Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cC6nhO_PpSEsfIKndh4-xlaxjQo.roa
File: cC6nhO_PpSEsfIKndh4-xlaxjQo.roa (raw, json)
Hash identifier: 6LB4h+HhyAFA7mqFR/nA4zlefBCYrWU5AO/tBuY8sU4=
Subject key identifier: 70:2E:A7:84:EF:CF:A5:21:2C:7C:82:A7:76:1E:3E:C6:56:B1:8D:0A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019657EB748BF0735D51AE07E63FBDA11190
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cC6nhO_PpSEsfIKndh4-xlaxjQo.roa
Signing time: Mon 21 Apr 2025 10:36:10 +0000
ROA not before: Mon 21 Apr 2025 10:36:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 18811
IP address blocks: 217.60.0.0/21 maxlen: 24
217.60.8.0/21 maxlen: 24
217.60.24.0/22 maxlen: 24
217.60.32.0/21 maxlen: 24
217.60.44.0/22 maxlen: 24
217.60.56.0/21 maxlen: 24
217.60.188.0/22 maxlen: 24
217.60.192.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:eb:74:8b:f0:73:5d:51:ae:07:e6:3f:bd:a1:11:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 21 10:36:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=702ea784efcfa5212c7c82a7761e3ec656b18d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f6:96:62:43:83:6f:ff:3d:a1:02:5a:7b:d3:
e9:d3:c2:85:e8:ed:94:ff:df:b0:46:28:f2:35:9f:
fe:84:be:86:81:b7:51:08:cb:6a:c1:2d:23:09:c7:
de:3e:21:df:a7:a9:74:07:6f:3f:8a:3e:1f:b4:48:
58:36:d0:c0:9f:c7:8f:79:05:f6:6a:e0:b8:da:78:
6e:07:08:ff:3d:b7:90:e5:56:ed:c3:9f:af:62:f3:
e8:c3:14:5c:f2:9f:ff:09:84:c7:dc:7e:b6:d0:26:
38:bc:7c:26:c3:87:1e:b8:f9:bb:9a:73:ef:30:ff:
b6:33:73:92:83:55:88:db:82:3d:75:a9:85:3b:1e:
18:79:bd:fd:84:0a:46:60:7b:b3:89:92:13:f4:78:
a8:31:47:6e:a4:06:8f:04:24:0f:57:15:15:4b:13:
1e:a2:f6:19:2e:3d:28:39:da:0e:11:82:84:fc:38:
93:e2:fa:d4:0c:73:ac:72:56:d7:d8:c2:7c:b7:09:
30:97:6d:68:33:b2:8f:c6:ec:6d:87:c0:2a:4d:93:
fc:e6:2e:22:c3:07:3c:ed:78:46:df:92:a9:59:cf:
11:7d:80:46:07:a0:74:84:5d:91:18:c7:cd:a7:f5:
50:2f:04:92:08:47:90:b0:fa:eb:6e:d3:a3:42:c5:
31:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:2E:A7:84:EF:CF:A5:21:2C:7C:82:A7:76:1E:3E:C6:56:B1:8D:0A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cC6nhO_PpSEsfIKndh4-xlaxjQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.0.0/20
217.60.24.0/22
217.60.32.0/21
217.60.44.0/22
217.60.56.0/21
217.60.188.0-217.60.195.255
Signature Algorithm: sha256WithRSAEncryption
39:ab:62:6b:63:06:fa:ba:ef:a0:ba:37:89:cb:06:42:50:02:
6a:68:0e:e4:db:99:92:0c:63:1c:d6:5c:ed:9b:84:2f:9b:4b:
3a:a0:c3:a9:b4:20:e2:22:a4:4f:21:3b:7a:77:5c:b4:b7:81:
1c:b8:ee:b4:f3:14:e1:6a:e1:36:9e:5f:c7:3b:a7:99:89:5e:
b1:86:3d:84:53:f2:75:48:88:66:a5:66:25:a4:bf:7b:38:88:
40:78:7a:d1:80:7f:ed:b0:74:86:fd:c4:fc:29:e5:04:80:a7:
6a:ab:61:4e:19:e9:06:d0:46:40:59:2e:ad:81:cc:01:8b:92:
60:5a:48:ac:b0:20:d2:bc:14:11:7b:91:25:d7:ba:c7:66:34:
9f:4a:23:40:af:1f:cf:ba:0d:1d:e8:00:c2:fd:c5:e6:4e:31:
30:cc:06:78:9c:6d:dd:76:61:e7:b1:03:4e:18:a4:af:dd:ce:
7a:5d:c0:10:44:7d:3d:9b:d6:aa:fb:ed:d2:ad:5e:a4:c4:19:
db:e5:fd:75:12:36:e4:2f:4c:40:18:d3:e2:8d:43:3e:1d:82:
01:26:38:eb:54:92:3a:94:48:9c:10:88:00:07:de:d1:62:a4:
ff:26:b1:6d:2c:06:5b:6a:75:fe:2e:dc:68:49:7c:53:2b:ea:
a7:22:73:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:56:43 2025 by rpki-client