Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/6iKkuLhTnDFWaq3-3shTrwGrJ8g.roa
File: 6iKkuLhTnDFWaq3-3shTrwGrJ8g.roa (raw, json)
Hash identifier: ss9t8FqhS0xrNtCTKl7Xpo6Vl1ClWOF8J3Gh9ZaVFpU=
Subject key identifier: EA:22:A4:B8:B8:53:9C:31:56:6A:AD:FE:DE:C8:53:AF:01:AB:27:C8
Certificate issuer: /CN=b236f2e42522e98d376be38a89e5dd51abbf7996
Certificate serial: 01966B656976F38FF2500B0863D2DBF8E054
Authority key identifier: B2:36:F2:E4:25:22:E9:8D:37:6B:E3:8A:89:E5:DD:51:AB:BF:79:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/6iKkuLhTnDFWaq3-3shTrwGrJ8g.roa
Signing time: Fri 25 Apr 2025 05:22:10 +0000
ROA not before: Fri 25 Apr 2025 05:22:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49514
IP address blocks: 62.122.160.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 14:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6b:65:69:76:f3:8f:f2:50:0b:08:63:d2:db:f8:e0:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b236f2e42522e98d376be38a89e5dd51abbf7996
Validity
Not Before: Apr 25 05:22:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea22a4b8b8539c31566aadfedec853af01ab27c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:06:04:b9:a8:fb:82:6e:d9:ac:42:8c:c8:90:
65:df:63:01:f9:b4:d4:58:6c:4c:cb:90:72:e6:50:
a3:1b:92:bd:e5:dd:13:69:68:57:a9:c4:f1:1b:db:
2a:88:ef:dd:cf:50:4d:c9:e4:35:58:a1:d6:21:b4:
01:82:b4:f4:5e:b1:bc:26:da:3e:dd:a0:4b:3e:e8:
89:b8:7e:6a:46:9f:d7:bf:b8:ba:97:a5:4e:09:da:
52:88:e9:b8:6c:cc:5d:85:ad:a7:e2:37:12:81:b1:
39:23:78:58:d6:a2:62:0f:ab:88:b9:b2:0f:dc:ea:
96:9b:1a:6e:24:52:2e:52:f1:ff:bd:a3:8f:54:b0:
2d:79:6e:ff:26:d0:22:73:05:8f:2a:9d:a1:24:40:
68:80:26:8d:77:e4:51:42:5c:21:4a:ee:3c:1e:79:
1d:9f:b7:15:13:bc:08:62:1a:e6:15:5e:7f:97:4e:
57:33:a0:5d:39:53:92:4b:ae:cf:bc:b1:ca:4a:24:
9e:4d:e0:4e:16:08:ce:23:5a:2e:6f:e8:63:e9:eb:
3c:2b:aa:f7:84:ae:fe:3b:5e:cd:87:00:33:10:c1:
72:ee:cb:e5:41:e2:f5:5b:46:c0:bc:8c:6e:15:6d:
17:3f:09:65:bc:4a:30:77:fa:d0:bb:e0:e1:dd:bf:
e5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:22:A4:B8:B8:53:9C:31:56:6A:AD:FE:DE:C8:53:AF:01:AB:27:C8
X509v3 Authority Key Identifier:
keyid:B2:36:F2:E4:25:22:E9:8D:37:6B:E3:8A:89:E5:DD:51:AB:BF:79:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/6iKkuLhTnDFWaq3-3shTrwGrJ8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.160.0/21
Signature Algorithm: sha256WithRSAEncryption
7f:fd:42:ef:1d:e9:ae:14:7f:3e:86:76:58:cd:af:77:e9:49:
b6:53:68:f1:b5:81:db:42:18:4a:cf:32:5b:6b:16:23:47:27:
10:ef:06:12:20:89:45:69:5c:27:c2:a6:f4:d7:b7:d3:da:d4:
3b:c1:35:ac:7a:a9:ae:95:56:6a:3d:8a:be:07:2f:4e:fb:17:
0f:34:b9:2c:ae:d0:eb:1a:e3:f1:e1:b4:ba:ba:2e:9a:45:9d:
a6:e2:90:f8:93:e0:e6:af:fe:f2:01:b1:30:f5:13:40:10:ef:
37:fa:21:8c:21:92:50:34:ab:48:32:9b:59:14:cd:a1:fb:ad:
af:14:d8:d2:02:b2:75:68:a3:8d:10:5b:e9:ab:a8:b9:34:17:
e4:f2:cb:98:fe:a5:36:50:f5:ac:1d:d0:ad:57:71:73:4b:44:
4d:d8:86:f9:39:b1:9a:7c:02:06:6e:82:68:78:b3:17:49:27:
f7:2c:10:6f:76:b4:7e:88:4f:a7:e9:2c:29:8f:9c:97:21:41:
ff:0f:54:0e:f1:c0:fa:ba:18:31:de:2d:e4:b6:27:13:c9:2d:
01:84:c9:50:7f:f3:7c:f7:ea:69:fd:05:a4:4f:1d:bc:06:45:
4d:a0:74:64:ce:5a:cf:0d:0b:f1:9b:0a:fb:fc:d6:ba:15:31:
f5:17:d4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 21:03:03 2025 by rpki-client