Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/6fALmraPYTNzrDxh6vD4pXx9NNo.roa
File: 6fALmraPYTNzrDxh6vD4pXx9NNo.roa (raw, json)
Hash identifier: IR39vkYsMLt99b48+vTeA5PN8tz8iuYqmEyOAKvAc/A=
Subject key identifier: E9:F0:0B:9A:B6:8F:61:33:73:AC:3C:61:EA:F0:F8:A5:7C:7D:34:DA
Certificate issuer: /CN=b817162877da9f4030bbcb9fe8ac143e6ab2871b
Certificate serial: 0194258F36C8CEDF32CEDA687A898F0A7767
Authority key identifier: B8:17:16:28:77:DA:9F:40:30:BB:CB:9F:E8:AC:14:3E:6A:B2:87:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBcWKHfan0Awu8uf6KwUPmqyhxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/6fALmraPYTNzrDxh6vD4pXx9NNo.roa
Signing time: Thu 02 Jan 2025 05:48:50 +0000
ROA not before: Thu 02 Jan 2025 05:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64484
IP address blocks: 62.3.33.0/24 maxlen: 24
2a0e:1e40::/29 maxlen: 29
2a0e:1e40::/48 maxlen: 48
2a0e:1e40:1::/48 maxlen: 48
2a0e:1e40:c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uBcWKHfan0Awu8uf6KwUPmqyhxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uBcWKHfan0Awu8uf6KwUPmqyhxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uBcWKHfan0Awu8uf6KwUPmqyhxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:36:c8:ce:df:32:ce:da:68:7a:89:8f:0a:77:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b817162877da9f4030bbcb9fe8ac143e6ab2871b
Validity
Not Before: Jan 2 05:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9f00b9ab68f613373ac3c61eaf0f8a57c7d34da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fd:90:99:ad:4a:c3:8a:f9:fd:1d:92:b4:76:
62:e8:cb:57:9f:f8:7d:50:fb:3e:59:a5:ca:1c:f3:
4a:57:5c:8e:e4:e2:57:76:2e:44:72:d8:46:9a:c1:
92:dd:c0:da:c9:e9:5f:03:c9:f3:aa:53:52:7d:fb:
73:78:c6:3d:d9:50:c8:ac:f1:60:f1:b1:24:b8:bf:
89:1c:b6:f7:a6:52:a8:04:3e:de:93:19:ee:d8:66:
cf:e1:d5:aa:1c:c1:73:bc:da:8a:d8:96:55:a1:69:
77:a2:06:ac:86:2d:64:2a:c5:55:55:74:d9:17:a0:
8b:8d:ed:a8:33:9e:72:1d:75:95:31:12:6b:e9:67:
ed:95:84:ab:6b:54:23:cc:83:21:9c:8a:c7:b0:62:
64:44:e8:97:93:1e:db:ce:18:ec:19:2b:4c:a7:39:
ce:c3:95:ce:8f:81:60:d3:04:43:fc:07:37:f9:9e:
9b:bf:00:db:41:be:dc:3a:40:ff:87:de:d3:9c:be:
c1:8c:8c:5c:7e:ad:8d:75:69:4c:96:8a:81:9f:4e:
4a:0e:a9:af:bf:9e:42:c4:5a:a1:e2:98:f6:2e:5a:
21:90:8a:31:40:a4:5b:b5:c0:ee:47:8f:0a:7f:49:
ab:80:89:aa:cd:6c:d1:8e:2a:19:c9:72:e4:58:e1:
a4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F0:0B:9A:B6:8F:61:33:73:AC:3C:61:EA:F0:F8:A5:7C:7D:34:DA
X509v3 Authority Key Identifier:
keyid:B8:17:16:28:77:DA:9F:40:30:BB:CB:9F:E8:AC:14:3E:6A:B2:87:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBcWKHfan0Awu8uf6KwUPmqyhxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/6fALmraPYTNzrDxh6vD4pXx9NNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uBcWKHfan0Awu8uf6KwUPmqyhxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.33.0/24
IPv6:
2a0e:1e40::/29
Signature Algorithm: sha256WithRSAEncryption
4d:ef:a7:58:c8:da:b9:fb:ee:1c:3d:ed:86:d5:20:2e:ed:37:
78:a6:9b:6c:92:b3:a0:bf:fa:b5:14:23:15:6e:cd:de:e9:a3:
9b:a5:3d:77:96:42:c8:54:89:a8:9c:60:c1:99:88:eb:dd:71:
ab:2d:e6:14:c7:79:04:be:17:a6:a6:b5:88:16:71:6d:3b:c2:
39:a0:0b:f0:06:7f:7f:82:c0:69:83:98:38:11:08:8e:42:6d:
c0:cf:d7:88:34:0c:24:8f:d6:79:97:0f:a7:4b:d6:00:fe:bc:
57:37:68:e0:75:03:6f:f6:d1:cc:ec:3b:7e:24:eb:be:d8:08:
2c:75:d3:1d:05:49:59:bd:10:de:ba:c7:c5:8a:d0:39:de:56:
90:61:59:f0:cb:91:50:7b:78:94:e0:69:f8:ba:ed:07:fd:08:
93:db:1b:75:68:47:63:94:18:dc:d7:8e:e1:d7:38:a7:b7:47:
f2:1e:70:49:65:3e:d6:74:80:7d:2c:8c:d7:d2:01:46:00:a3:
2f:f6:cc:97:cc:6e:0e:5d:e2:29:5f:5c:1d:cc:be:42:33:1f:
6f:61:6e:18:b9:c9:38:3d:cb:9a:8f:64:28:4d:07:14:2a:6a:
15:e1:c6:6c:7d:f7:f5:5c:9e:2a:e6:e2:73:f8:e0:bd:78:bc:
3f:58:52:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:30:27 2025 by rpki-client