Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/6Y-dz23_E1vFq4knErbs01-uZMw.roa
File: 6Y-dz23_E1vFq4knErbs01-uZMw.roa (raw, json)
Hash identifier: rAKus0aYY6lzOdl0PAY4O4iIsDrPWnm0ZrrdK7p/52I=
Subject key identifier: E9:8F:9D:CF:6D:FF:13:5B:C5:AB:89:27:12:B6:EC:D3:5F:AE:64:CC
Certificate issuer: /CN=2d2cc139321951db276f3ffa293ac0a0f3fa8bf7
Certificate serial: 019715F48101771A55D99B385895D0B09ABB
Authority key identifier: 2D:2C:C1:39:32:19:51:DB:27:6F:3F:FA:29:3A:C0:A0:F3:FA:8B:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSzBOTIZUdsnbz_6KTrAoPP6i_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/6Y-dz23_E1vFq4knErbs01-uZMw.roa
Signing time: Wed 28 May 2025 08:13:54 +0000
ROA not before: Wed 28 May 2025 08:13:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1257
IP address blocks: 193.17.67.0/24 maxlen: 24
2001:678:3ec::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/LSzBOTIZUdsnbz_6KTrAoPP6i_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:15:f4:81:01:77:1a:55:d9:9b:38:58:95:d0:b0:9a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2cc139321951db276f3ffa293ac0a0f3fa8bf7
Validity
Not Before: May 28 08:13:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e98f9dcf6dff135bc5ab892712b6ecd35fae64cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:19:70:c1:6f:4c:0d:17:0f:f9:03:8e:5b:64:
dd:61:26:c9:80:db:3f:3f:78:3a:99:d9:9f:26:be:
79:f3:2d:b3:a9:76:e4:91:0f:b1:78:0b:b2:19:8e:
60:f9:9f:3d:ae:3c:3f:56:3d:90:73:31:f4:f1:02:
fc:74:90:d9:f3:4b:6a:7b:90:c1:d2:7e:46:e1:cc:
d4:e2:98:32:92:de:f2:5b:27:1b:ec:f2:18:3e:8f:
b0:c6:0e:ac:07:77:ce:84:a7:a9:73:52:45:da:f6:
df:da:6c:e9:72:23:4b:b4:64:72:3a:1c:7b:c8:da:
bb:79:f6:e2:59:e0:02:09:fc:75:df:43:cf:33:d0:
65:b2:83:3d:a0:3a:8d:f8:0c:5c:95:f1:ca:75:81:
ad:16:f0:0a:ac:cf:59:70:01:85:71:09:97:d5:6f:
03:31:a8:1d:15:bf:19:35:e9:47:20:18:35:60:7c:
54:ff:b4:5f:a3:d7:bb:0e:3c:4e:ff:90:89:ed:db:
54:00:7b:9e:3f:af:63:7e:4c:d2:01:bc:45:2c:14:
c8:57:2e:93:1f:c3:ab:72:7e:c1:d1:3e:80:42:0b:
67:e5:eb:09:6a:9a:4a:de:57:0d:dd:5f:34:3b:07:
90:86:50:27:f1:f5:53:b7:23:d7:86:47:d2:5d:d4:
02:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:8F:9D:CF:6D:FF:13:5B:C5:AB:89:27:12:B6:EC:D3:5F:AE:64:CC
X509v3 Authority Key Identifier:
keyid:2D:2C:C1:39:32:19:51:DB:27:6F:3F:FA:29:3A:C0:A0:F3:FA:8B:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSzBOTIZUdsnbz_6KTrAoPP6i_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/6Y-dz23_E1vFq4knErbs01-uZMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.67.0/24
IPv6:
2001:678:3ec::/48
