Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/w6OqqZqKvzQVprgL49SlZ710Dug.roa
File: w6OqqZqKvzQVprgL49SlZ710Dug.roa (raw, json)
Hash identifier: fDNxciEfK6xgSoCv3YyMXuGXaxltWMSB2qscGAjWZEU=
Subject key identifier: C3:A3:AA:A9:9A:8A:BF:34:15:A6:B8:0B:E3:D4:A5:67:BD:74:0E:E8
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 0196C50A05ECF565CACE2D25E678573CA753
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/w6OqqZqKvzQVprgL49SlZ710Dug.roa
Signing time: Mon 12 May 2025 15:08:10 +0000
ROA not before: Mon 12 May 2025 15:08:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51964
IP address blocks: 81.52.185.0/24 maxlen: 32
2a01:ce80::/26 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:0a:05:ec:f5:65:ca:ce:2d:25:e6:78:57:3c:a7:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: May 12 15:08:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3a3aaa99a8abf3415a6b80be3d4a567bd740ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c1:f4:7d:e3:ae:ea:a2:99:1b:dc:95:4b:0f:
e3:73:b8:78:7b:d0:98:c5:f2:fa:eb:dd:20:fd:97:
0f:c4:35:de:fd:10:ed:2d:2b:38:35:c6:5b:00:0f:
13:f0:c6:c5:a9:7c:1d:78:15:ab:3d:cf:50:6d:54:
e5:4e:e6:0f:33:a8:33:76:ee:2d:84:5f:bc:ac:a7:
50:ba:43:54:5a:51:3f:06:57:eb:fa:35:1c:27:92:
1e:a3:14:4f:84:95:2c:1c:61:78:32:c6:90:2e:6a:
4d:99:9e:db:a5:a7:be:a5:a8:02:6d:9c:7c:d0:47:
4c:09:4e:53:54:0d:a5:ad:cb:55:9f:59:22:82:92:
a7:35:be:51:f5:30:77:1a:4c:a2:fd:5d:a3:4c:92:
fd:69:a6:b6:8e:9e:4b:f6:13:33:d0:9e:95:63:7f:
23:ab:f9:72:cf:1a:c3:76:1f:2a:38:78:c6:c9:4c:
6b:e5:5d:d4:ab:82:c4:76:12:71:15:c9:da:3d:28:
ba:46:8b:75:8c:df:63:f6:e5:10:7f:57:34:ed:9a:
84:53:a9:f6:44:6d:7e:fa:51:2e:09:81:b8:41:6a:
1b:4d:db:67:98:15:63:bb:c1:95:28:f7:cd:4c:53:
24:bc:95:bf:52:33:12:e9:65:7d:ad:49:6b:ad:09:
58:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A3:AA:A9:9A:8A:BF:34:15:A6:B8:0B:E3:D4:A5:67:BD:74:0E:E8
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/w6OqqZqKvzQVprgL49SlZ710Dug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.52.185.0/24
IPv6:
2a01:ce80::/26
Signature Algorithm: sha256WithRSAEncryption
59:42:49:56:7c:46:ad:b5:bb:9a:2e:ba:7b:be:61:ee:8f:80:
f3:a8:7b:28:18:8d:a5:74:d9:a5:d1:aa:89:24:80:e8:c5:69:
ea:e0:d4:cf:00:eb:78:94:ce:0b:1a:43:7c:2d:46:d3:1e:31:
6a:1c:f3:8c:b8:49:41:bb:b5:ea:f1:ae:3a:aa:d0:02:6b:91:
92:9c:a7:48:f9:27:63:64:71:f3:c9:d0:dd:9b:8f:98:3c:8f:
c7:6e:23:17:49:a3:a5:ec:37:53:80:69:69:e6:6a:55:77:68:
f5:f9:45:f4:69:b2:5c:d0:0c:71:d5:31:e5:62:c0:2f:eb:f6:
6a:c9:f6:d5:68:17:c9:61:36:8d:93:4a:c1:e4:4f:10:2a:ba:
54:4c:3f:2d:79:c0:2a:73:33:20:23:44:3b:5c:c0:78:a4:f0:
35:2c:33:aa:9c:53:8a:62:dc:a5:61:1f:37:88:cf:d4:c4:e4:
bc:d3:7c:37:75:db:c8:1a:22:2f:50:4d:b0:6b:de:dd:df:f1:
b4:e2:2d:5a:05:cb:13:2f:4f:87:87:07:b8:d4:37:7d:b8:c5:
d1:9f:e2:b4:53:d0:52:e8:95:0f:08:45:10:72:81:2c:ce:5b:
81:7e:ba:4a:56:b8:81:0f:ea:f7:df:6d:d7:22:cf:df:8e:2a:
44:9d:86:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:08:01 2025 by rpki-client