Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/of6JbeS7lmzZ7aTA8IeU2KkEO90.roa
File: of6JbeS7lmzZ7aTA8IeU2KkEO90.roa (raw, json)
Hash identifier: BtvzX7KCD7I7eDw1eDMCS/4km7RDHrl8oTiUpuQW4D4=
Subject key identifier: A1:FE:89:6D:E4:BB:96:6C:D9:ED:A4:C0:F0:87:94:D8:A9:04:3B:DD
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019717F708C353ECC79F435EF5F77A54A0A1
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/of6JbeS7lmzZ7aTA8IeU2KkEO90.roa
Signing time: Wed 28 May 2025 17:35:54 +0000
ROA not before: Wed 28 May 2025 17:35:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213622
IP address blocks: 89.106.64.0/24 maxlen: 24
89.106.65.0/24 maxlen: 24
185.121.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:17:f7:08:c3:53:ec:c7:9f:43:5e:f5:f7:7a:54:a0:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 28 17:35:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1fe896de4bb966cd9eda4c0f08794d8a9043bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4e:b3:75:9e:fd:b4:eb:83:7c:96:00:93:72:
4d:3f:47:f7:48:2a:58:b4:c6:e7:ed:2a:38:ed:a4:
10:6e:e6:cf:7f:b0:fa:6e:8c:6c:29:e3:de:77:3b:
94:50:26:10:0b:09:ef:67:bf:04:fe:ff:4d:79:54:
9a:7e:0e:2f:dc:93:f0:6d:7e:29:13:c9:da:38:ba:
42:3e:5b:e9:5c:75:d7:30:0a:aa:68:bc:5b:d4:95:
64:a4:e1:0f:c2:cf:56:33:a0:e7:c9:30:47:c1:0e:
e2:e9:1e:4d:25:5c:c7:48:d2:61:22:dc:6e:ac:e7:
ac:b6:26:a0:d6:91:a7:97:b5:f9:45:26:3b:db:9e:
2d:b0:6f:14:8a:22:7e:c8:ec:2f:fe:f8:e7:14:9c:
36:9c:4a:77:f8:9c:b2:41:ae:c7:e9:3a:4f:14:7d:
1d:7c:6f:7b:4f:34:9b:da:dc:20:ff:2e:61:a1:cc:
55:de:fe:ba:e7:f1:58:26:24:65:3f:6e:9a:54:b9:
89:e5:de:d0:55:14:81:a3:60:39:a3:28:e4:ed:d7:
96:9e:6a:8f:ab:5a:ee:58:8a:07:6f:b6:da:96:f2:
32:b0:50:39:49:12:ed:69:38:3e:5e:18:b5:73:ef:
1d:df:47:fb:ef:94:a3:6d:91:66:e4:20:f7:dd:85:
48:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:FE:89:6D:E4:BB:96:6C:D9:ED:A4:C0:F0:87:94:D8:A9:04:3B:DD
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/of6JbeS7lmzZ7aTA8IeU2KkEO90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.64.0/23
185.121.69.0/24
Signature Algorithm: sha256WithRSAEncryption
27:f5:b6:75:53:ab:14:1a:9f:e2:fa:e7:5e:48:e3:df:38:6a:
4f:a8:9b:f0:7a:46:dc:65:27:83:2a:b2:2e:a0:bd:06:b0:90:
55:98:69:99:4f:4a:49:e6:79:8e:14:89:93:b1:59:c0:1e:0a:
bd:a5:8a:fa:79:59:bb:8d:6f:31:2d:d3:02:f9:f9:08:1e:16:
64:47:ad:2e:df:05:7d:5c:3d:03:d1:09:39:44:fb:4b:41:d1:
1e:24:31:4d:a6:c2:be:03:9f:6a:45:29:1c:48:6c:17:68:91:
0d:07:dc:39:99:17:17:af:c2:52:92:20:0a:30:26:f4:0c:3e:
9f:b0:59:c4:dc:19:de:33:90:a0:8e:29:ab:39:cf:f9:2b:9f:
af:4c:24:82:51:11:b6:c7:eb:8f:2d:7a:33:61:97:40:23:9c:
08:aa:c4:6d:53:10:31:6d:a4:77:87:11:61:ac:c9:27:aa:f2:
8b:ce:40:a4:e6:6a:58:ff:36:1d:15:d1:70:37:c0:6e:7e:6a:
77:15:3e:97:21:0a:ba:0c:e4:36:c1:86:82:9f:b9:86:18:48:
cc:67:4b:6f:4f:ca:9a:d7:c7:e0:d3:5e:ba:1b:3f:dd:cb:76:
06:25:f1:fe:1e:2f:87:d9:d9:86:ec:f5:56:a9:e7:fd:79:0b:
2e:a7:a1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 06:19:06 2025 by rpki-client