Signature Algorithm: sha256WithRSAEncryption
b5:bf:4f:a5:01:6f:e3:86:6c:6e:04:5f:d0:87:d5:6a:a5:1a:
08:5a:c1:c0:50:bc:53:c9:64:5a:62:3c:a5:a6:ff:47:69:c6:
88:3d:13:75:65:c5:3c:36:bb:75:ee:6b:08:89:1d:4a:ea:13:
e1:0d:fa:f0:d0:1a:24:0b:87:b5:17:4b:7a:76:36:79:2e:5d:
a8:11:55:d2:64:bf:1e:2f:c5:be:6e:6b:d8:6a:a3:fb:fa:3c:
f8:87:36:59:93:31:cf:b7:d6:03:4d:e9:a0:86:91:95:c6:3a:
66:6b:ce:3c:e2:c2:e3:c4:d6:0a:7d:34:46:33:79:8b:45:0e:
57:04:0d:01:26:08:60:3c:f0:74:c6:b6:4b:12:d8:06:32:80:
2c:6d:3f:b9:65:34:4c:36:1f:5f:f9:b9:62:5c:92:66:18:01:
05:4d:c4:6e:64:7a:7a:5a:f9:3e:b4:07:87:a0:7f:43:8e:d3:
75:fe:07:6f:48:12:6c:d2:fa:32:d4:9b:40:9c:dd:10:b8:db:
99:15:d1:2b:c8:dc:6f:48:cf:7c:98:f4:eb:db:f7:1d:41:72:
92:1e:5e:fe:f3:91:ef:4e:de:77:6e:23:e8:fd:ac:36:32:20:
01:6e:ac:7a:95:80:67:15:6c:9f:b6:bb:35:48:35:28:fd:d7:
47:ae:57:77
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZcV9IEBdxpV2Zs4WJXQsJq7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMmNjMTM5MzIxOTUxZGIyNzZmM2ZmYTI5M2FjMGEwZjNm
YThiZjcwHhcNMjUwNTI4MDgxMzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOThmOWRjZjZkZmYxMzViYzVhYjg5MjcxMmI2ZWNkMzVmYWU2NGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBlwwW9MDRcP+QOOW2TdYSbJgNs/
P3g6mdmfJr558y2zqXbkkQ+xeAuyGY5g+Z89rjw/Vj2QczH08QL8dJDZ80tqe5DB
0n5G4czU4pgykt7yWycb7PIYPo+wxg6sB3fOhKepc1JF2vbf2mzpciNLtGRyOhx7
yNq7efbiWeACCfx130PPM9BlsoM9oDqN+AxclfHKdYGtFvAKrM9ZcAGFcQmX1W8D
MagdFb8ZNelHIBg1YHxU/7Rfo9e7DjxO/5CJ7dtUAHueP69jfkzSAbxFLBTIVy6T
H8Orcn7B0T6AQgtn5esJappK3lcN3V80OweQhlAn8fVTtyPXhkfSXdQCjQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOmPnc9t/xNbxauJJxK27NNfrmTMMB8GA1UdIwQY
MBaAFC0swTkyGVHbJ28/+ik6wKDz+ov3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFN6Qk9USVpVZHNuYnpfNktUckFvUFA2aV9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yMjhiNDItNDlmYi00MmNkLThiMWIt
MjE2NGQ5OTk1MTk4LzEvNlktZHoyM19FMXZGcTRrbkVyYnMwMS11Wk13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8yMjhiNDItNDlmYi00MmNkLThiMWItMjE2NGQ5OTk1MTk4
LzEvTFN6Qk9USVpVZHNuYnpfNktUckFvUFA2aV9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwRFDMA8E
AgACMAkDBwAgAQZ4A+wwDQYJKoZIhvcNAQELBQADggEBALW/T6UBb+OGbG4EX9CH
1WqlGghawcBQvFPJZFpiPKWm/0dpxog9E3VlxTw2u3XuawiJHUrqE+EN+vDQGiQL
h7UXS3p2NnkuXagRVdJkvx4vxb5ua9hqo/v6PPiHNlmTMc+31gNN6aCGkZXGOmZr
zjziwuPE1gp9NEYzeYtFDlcEDQEmCGA88HTGtksS2AYygCxtP7llNEw2H1/5uWJc
kmYYAQVNxG5kenpa+T60B4egf0OO03X+B29IEmzS+jLUm0Cc3RC425kV0SvI3G9I
z3yY9Ovb9x1BcpIeXv7zke9O3nduI+j9rDYyIAFurHqVgGcVbJ+2uzVINSj910eu
V3c=
-----END CERTIFICATE-----
Generated at Sat Jun 7 12:05:56 2025 by rpki-client