Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/6Zp9qhuJ7dxdBCAgd5__iELlPCk.roa
File: 6Zp9qhuJ7dxdBCAgd5__iELlPCk.roa (raw, json)
Hash identifier: cToJ6urjtRkBvRK35UPrzOd0uWCJVgb7/Yiw0ySoKxo=
Subject key identifier: E9:9A:7D:AA:1B:89:ED:DC:5D:04:20:20:77:9F:FF:88:42:E5:3C:29
Certificate issuer: /CN=9fe94d2eedcd824ac1de74ade36c1f9d69d496ca
Certificate serial: 019420D64E9684156DFD46474BA50BF8BE3D
Authority key identifier: 9F:E9:4D:2E:ED:CD:82:4A:C1:DE:74:AD:E3:6C:1F:9D:69:D4:96:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/6Zp9qhuJ7dxdBCAgd5__iELlPCk.roa
Signing time: Wed 01 Jan 2025 07:48:23 +0000
ROA not before: Wed 01 Jan 2025 07:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59517
IP address blocks: 176.122.200.0/21 maxlen: 21
176.122.200.0/24 maxlen: 24
176.122.201.0/24 maxlen: 24
176.122.202.0/24 maxlen: 24
176.122.203.0/24 maxlen: 24
176.122.204.0/24 maxlen: 24
176.122.205.0/24 maxlen: 24
176.122.206.0/24 maxlen: 24
176.122.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:4e:96:84:15:6d:fd:46:47:4b:a5:0b:f8:be:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe94d2eedcd824ac1de74ade36c1f9d69d496ca
Validity
Not Before: Jan 1 07:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e99a7daa1b89eddc5d042020779fff8842e53c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:97:66:11:83:01:7b:5c:62:82:81:7b:9b:7e:
df:f4:96:cd:01:05:94:aa:50:6f:ee:39:d6:a6:1a:
98:a0:47:85:c9:23:f5:f1:2a:39:c6:6a:e3:01:5d:
db:ab:b6:19:7f:ba:88:36:61:b3:6f:23:ea:28:b5:
25:77:2b:54:f4:63:45:8c:46:65:a5:0c:86:7d:01:
12:84:da:cf:9b:a3:c5:fb:8f:fd:2c:6b:07:2d:05:
8c:48:7a:24:b1:dc:75:22:8c:d2:dc:35:8e:ba:da:
74:3c:1b:f4:bc:7b:35:9a:ac:50:73:fd:63:3c:01:
85:e8:38:d2:c6:5a:39:ba:07:4a:40:38:43:ac:75:
fa:87:ec:7d:0f:35:9b:eb:bf:54:87:ff:a4:c9:23:
00:12:85:36:63:1c:ee:8d:5b:d0:24:59:96:3f:0e:
50:25:ae:02:d4:99:30:e3:7c:97:e8:15:fb:f8:43:
ff:a1:e7:86:ba:ae:31:1b:06:58:6e:d3:a3:70:ec:
e5:22:3c:f3:3b:b6:69:62:76:38:57:4b:6f:b5:d7:
e8:58:bc:17:0c:96:be:96:1b:e9:6d:df:a2:d0:fb:
29:fa:b8:50:e7:13:11:05:fc:e2:05:f8:28:9e:d3:
83:ce:4c:eb:cc:3e:58:f7:57:57:f5:9f:13:f9:98:
91:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:9A:7D:AA:1B:89:ED:DC:5D:04:20:20:77:9F:FF:88:42:E5:3C:29
X509v3 Authority Key Identifier:
keyid:9F:E9:4D:2E:ED:CD:82:4A:C1:DE:74:AD:E3:6C:1F:9D:69:D4:96:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/6Zp9qhuJ7dxdBCAgd5__iELlPCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.122.200.0/21
Signature Algorithm: sha256WithRSAEncryption
