Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/p6rvh-AV0bmaoiN047zHywpJoqY.roa
File: p6rvh-AV0bmaoiN047zHywpJoqY.roa (raw, json)
Hash identifier: tR6pKJ08cGe9+fwUehgymwBvOx1rePcqoTH0w7NDkm8=
Subject key identifier: A7:AA:EF:87:E0:15:D1:B9:9A:A2:23:74:E3:BC:C7:CB:0A:49:A2:A6
Certificate issuer: /CN=b6a1654dae96c532578ce1df1ebb8221dbb68145
Certificate serial: 01942521424D7D84B7B3E3E3F3AC2663680B
Authority key identifier: B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/p6rvh-AV0bmaoiN047zHywpJoqY.roa
Signing time: Thu 02 Jan 2025 03:48:44 +0000
ROA not before: Thu 02 Jan 2025 03:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198538
IP address blocks: 37.139.152.0/21 maxlen: 21
2a00:96c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:42:4d:7d:84:b7:b3:e3:e3:f3:ac:26:63:68:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6a1654dae96c532578ce1df1ebb8221dbb68145
Validity
Not Before: Jan 2 03:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7aaef87e015d1b99aa22374e3bcc7cb0a49a2a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:af:6d:41:9d:a2:06:1f:da:e7:fe:eb:d9:db:
41:3c:cf:8c:41:fd:d5:0b:6c:00:11:07:24:8f:88:
54:5d:29:01:b3:de:d3:82:b4:c2:2c:50:a8:5a:2f:
ec:0f:48:bc:4d:46:31:6c:25:87:2e:0c:4b:04:a4:
d7:93:9a:9f:13:f3:17:d9:a8:20:01:1b:c7:55:99:
5a:e2:ac:28:53:9e:83:ed:03:14:69:8d:41:44:c7:
00:6a:5f:35:8d:82:4d:07:0b:f2:91:ac:ee:b9:97:
e9:a9:96:31:11:e5:fe:86:db:5c:b4:0f:c5:22:1e:
0e:1d:c2:bd:d5:8a:f9:95:fe:6a:84:02:7c:16:76:
b0:96:c2:8d:84:25:81:44:e2:4e:bb:86:52:46:cd:
06:cb:1c:57:0d:42:4a:e0:1f:56:ae:2d:8b:56:8b:
31:49:17:f2:10:e9:7b:d1:a2:90:e9:e3:93:c0:44:
d8:82:c5:6e:b2:73:21:58:42:13:1f:0e:36:ee:96:
35:ad:88:cb:a7:51:38:6e:f8:05:64:97:b2:d4:c8:
72:f5:ee:01:88:be:c5:5b:3f:ce:bc:89:cc:33:dc:
4d:7e:9a:b3:83:2f:3f:4a:2e:ce:d5:ce:fa:ba:bf:
33:bb:6d:75:74:19:f4:a3:11:68:ef:85:aa:da:91:
69:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:AA:EF:87:E0:15:D1:B9:9A:A2:23:74:E3:BC:C7:CB:0A:49:A2:A6
X509v3 Authority Key Identifier:
keyid:B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/p6rvh-AV0bmaoiN047zHywpJoqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.152.0/21
IPv6:
2a00:96c0::/32
Signature Algorithm: sha256WithRSAEncryption
7e:c9:11:f0:f2:4f:ee:c2:9a:7a:e0:96:18:2e:99:c7:a8:a7:
83:6f:1c:12:5b:84:1b:43:dd:aa:39:8b:c5:e4:97:61:8e:ce:
d0:07:14:bb:b1:a8:d1:9b:95:7c:c5:79:a3:d4:35:ca:a5:35:
dd:ef:3a:c0:2f:cc:6a:9d:55:89:41:7c:d9:20:46:00:b5:b2:
55:10:60:40:50:72:e0:48:cd:a2:19:13:64:e0:c5:99:76:f2:
5b:62:58:c8:3f:43:f7:34:9c:b9:86:74:fc:90:fc:58:8d:74:
24:95:30:64:10:eb:ee:a5:3b:8e:ef:6f:4e:c9:9a:17:5d:30:
98:f3:a7:83:5d:81:d7:07:d1:07:c9:dc:74:a8:df:22:33:31:
6f:dd:c2:b4:07:0e:17:d0:57:f4:75:fb:0a:c2:c4:5c:82:b6:
3b:6d:25:97:72:b3:74:4b:9c:59:a9:70:43:7f:29:f8:b3:7a:
cc:67:76:be:0b:f5:4c:82:66:fb:2c:9d:c0:75:64:a6:dc:db:
a7:3c:37:12:4d:40:bd:57:e0:65:7a:a1:2b:6c:ee:db:ff:74:
cb:0f:0d:04:7a:72:2e:4c:cd:33:e8:8d:e1:c7:d6:90:15:49:
ad:c5:7c:f0:b3:f1:49:35:3f:33:cd:ff:cc:45:03:bf:80:6e:
f6:ec:17:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 19:08:12 2025 by rpki-client