Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/6w6dIXihVpfkaMyxGLWEXae8jj8.roa
File: 6w6dIXihVpfkaMyxGLWEXae8jj8.roa (raw, json)
Hash identifier: TTxWzA0wv/GaxAe4ncjrkMK4x1Wkw/0pHgBN61uoloc=
Subject key identifier: EB:0E:9D:21:78:A1:56:97:E4:68:CC:B1:18:B5:84:5D:A7:BC:8E:3F
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 019420D5B92AF551762A3CA3A3CCE5556C6A
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/6w6dIXihVpfkaMyxGLWEXae8jj8.roa
Signing time: Wed 01 Jan 2025 07:47:44 +0000
ROA not before: Wed 01 Jan 2025 07:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206713
IP address blocks: 194.51.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:b9:2a:f5:51:76:2a:3c:a3:a3:cc:e5:55:6c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 07:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb0e9d2178a15697e468ccb118b5845da7bc8e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8c:8a:b4:99:f9:ff:af:6a:79:9b:56:19:ec:
29:4b:db:d8:3c:58:df:96:fb:fd:9c:a7:ed:cb:65:
6e:cc:19:d9:b4:93:61:fe:28:a1:11:11:0d:61:a6:
fd:e4:60:32:8f:5d:e0:36:0f:d8:9d:51:79:5f:5d:
9d:2a:e3:5b:d9:a7:84:ba:93:13:db:ed:f5:60:5f:
04:e3:b9:f2:a4:14:d6:c9:55:8c:83:f5:55:98:ee:
73:ca:94:4f:46:47:7e:fb:94:54:7a:27:bd:36:6a:
bb:85:cd:cb:95:c7:38:d4:39:4c:99:7c:bd:51:89:
6e:93:f0:e6:f0:34:85:14:5e:0d:ca:71:f5:51:c3:
d9:b5:e8:7b:e6:70:c4:45:31:0e:2f:86:ee:f7:d7:
b3:72:af:8e:61:03:38:e9:f7:97:18:f3:1d:a6:7e:
3e:fd:87:e9:8f:16:15:dd:24:f8:08:f5:1b:9d:48:
c5:c6:48:ee:05:0d:61:b6:38:87:24:19:44:0e:3b:
fe:29:1a:d5:98:7d:5e:1f:fc:6d:f0:50:cc:34:9b:
81:a9:75:23:2a:f5:90:a9:24:99:82:be:14:fb:81:
0b:99:90:a5:ac:7c:f7:da:a8:f2:4b:b5:53:e4:29:
cd:19:70:31:db:3c:a8:ec:2e:e6:31:32:90:96:8b:
12:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:0E:9D:21:78:A1:56:97:E4:68:CC:B1:18:B5:84:5D:A7:BC:8E:3F
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/6w6dIXihVpfkaMyxGLWEXae8jj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.51.35.0/24
Signature Algorithm: sha256WithRSAEncryption
30:97:a8:65:b3:11:b6:18:2d:f5:b1:73:da:f6:16:84:a5:da:
4b:cf:98:9d:75:c7:b8:ec:93:dc:54:31:36:42:f2:9e:7b:f7:
51:54:f3:6f:a1:92:72:bc:e2:37:84:3d:4c:98:c8:38:a5:ef:
8b:91:5a:5d:7a:eb:d2:69:2b:d4:78:6e:13:6b:a9:a6:e7:dd:
29:d1:61:6a:7d:60:01:e7:74:1f:f6:fe:48:51:04:e0:17:aa:
31:0b:10:b8:96:23:7d:8a:0b:b2:70:d3:ee:3c:2f:7e:e1:15:
aa:67:13:35:44:d8:43:5a:09:7b:c8:cf:ae:b8:1f:db:19:71:
db:c4:1e:3d:28:7b:80:1a:b8:08:60:c1:ff:ce:df:f7:d6:2a:
3e:81:9a:90:d8:40:b9:1c:4b:43:88:4f:c7:1d:4f:b1:4f:ef:
3e:fa:40:d6:5c:b3:3b:0b:aa:bb:0d:81:f7:12:63:aa:fd:96:
7b:e5:74:79:c7:43:40:de:b3:78:e1:23:f8:43:1f:ff:bf:ad:
e8:02:08:77:98:aa:a8:7e:42:5f:98:55:2e:b2:7d:62:bf:10:
2f:b1:f3:10:73:56:16:ad:7a:2b:4c:99:7b:2c:64:91:36:9b:
e5:e2:ce:88:15:a3:8e:12:6e:c4:23:ef:34:82:ef:5e:57:72:
8e:34:54:14
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1bkq9VF2Kjyjo8zlVWxqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh
MTA1MTEwHhcNMjUwMTAxMDc0NzQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjBlOWQyMTc4YTE1Njk3ZTQ2OGNjYjExOGI1ODQ1ZGE3YmM4ZTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroyKtJn5/69qeZtWGewpS9vYPFjf
lvv9nKfty2VuzBnZtJNh/iihERENYab95GAyj13gNg/YnVF5X12dKuNb2aeEupMT
2+31YF8E47nypBTWyVWMg/VVmO5zypRPRkd++5RUeie9Nmq7hc3Llcc41DlMmXy9
UYluk/Dm8DSFFF4NynH1UcPZteh75nDERTEOL4bu99ezcq+OYQM46feXGPMdpn4+
/YfpjxYV3ST4CPUbnUjFxkjuBQ1htjiHJBlEDjv+KRrVmH1eH/xt8FDMNJuBqXUj
KvWQqSSZgr4U+4ELmZClrHz32qjyS7VT5CnNGXAx2zyo7C7mMTKQlosSSQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOsOnSF4oVaX5GjMsRi1hF2nvI4/MB8GA1UdIwQY
MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt
NDU5MzVmNTA2YTEyLzEvNnc2ZElYaWhWcGZrYU15eEdMV0VYYWU4amo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy
LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjMjMA0G
CSqGSIb3DQEBCwUAA4IBAQAwl6hlsxG2GC31sXPa9haEpdpLz5iddce47JPcVDE2
QvKee/dRVPNvoZJyvOI3hD1MmMg4pe+LkVpdeuvSaSvUeG4Ta6mm590p0WFqfWAB
53Qf9v5IUQTgF6oxCxC4liN9iguycNPuPC9+4RWqZxM1RNhDWgl7yM+uuB/bGXHb
xB49KHuAGrgIYMH/zt/31io+gZqQ2EC5HEtDiE/HHU+xT+8++kDWXLM7C6q7DYH3
EmOq/ZZ75XR5x0NA3rN44SP4Qx//v63oAgh3mKqofkJfmFUusn1ivxAvsfMQc1YW
rXorTJl7LGSRNpvl4s6IFaOOEm7EI+80gu9eV3KONFQU
-----END CERTIFICATE-----
Generated at Wed Apr 9 14:18:20 2025 by rpki-client