Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/6Ngsq65olBDUJisuRffyYd0UADA.roa
File: 6Ngsq65olBDUJisuRffyYd0UADA.roa (raw, json)
Hash identifier: NXzKSGgqlALps+6/tdtutR7aDzRsm/1K8Wd1xH6dS0M=
Subject key identifier: E8:D8:2C:AB:AE:68:94:10:D4:26:2B:2E:45:F7:F2:61:DD:14:00:30
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 019420D5B404006595603B7534EE9C332A59
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/6Ngsq65olBDUJisuRffyYd0UADA.roa
Signing time: Wed 01 Jan 2025 07:47:43 +0000
ROA not before: Wed 01 Jan 2025 07:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47377
IP address blocks: 90.84.96.0/19 maxlen: 24
2a01:c780::/32 maxlen: 64
2a01:caa0::/32 maxlen: 48
2a01:cc00::/32 maxlen: 48
2a01:cd20::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:b4:04:00:65:95:60:3b:75:34:ee:9c:33:2a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 07:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8d82cabae689410d4262b2e45f7f261dd140030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d9:1c:8e:0c:67:40:58:5e:a6:e7:0c:d9:e4:
97:27:c9:9d:55:50:ac:86:e7:f3:a3:4d:a2:c4:3f:
52:74:a3:ef:7d:8d:bc:67:57:30:a4:c0:db:b4:44:
23:55:19:c4:26:f7:00:d3:33:1e:4b:ed:74:cb:de:
1e:6c:57:3a:25:5a:a0:46:50:26:76:07:a2:c6:59:
21:2e:80:95:3c:d5:2d:be:59:68:4e:5f:9b:25:86:
a3:08:34:b8:1b:59:0c:47:13:57:2b:f6:26:7b:77:
07:01:e4:5d:39:4c:34:b3:58:28:cf:a5:86:85:d8:
f7:21:ce:2f:6d:7d:51:b4:7c:25:03:39:40:3c:93:
63:d2:f2:e7:0a:d7:b7:d6:3e:7c:f0:bd:46:9a:50:
e0:5a:54:57:9e:06:32:3f:50:0d:4a:70:b6:75:2f:
72:3e:85:59:03:af:de:f0:47:7a:89:c7:98:11:37:
40:00:4b:5e:61:6f:67:36:2d:ee:53:71:9b:63:9d:
9e:05:b1:03:43:c9:6d:d3:c5:79:53:50:3a:25:b0:
8b:8f:7d:22:9b:d9:a6:f2:78:06:02:03:89:43:92:
5f:e7:2d:b3:14:39:a7:12:f4:34:06:d8:72:9a:48:
42:62:55:c0:8d:7d:c4:d5:86:2f:33:03:b6:2c:bc:
e7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D8:2C:AB:AE:68:94:10:D4:26:2B:2E:45:F7:F2:61:DD:14:00:30
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/6Ngsq65olBDUJisuRffyYd0UADA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.84.96.0/19
IPv6:
2a01:c780::/32
2a01:caa0::/32
2a01:cc00::/32
2a01:cd20::/32
Signature Algorithm: sha256WithRSAEncryption
92:fe:d3:f9:64:db:d5:a8:8b:6f:54:3f:b5:36:d4:f4:8d:ce:
7f:d1:56:af:0c:7b:b8:93:de:fc:23:c9:f2:04:c9:9f:cd:2c:
0e:99:fd:3d:78:d7:48:e5:f6:34:92:cd:75:b4:53:3a:94:96:
70:26:89:31:bb:90:7f:f0:cc:ac:48:f7:00:70:10:dc:8a:32:
b7:a1:6e:e8:ea:3a:70:5a:a7:90:0d:9f:97:b1:ce:5e:97:37:
44:2c:02:54:e4:9e:f8:2e:9b:40:ee:fa:ce:f5:ab:a3:e5:a0:
f2:d7:0e:b5:5b:93:89:59:95:e6:21:90:c7:24:fa:9a:7f:df:
32:c8:dc:2f:a7:73:4d:a7:6a:a7:18:04:05:f2:f7:86:47:c9:
a3:21:89:9d:b5:3d:00:67:2b:af:43:46:c1:d4:49:24:89:c2:
fd:b7:e6:1b:8c:39:7b:ea:19:bb:5f:f8:7e:e1:d8:59:23:d3:
ac:11:79:26:37:3c:3f:1d:fe:5f:58:34:e6:a6:a2:50:43:2a:
21:ee:a6:8d:4f:78:d3:5a:f5:e5:e9:7a:2a:f7:0a:d3:6c:cc:
7a:43:4e:95:d2:b4:3a:73:02:78:0d:6b:74:ab:2e:18:2e:d4:
00:16:df:4c:09:80:7a:55:f6:93:16:ef:63:a1:1e:11:90:b6:
a0:6f:29:48
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZQg1bQEAGWVYDt1NO6cMypZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh
MTA1MTEwHhcNMjUwMTAxMDc0NzQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGQ4MmNhYmFlNjg5NDEwZDQyNjJiMmU0NWY3ZjI2MWRkMTQwMDMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNkcjgxnQFhepucM2eSXJ8mdVVCs
hufzo02ixD9SdKPvfY28Z1cwpMDbtEQjVRnEJvcA0zMeS+10y94ebFc6JVqgRlAm
dgeixlkhLoCVPNUtvlloTl+bJYajCDS4G1kMRxNXK/Yme3cHAeRdOUw0s1goz6WG
hdj3Ic4vbX1RtHwlAzlAPJNj0vLnCte31j588L1GmlDgWlRXngYyP1ANSnC2dS9y
PoVZA6/e8Ed6iceYETdAAEteYW9nNi3uU3GbY52eBbEDQ8lt08V5U1A6JbCLj30i
m9mm8ngGAgOJQ5Jf5y2zFDmnEvQ0BthymkhCYlXAjX3E1YYvMwO2LLznJQIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFOjYLKuuaJQQ1CYrLkX38mHdFAAwMB8GA1UdIwQY
MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt
NDU5MzVmNTA2YTEyLzEvNk5nc3E2NW9sQkRVSmlzdVJmZnlZZDBVQURBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy
LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAMBAIAATAGAwQFWlRgMCIE
AgACMBwDBQAqAceAAwUAKgHKoAMFACoBzAADBQAqAc0gMA0GCSqGSIb3DQEBCwUA
A4IBAQCS/tP5ZNvVqItvVD+1NtT0jc5/0VavDHu4k978I8nyBMmfzSwOmf09eNdI
5fY0ks11tFM6lJZwJokxu5B/8MysSPcAcBDcijK3oW7o6jpwWqeQDZ+Xsc5elzdE
LAJU5J74LptA7vrO9auj5aDy1w61W5OJWZXmIZDHJPqaf98yyNwvp3NNp2qnGAQF
8veGR8mjIYmdtT0AZyuvQ0bB1EkkicL9t+YbjDl76hm7X/h+4dhZI9OsEXkmNzw/
Hf5fWDTmpqJQQyoh7qaNT3jTWvXl6Xoq9wrTbMx6Q06V0rQ6cwJ4DWt0qy4YLtQA
Ft9MCYB6VfaTFu9joR4RkLagbylI
-----END CERTIFICATE-----
Generated at Wed Apr 9 14:28:35 2025 by rpki-client