Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/6EqmJwY45la03_mL9DqzIU_pULc.roa
File: 6EqmJwY45la03_mL9DqzIU_pULc.roa (raw, json)
Hash identifier: bAAWeDZY2eZUPUFFXbJVDE3ll20OGhbDr+oRfmrEiVM=
Subject key identifier: E8:4A:A6:27:06:38:E6:56:B4:DF:F9:8B:F4:3A:B3:21:4F:E9:50:B7
Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819
Certificate serial: 019731DE8BB31F6677723C082DA648BBC931
Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/6EqmJwY45la03_mL9DqzIU_pULc.roa
Signing time: Mon 02 Jun 2025 18:19:17 +0000
ROA not before: Mon 02 Jun 2025 18:19:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8932
IP address blocks: 46.36.124.0/22 maxlen: 24
46.162.220.0/22 maxlen: 24
185.48.240.0/22 maxlen: 24
2a00:cc40:1::/48 maxlen: 48
2a00:cc40:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:31:de:8b:b3:1f:66:77:72:3c:08:2d:a6:48:bb:c9:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819
Validity
Not Before: Jun 2 18:19:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e84aa6270638e656b4dff98bf43ab3214fe950b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:12:a7:29:50:d8:c1:08:70:4b:01:2b:a8:2f:
b5:3b:df:33:5e:80:8b:e3:ee:af:c5:88:ed:8c:28:
53:27:aa:78:47:bf:ce:00:d2:c6:5e:3c:02:f4:ec:
18:f1:b3:99:ef:2f:9b:c9:71:bc:49:25:e8:bc:3e:
43:b9:51:da:3e:66:c9:6e:03:c8:fc:16:6d:c7:a3:
63:82:af:0f:23:2d:2d:f2:c4:af:39:22:4a:c9:35:
51:ec:02:77:42:a7:0e:2f:00:b5:d1:2c:74:98:9b:
a4:ba:ee:0d:92:65:4e:8b:32:6a:39:b9:29:31:76:
2a:b7:80:83:84:d9:d3:58:65:ee:6c:89:6a:3f:32:
56:b4:4a:f7:b4:f5:a1:8a:14:f8:fe:9d:7e:23:34:
1f:ae:f0:49:82:19:94:17:30:b0:b1:90:94:d0:82:
6b:fb:f1:d6:e0:a3:50:1d:e1:2e:f5:79:7e:5b:f6:
a2:bc:b8:91:a6:e7:b9:bc:a9:33:a4:01:89:c4:0b:
79:bb:bc:48:1c:55:df:14:94:ac:0b:19:4d:d5:70:
26:1f:a2:57:b3:2c:55:2e:05:39:bf:2f:48:c4:a3:
60:ad:1a:d4:6a:8b:09:d5:0e:18:72:41:0a:51:fb:
77:68:19:05:42:08:d6:13:32:da:5f:a7:47:e6:e1:
cf:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:4A:A6:27:06:38:E6:56:B4:DF:F9:8B:F4:3A:B3:21:4F:E9:50:B7
X509v3 Authority Key Identifier:
keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/6EqmJwY45la03_mL9DqzIU_pULc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.124.0/22
46.162.220.0/22
185.48.240.0/22
IPv6:
2a00:cc40:1::-2a00:cc40:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
17:d9:56:e9:5e:74:d3:77:48:47:89:a6:96:26:e4:f3:b4:6d:
47:aa:66:a5:7a:71:21:c8:68:0b:7d:70:1f:48:6e:91:ff:5e:
06:c1:0c:81:67:8d:c1:2e:aa:4b:d4:c3:b4:5f:fa:7e:c9:58:
d3:3a:80:33:18:93:90:c5:19:e1:dd:e7:1e:d8:74:2f:b8:2b:
da:0a:cd:bf:49:73:5b:c4:45:0c:3d:45:5f:94:d6:9c:ac:e9:
dd:5e:04:53:fd:70:70:5d:da:de:0e:1f:a5:11:ea:ec:8b:c1:
28:ce:44:9f:5b:ae:52:c6:a7:a7:46:59:e3:bc:a6:e8:78:2c:
6b:38:d7:de:39:4b:72:5a:c4:6b:d5:2a:ee:43:d3:89:49:94:
34:37:f3:c5:74:1b:39:00:8d:62:49:f1:cd:f8:01:2f:bd:bb:
82:e4:75:10:e1:7b:10:52:28:ca:10:42:42:19:62:95:cf:31:
ae:21:cf:d4:6f:8d:4d:5d:59:72:3b:8b:14:84:01:93:81:64:
12:9b:2c:06:8b:2d:a6:c2:9c:ac:bb:c5:dc:44:ac:0e:3b:0d:
50:0e:9d:af:70:33:f8:34:05:e6:8c:4d:37:00:9a:f7:d6:0c:
a7:79:6a:6c:7a:d1:20:63:ff:62:79:a2:51:81:23:03:2c:71:
8e:8e:21:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 04:33:41 2025 by rpki-client