Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/b6dlEan_bC92r1Dcq3eJ3nqThgY.roa
File: b6dlEan_bC92r1Dcq3eJ3nqThgY.roa (raw, json)
Hash identifier: o0dT/w/a3aC4MzNVyy8/oAKozVoEqDtVHmZ9qPZgUa4=
Subject key identifier: 6F:A7:65:11:A9:FF:6C:2F:76:AF:50:DC:AB:77:89:DE:7A:93:86:06
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196785A60CE1A18D6F2F95F5EE7C8820020
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/b6dlEan_bC92r1Dcq3eJ3nqThgY.roa
Signing time: Sun 27 Apr 2025 17:45:10 +0000
ROA not before: Sun 27 Apr 2025 17:45:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215828
IP address blocks: 5.83.148.0/24 maxlen: 24
77.90.25.0/24 maxlen: 24
94.249.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 07:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:5a:60:ce:1a:18:d6:f2:f9:5f:5e:e7:c8:82:00:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 27 17:45:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6fa76511a9ff6c2f76af50dcab7789de7a938606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b3:33:c7:34:1d:c5:c4:c0:72:55:1a:87:bc:
0a:30:f7:79:fe:97:e5:b2:61:b5:6f:89:ef:52:b2:
c4:a9:0e:4d:33:1f:c5:ba:ac:e6:dc:63:b0:8f:d5:
0d:f5:5c:4e:a4:1a:19:af:40:e0:51:bd:08:0e:4a:
61:fa:92:f7:f7:0e:85:5d:bf:83:00:14:26:c2:f1:
e0:36:3f:fa:cf:98:6f:80:46:9d:34:d9:54:0d:10:
e8:7c:3b:e9:e4:56:44:99:04:95:b6:33:cc:0c:5c:
3b:04:28:94:de:1d:70:99:1f:a1:13:10:8c:63:10:
99:fa:c3:c9:e3:f3:72:69:10:fa:84:67:e8:f4:23:
f4:6d:19:6b:52:77:90:c8:0d:4b:6e:a9:b8:f6:36:
81:54:bb:0f:72:d8:b3:40:44:55:f4:1d:9b:ff:06:
09:3e:f4:e0:33:7f:4b:98:64:e9:7e:4b:04:ec:21:
1f:3f:40:43:4a:5f:fc:fe:dd:dd:d3:97:34:ef:ee:
e2:6e:47:ac:f0:f8:30:15:23:8f:51:49:e6:2b:0b:
fd:d3:18:c6:4f:72:0b:d1:eb:09:44:3e:e4:2d:c4:
be:ca:d1:e2:fe:52:5d:a6:ff:6e:33:9e:a0:6c:6f:
27:8d:0b:c1:0c:22:c0:e2:ad:9d:36:a0:4d:1a:25:
a4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A7:65:11:A9:FF:6C:2F:76:AF:50:DC:AB:77:89:DE:7A:93:86:06
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/b6dlEan_bC92r1Dcq3eJ3nqThgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.148.0/24
77.90.25.0/24
94.249.138.0/24
Signature Algorithm: sha256WithRSAEncryption
24:d2:22:ae:bb:d2:16:32:32:0a:f9:8f:31:7e:7e:cd:10:f7:
85:f2:57:86:1e:f1:6c:fd:14:97:71:92:69:ba:20:0a:58:fa:
95:39:61:1b:ea:44:15:b8:1a:12:d2:59:d1:e6:6e:ee:95:6a:
3d:6d:58:86:e1:e8:30:4a:b3:08:c3:e4:cc:af:5a:b5:76:40:
d4:dc:c0:a4:b5:34:bd:8a:b1:29:65:30:1b:d7:75:1c:bd:f6:
24:8a:c8:a5:e0:39:41:3b:74:fd:d6:01:c4:67:1d:03:15:b0:
68:eb:6e:cb:eb:eb:73:bd:3c:57:d9:d5:07:ad:28:51:81:6e:
3e:ce:67:5b:71:b2:7b:74:97:bd:32:22:71:bc:c1:8e:e3:dc:
d7:54:d8:47:3d:bf:33:98:4c:7e:6c:4d:af:f3:85:47:2c:57:
6c:e1:ee:9c:e3:ae:cf:bd:23:4d:e7:02:6e:6e:3c:df:2a:a7:
78:31:a0:ea:12:c3:1e:b1:9e:3e:0e:17:3f:85:91:c7:94:c8:
b9:50:d8:0e:fd:f2:56:85:b2:b3:eb:46:55:2c:02:db:0f:86:
b4:5f:35:29:49:b2:49:04:bb:2e:2c:36:73:8b:28:2a:7d:a5:
49:41:99:48:b7:45:60:7a:db:0d:5c:29:b6:a8:8a:13:76:4d:
34:ac:f1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 15:14:35 2025 by rpki-client