Route Origin Authorization
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/1/323030313a3637383a6233343a3a2f34382d3438203d3e20323038303531.roa
File: 323030313a3637383a6233343a3a2f34382d3438203d3e20323038303531.roa (raw, json)
Hash identifier: W5LOE2UccwfvH+iw7FgcRMdLyrWt/Q18gyV5smhnXpM=
Subject key identifier: 23:61:A7:9E:63:9D:C1:8A:0C:71:9A:C9:C7:22:76:2C:97:77:CE:13
Certificate issuer: /CN=b692ed2feffd044c6dd7f20d70952648400a7744
Certificate serial: 04B9B1022AB58F3E70550B31C24318E399044B61
Authority key identifier: B6:92:ED:2F:EF:FD:04:4C:6D:D7:F2:0D:70:95:26:48:40:0A:77:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpLtL-_9BExt1_INcJUmSEAKd0Q.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/1/323030313a3637383a6233343a3a2f34382d3438203d3e20323038303531.roa
Signing time: Sun 08 Jun 2025 19:44:45 +0000
ROA not before: Sun 08 Jun 2025 19:39:45 +0000
ROA not after: Sun 07 Jun 2026 19:44:45 +0000
asID: 208051
IP address blocks: 2001:678:b34::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/1/B692ED2FEFFD044C6DD7F20D70952648400A7744.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/1/B692ED2FEFFD044C6DD7F20D70952648400A7744.mft
rsync://rpki.ripe.net/repository/DEFAULT/tpLtL-_9BExt1_INcJUmSEAKd0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 03:19:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:b9:b1:02:2a:b5:8f:3e:70:55:0b:31:c2:43:18:e3:99:04:4b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b692ed2feffd044c6dd7f20d70952648400a7744
Validity
Not Before: Jun 8 19:39:45 2025 GMT
Not After : Jun 7 19:44:45 2026 GMT
Subject: CN=2361A79E639DC18A0C719AC9C722762C9777CE13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:84:86:c0:96:73:ac:1c:11:27:cb:6d:7f:8a:
3c:4a:15:c2:c5:68:06:14:ec:b5:9b:4e:a0:ef:ed:
80:91:e1:c4:8a:16:2d:e1:6b:b8:c5:5f:2f:8c:7e:
21:13:39:6b:59:7c:ee:54:c5:a9:cd:24:03:a1:ef:
08:ae:ce:d3:c1:f6:f9:ec:54:d5:4d:30:4b:11:bf:
2b:c2:30:29:b3:d9:04:2f:10:d2:93:88:77:7d:5f:
94:30:48:91:84:c3:df:4d:df:1c:a7:fc:f2:22:a8:
f9:bd:fa:80:04:74:3e:4b:ac:f9:6a:cb:2c:b1:c7:
09:62:4d:05:01:33:c3:45:d8:6d:08:34:6f:ad:91:
3b:33:85:32:54:4d:02:25:7d:d6:10:99:62:e3:04:
f1:cc:b4:f4:66:80:5b:63:cc:4d:f7:8c:aa:d3:d5:
ed:12:2a:dc:9e:13:57:f5:42:b0:e6:4c:6d:f7:4f:
7b:6c:95:73:d1:96:40:da:3f:0f:85:5d:95:85:38:
63:c3:16:10:ee:7f:d9:39:8b:9b:c0:79:da:42:af:
21:ce:c9:c7:b5:2e:76:c9:e7:47:c4:ed:bf:cb:58:
c2:46:38:c9:b6:5d:c1:46:f5:8f:3b:d5:7f:ef:e7:
a0:58:3e:32:92:c0:81:f4:81:dd:56:7d:b5:1d:17:
7d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:61:A7:9E:63:9D:C1:8A:0C:71:9A:C9:C7:22:76:2C:97:77:CE:13
X509v3 Authority Key Identifier:
keyid:B6:92:ED:2F:EF:FD:04:4C:6D:D7:F2:0D:70:95:26:48:40:0A:77:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/1/B692ED2FEFFD044C6DD7F20D70952648400A7744.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpLtL-_9BExt1_INcJUmSEAKd0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/1/323030313a3637383a6233343a3a2f34382d3438203d3e20323038303531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:b34::/48
Signature Algorithm: sha256WithRSAEncryption
10:81:bc:5e:86:44:6d:30:31:3e:a9:f4:9c:aa:8a:47:e0:3b:
6c:f6:e5:1c:8b:8e:0f:aa:a3:7e:89:76:95:32:b3:42:b7:f9:
ae:d0:d4:8e:24:94:39:ff:81:b9:90:fd:5b:04:0f:c2:29:ab:
2f:a6:86:0d:ea:42:d8:43:29:97:a7:a6:63:aa:e3:89:ed:cc:
26:b7:1d:58:fb:27:5d:cb:68:bf:7b:d8:55:f7:b6:f1:a2:3f:
f7:24:fa:62:3c:0e:88:88:25:78:a9:da:6c:36:8d:26:54:5a:
ce:9b:64:74:3a:4e:bb:93:00:f3:1e:23:94:35:6a:b7:e4:58:
03:ac:9f:7b:cf:cd:ae:8c:37:bb:a0:51:8b:c5:99:57:34:32:
59:10:4a:06:cf:79:08:1b:5d:62:e4:8e:e5:0d:a8:fe:1d:cb:
dc:c9:bd:f3:0c:64:ff:97:78:da:37:e6:15:06:59:ba:27:db:
0b:05:e8:8a:26:9e:89:b5:c7:da:84:6c:ab:c8:ed:6d:f3:16:
79:ac:f0:36:54:23:86:01:ae:25:5f:99:36:b6:4a:cd:39:45:
b5:7f:5a:06:5d:8a:71:20:54:47:42:5c:d7:80:eb:d8:06:59:
8e:65:a8:28:1b:63:e6:61:19:7f:f3:80:56:64:2e:29:66:2b:
ed:96:72:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 17:57:59 2025 by rpki-client