
41:19:fe:7a:c4:81:cc:95:22:db:e5:6e:92:ef:c1:20:c2:10:
cf:00:f2:75:bd:1f:56:e9:31:fb:e4:8e:44:aa:91:d4:63:40:
74:8a:09:f4:4c:02:0f:0e:dd:c7:2c:17:93:c7:8c:8a:ed:07:
4f:0b:ec:ab:e6:47:35:7a:8b:d2:56:b4:35:a7:06:d5:eb:86:
38:97:2f:32:98:a9:2b:22:9b:77:71:de:12:2a:4b:87:10:19:
d7:b8:0c:b6:d5:66:54:d7:06:75:08:18:c3:59:95:28:df:fc:
fe:c2:71:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 09:47:13 2025 by rpki-client