8c:6f:88:db:63:d7:34:27:3c:41:ec:35:81:e3:10:98:69:a4:
9c:1f:fa:a7:8f:34:8d:40:f6:30:53:5e:46:13:12:ba:4a:99:
4e:8f:04:54:f5:65:92:79:ac:74:d8:62:4b:4c:6d:6c:2c:41:
72:9b:f1:8b:1c:97:ac:60:dd:64:72:ff:fe:e7:20:f9:37:b2:
24:79:9b:b4:27:b3:7f:8c:2d:2d:3e:99:fc:2a:0a:f9:bd:b9:
97:0b:d1:b9:2b:44:04:dd:b3:8d:78:a5:df:48:5a:37:3b:f3:
71:da:fe:5a:0e:71:ef:78:06:8d:c2:4d:1e:ce:b5:e2:fe:64:
af:56:1b:6e:37:bc:cc:d2:53:b1:02:c9:90:94:46:20:c0:83:
a7:bf:40:1b:93:42:25:f6:bc:02:05:73:ec:d2:49:b8:97:d3:
db:93:f1:d2:ab:48:d9:3b:75:e1:e2:3d:7b:a8:e1:a5:a1:1f:
79:ab:da:f7:ba:53:e3:91:3f:61:87:88:c3:33:d6:7c:14:65:
97:40:e4:1b:47:d2:59:d1:e6:fd:a9:6c:f0:c3:c8:cc:44:67:
1e:24:5b:28:d4:be:c4:ef:a4:0f:6c:55:e6:c9:1d:bb:8f:f9:
14:79:e0:d0:d3:61:6f:0c:8c:7b:38:ab:a3:63:a5:af:05:7e:
e9:26:b5:b0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1k6WhBVt/UZHS6UL+L49MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZTk0ZDJlZWRjZDgyNGFjMWRlNzRhZGUzNmMxZjlkNjlk
NDk2Y2EwHhcNMjUwMTAxMDc0ODIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTlhN2RhYTFiODllZGRjNWQwNDIwMjA3NzlmZmY4ODQyZTUzYzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5dmEYMBe1xigoF7m37f9JbNAQWU
qlBv7jnWphqYoEeFySP18So5xmrjAV3bq7YZf7qINmGzbyPqKLUldytU9GNFjEZl
pQyGfQEShNrPm6PF+4/9LGsHLQWMSHoksdx1IozS3DWOutp0PBv0vHs1mqxQc/1j
PAGF6DjSxlo5ugdKQDhDrHX6h+x9DzWb679Uh/+kySMAEoU2YxzujVvQJFmWPw5Q
Ja4C1Jkw43yX6BX7+EP/oeeGuq4xGwZYbtOjcOzlIjzzO7ZpYnY4V0tvtdfoWLwX
DJa+lhvpbd+i0Psp+rhQ5xMRBfziBfgontODzkzrzD5Y91dX9Z8T+ZiRiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOmafaobie3cXQQgIHef/4hC5TwpMB8GA1UdIwQY
MBaAFJ/pTS7tzYJKwd50reNsH51p1JbKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbi1sTkx1M05na3JCM25TdDQyd2ZuV25VbHNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82NjBlNTQtNWM4NS00ZDI1LThlNjEt
N2NhMTFkYzNhZTgyLzEvNlpwOXFodUo3ZHhkQkNBZ2Q1X19pRUxsUENrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82NjBlNTQtNWM4NS00ZDI1LThlNjEtN2NhMTFkYzNhZTgy
LzEvbi1sTkx1M05na3JCM25TdDQyd2ZuV25VbHNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDsHrIMA0G
CSqGSIb3DQEBCwUAA4IBAQCMb4jbY9c0JzxB7DWB4xCYaaScH/qnjzSNQPYwU15G
ExK6SplOjwRU9WWSeax02GJLTG1sLEFym/GLHJesYN1kcv/+5yD5N7IkeZu0J7N/
jC0tPpn8Kgr5vbmXC9G5K0QE3bONeKXfSFo3O/Nx2v5aDnHveAaNwk0ezrXi/mSv
VhtuN7zM0lOxAsmQlEYgwIOnv0Abk0Il9rwCBXPs0km4l9Pbk/HSq0jZO3Xh4j17
qOGloR95q9r3ulPjkT9hh4jDM9Z8FGWXQOQbR9JZ0eb9qWzww8jMRGceJFso1L7E
76QPbFXmyR27j/kUeeDQ02FvDIx7OKujY6WvBX7pJrWw
-----END CERTIFICATE-----
Generated at Sun Mar 9 19:02:42 2025 by rpki-client