Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6zOsp0-oNi8W5bFXex9jQrwSTD4.roa
File: 6zOsp0-oNi8W5bFXex9jQrwSTD4.roa (raw, json)
Hash identifier: S3LA/aH8g8t4Y+OX+JtXFXIVzHN8vhvdgG7Mlr0sjqg=
Subject key identifier: EB:33:AC:A7:4F:A8:36:2F:16:E5:B1:57:7B:1F:63:42:BC:12:4C:3E
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019681085BF4C652FD4138056CC7496C7DE7
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6zOsp0-oNi8W5bFXex9jQrwSTD4.roa
Signing time: Tue 29 Apr 2025 10:12:10 +0000
ROA not before: Tue 29 Apr 2025 10:12:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398465
IP address blocks: 5.231.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:08:5b:f4:c6:52:fd:41:38:05:6c:c7:49:6c:7d:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 29 10:12:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb33aca74fa8362f16e5b1577b1f6342bc124c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:88:25:60:37:64:e9:ba:9f:ad:4a:eb:a5:ee:
d4:9f:9b:8d:b4:04:fa:2a:70:13:7d:2a:d0:15:01:
0e:2d:e6:91:c9:8d:c1:da:16:a7:57:04:a3:3e:fa:
5f:53:cc:cd:06:88:ed:9b:35:90:e3:f2:e4:82:04:
7f:e6:11:e5:0e:02:01:ca:05:5f:78:03:c5:e1:4c:
b9:7c:5f:f0:e5:48:7e:9f:b1:44:a1:b8:be:b2:b4:
4b:df:1b:eb:18:3e:16:79:15:d3:32:6f:ee:0a:1d:
1f:c4:50:74:da:de:91:7b:6d:bc:ec:70:b5:43:45:
14:71:32:11:0c:25:38:bd:e9:ee:db:27:87:eb:65:
ca:c4:58:f4:e1:95:68:0c:fc:61:e0:c4:b7:9f:2f:
e5:ec:fd:aa:91:2d:80:85:41:ed:48:06:fa:fa:5a:
97:71:91:c8:4c:e3:f7:98:05:6b:04:58:a7:86:96:
f4:79:c8:9b:30:b3:64:b0:bb:fd:f1:b8:b9:3e:de:
14:72:d5:c1:f7:66:17:e6:35:4d:01:56:73:b0:41:
6d:88:41:51:99:f8:4a:08:a1:6a:2e:1c:ca:e1:85:
6d:01:4c:34:8b:09:fb:e0:55:bf:7c:86:1e:a3:ac:
79:75:c3:4f:fa:f7:91:ea:69:03:f7:f9:bd:95:65:
35:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:33:AC:A7:4F:A8:36:2F:16:E5:B1:57:7B:1F:63:42:BC:12:4C:3E
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6zOsp0-oNi8W5bFXex9jQrwSTD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.80.0/24
Signature Algorithm: sha256WithRSAEncryption
73:41:ed:ac:63:63:90:7e:e9:00:13:be:ab:bf:0c:93:f9:6e:
b6:fd:ab:fe:c6:16:8f:79:5f:50:ed:b9:13:09:b7:e2:da:f3:
00:d3:4e:f5:30:57:b2:3a:12:c5:f1:9e:87:fd:c0:bc:da:28:
74:41:16:f0:08:a5:e3:d1:b0:ce:c0:cd:a7:b9:13:0b:55:f2:
a4:bb:b3:c6:e5:71:9f:d8:a4:ab:a8:cd:5f:82:f1:8f:cc:54:
c1:ee:8c:33:74:06:fe:57:ec:de:be:e5:e8:43:ee:a0:5a:92:
71:17:73:89:a4:67:fd:df:f4:d0:8c:22:e9:26:3c:44:fd:0c:
59:d3:12:ad:53:a9:ba:24:85:e7:be:27:27:26:62:87:aa:a6:
f2:68:cc:c9:7c:ac:89:e4:7a:27:68:c9:02:e0:57:90:51:98:
00:40:bd:63:45:1f:b6:ea:dc:51:3a:69:90:fe:00:27:04:71:
70:f8:b4:96:64:fd:c0:61:a4:c1:0f:ca:0c:b3:09:9f:cd:4e:
33:54:5a:81:8f:2b:df:a4:80:73:d3:07:c4:14:ec:e4:03:4b:
8a:a2:d9:50:8c:5c:db:3a:5e:9b:e5:31:06:bb:b4:49:81:ac:
9d:50:b5:b8:4c:11:52:be:3a:dd:70:b8:6b:6d:6c:6e:78:47:
bc:a2:f5:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:43:07 2025 by rpki-client