Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/6Wce0HwyXHqQ5XvowobWiCGASj8.roa
File: 6Wce0HwyXHqQ5XvowobWiCGASj8.roa (raw, json)
Hash identifier: JFU8RjnJrDHjFA6pQUpW2/JnNtPldCW7iPpp3L9hrfw=
Subject key identifier: E9:67:1E:D0:7C:32:5C:7A:90:E5:7B:E8:C2:86:D6:88:21:80:4A:3F
Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial: 0194228E2A44182CCBC983314F1018976982
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/6Wce0HwyXHqQ5XvowobWiCGASj8.roa
Signing time: Wed 01 Jan 2025 15:48:49 +0000
ROA not before: Wed 01 Jan 2025 15:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212669
IP address blocks: 31.14.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:2a:44:18:2c:cb:c9:83:31:4f:10:18:97:69:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
Validity
Not Before: Jan 1 15:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9671ed07c325c7a90e57be8c286d68821804a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:43:c3:0a:a8:67:43:63:35:75:41:53:90:01:
96:e9:ed:1d:40:d7:09:8c:e8:fc:91:84:89:5f:dc:
81:6e:62:1a:ac:ce:45:76:66:91:d8:b6:2b:0c:ff:
85:ce:9a:49:d5:e0:dd:f0:b1:d2:95:50:71:05:8f:
81:02:c2:63:9b:66:17:c7:e9:77:78:a2:45:c0:00:
f2:4f:e6:57:83:48:af:67:2f:2d:b0:0a:19:c3:3b:
2c:c2:0c:6e:af:50:7c:54:e3:81:00:f8:31:84:f3:
94:a3:1f:13:0e:22:ac:83:e8:fa:14:4b:39:09:30:
76:d6:5f:85:29:8e:86:ba:52:51:2b:5c:e1:5f:ca:
33:b2:63:51:4f:55:73:f6:9a:d9:79:2c:77:ce:a5:
32:7e:d9:f0:68:92:6a:c5:75:6f:3a:96:72:65:0b:
de:d7:f3:b5:7c:b8:25:f5:30:b3:54:8d:ec:65:6b:
c4:68:97:1e:e5:69:6b:b8:5f:00:2f:a2:a1:5d:27:
46:cb:1b:33:41:d1:26:8b:7a:86:c3:20:da:73:43:
df:a5:11:56:a7:a2:5d:3c:18:eb:7e:c0:23:de:ac:
d8:22:ce:e1:6d:39:49:48:bd:f4:1c:df:6f:cc:3f:
3b:fa:53:20:7f:40:7d:6f:c8:41:9e:f6:e8:0a:0e:
05:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:67:1E:D0:7C:32:5C:7A:90:E5:7B:E8:C2:86:D6:88:21:80:4A:3F
X509v3 Authority Key Identifier:
keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/6Wce0HwyXHqQ5XvowobWiCGASj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.36.0/24
Signature Algorithm: sha256WithRSAEncryption
67:69:8c:96:23:58:18:58:05:54:f4:b5:54:81:73:ca:cf:b1:
bf:31:b9:89:dc:d2:96:36:ec:c5:de:62:b5:21:5d:94:63:37:
13:59:a5:08:83:3f:3c:33:6c:d1:15:08:aa:1c:2d:cc:92:fa:
8c:25:cb:78:fb:61:17:81:b1:fb:43:11:eb:60:b4:6c:bf:42:
9d:98:a7:80:45:2f:fc:13:0b:57:de:23:66:a2:94:48:8a:8f:
55:bd:c0:98:11:e9:3d:82:d5:4c:eb:03:60:77:1d:1c:45:fa:
76:20:66:b9:b1:45:c6:30:23:7d:8b:a4:f1:77:d3:d8:ce:c9:
24:06:da:48:ca:5a:dc:b9:ed:94:00:e6:11:dd:d5:e6:8c:aa:
4a:bf:ef:97:4a:39:dc:4f:3f:91:91:e5:11:19:a1:a3:eb:4e:
3d:61:23:0e:14:b2:d0:d8:fc:af:3d:90:42:a5:06:78:bf:83:
af:9b:03:ce:10:b3:56:79:d6:86:b2:0c:f4:71:a8:07:7f:59:
fe:75:85:98:e4:ed:45:f5:ad:38:26:e6:4d:3a:18:36:37:6f:
c5:fb:ef:44:01:72:ae:46:5a:9d:07:57:a2:34:49:68:8e:ec:
24:4c:4f:7b:1f:b4:d6:06:ca:d1:56:7a:d4:48:91:83:7f:69:
d2:d8:76:c3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijipEGCzLyYMxTxAYl2mCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MThiNzM0MzQ5YmYzMjdkOTQ1M2I5NjUwMWU0NGIxOTJl
NTUxNDIwHhcNMjUwMTAxMTU0ODQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTY3MWVkMDdjMzI1YzdhOTBlNTdiZThjMjg2ZDY4ODIxODA0YTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0PDCqhnQ2M1dUFTkAGW6e0dQNcJ
jOj8kYSJX9yBbmIarM5FdmaR2LYrDP+FzppJ1eDd8LHSlVBxBY+BAsJjm2YXx+l3
eKJFwADyT+ZXg0ivZy8tsAoZwzsswgxur1B8VOOBAPgxhPOUox8TDiKsg+j6FEs5
CTB21l+FKY6GulJRK1zhX8ozsmNRT1Vz9prZeSx3zqUyftnwaJJqxXVvOpZyZQve
1/O1fLgl9TCzVI3sZWvEaJce5WlruF8AL6KhXSdGyxszQdEmi3qGwyDac0PfpRFW
p6JdPBjrfsAj3qzYIs7hbTlJSL30HN9vzD87+lMgf0B9b8hBnvboCg4FhQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOlnHtB8Mlx6kOV76MKG1oghgEo/MB8GA1UdIwQY
MBaAFDcYtzQ0m/Mn2UU7llAeRLGS5VFCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnhpM05EU2I4eWZaUlR1V1VCNUVzWkxsVVVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YmY4YTgtZTQ5Yy00MDZlLThlYjct
YzgyM2NjOGYzODM3LzEvNldjZTBId3lYSHFRNVh2b3dvYldpQ0dBU2o4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My83YmY4YTgtZTQ5Yy00MDZlLThlYjctYzgyM2NjOGYzODM3
LzEvTnhpM05EU2I4eWZaUlR1V1VCNUVzWkxsVVVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHw4kMA0G
CSqGSIb3DQEBCwUAA4IBAQBnaYyWI1gYWAVU9LVUgXPKz7G/MbmJ3NKWNuzF3mK1
IV2UYzcTWaUIgz88M2zRFQiqHC3MkvqMJct4+2EXgbH7QxHrYLRsv0KdmKeARS/8
EwtX3iNmopRIio9VvcCYEek9gtVM6wNgdx0cRfp2IGa5sUXGMCN9i6Txd9PYzskk
BtpIylrcue2UAOYR3dXmjKpKv++XSjncTz+RkeURGaGj6049YSMOFLLQ2PyvPZBC
pQZ4v4OvmwPOELNWedaGsgz0cagHf1n+dYWY5O1F9a04JuZNOhg2N2/F++9EAXKu
RlqdB1eiNElojuwkTE97H7TWBsrRVnrUSJGDf2nS2HbD
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:39:56 2025 by rpki-client