Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/w6--t_5wz0JDy2YG6__bLL736lk.roa
File: w6--t_5wz0JDy2YG6__bLL736lk.roa (raw, json)
Hash identifier: kokGrC/YWrlNHabiNp1qc8zjZ2tpu6Xwv3gwVAl+cdY=
Subject key identifier: C3:AF:BE:B7:FE:70:CF:42:43:CB:66:06:EB:FF:DB:2C:BE:F7:EA:59
Certificate issuer: /CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2
Certificate serial: 01967B4ED4C48E44CDD895FE7C7A7235E7FD
Authority key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/w6--t_5wz0JDy2YG6__bLL736lk.roa
Signing time: Mon 28 Apr 2025 07:31:25 +0000
ROA not before: Mon 28 Apr 2025 07:31:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19970
IP address blocks: 91.224.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:4e:d4:c4:8e:44:cd:d8:95:fe:7c:7a:72:35:e7:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2
Validity
Not Before: Apr 28 07:31:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3afbeb7fe70cf4243cb6606ebffdb2cbef7ea59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:94:57:95:5f:82:07:62:c3:d8:3d:e2:51:f3:
e1:0c:fe:47:83:fa:2a:ed:fa:9d:ca:e6:2d:65:ec:
c5:2b:c5:37:ad:8e:9f:02:5b:fd:88:9c:cd:df:66:
8b:85:b2:65:ef:5a:76:2e:d5:2a:f2:13:df:46:51:
36:57:ce:8d:bb:d1:50:04:39:4b:d7:7f:54:ed:c6:
7a:9b:e3:7a:c7:98:bc:c9:2e:50:8c:b6:f0:81:5c:
f8:2b:a0:43:e0:99:be:b3:06:ea:16:02:68:37:97:
76:8e:bb:09:23:51:db:8b:b3:79:ef:6a:b0:70:85:
85:10:2f:d4:8e:a2:a4:66:52:05:7c:da:8e:17:4f:
b2:e7:f0:4f:a0:f5:9a:f8:ea:6d:ae:6c:6a:63:02:
f3:9f:22:c1:fa:1b:f8:66:39:24:c9:2d:31:3f:aa:
3c:6b:10:98:c6:32:d4:c2:d4:ea:f5:bc:0d:2b:f8:
3b:34:a9:eb:5f:51:1f:c3:8a:62:7b:a3:21:14:56:
09:28:43:be:92:1c:4d:4d:27:af:cd:64:14:25:64:
bc:c7:41:37:17:47:90:f1:12:c1:9d:4d:f5:50:64:
12:52:69:2c:a2:2f:f6:86:03:a9:f5:59:f5:fd:f6:
d5:84:3e:7b:ad:66:6b:69:54:15:0c:4d:7b:50:c1:
fe:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:AF:BE:B7:FE:70:CF:42:43:CB:66:06:EB:FF:DB:2C:BE:F7:EA:59
X509v3 Authority Key Identifier:
keyid:AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/w6--t_5wz0JDy2YG6__bLL736lk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.74.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:e9:aa:d8:19:99:30:99:11:24:0d:01:32:03:17:be:45:08:
01:32:44:d9:db:ae:eb:ca:d7:1a:33:5d:c5:eb:8e:58:b2:2c:
ac:ca:d7:2a:14:92:84:50:7a:46:1b:b0:d5:fb:02:b8:a6:35:
86:8a:6a:dd:f6:59:ba:ca:29:e1:66:90:2f:62:96:70:4d:83:
13:41:35:e0:d6:e6:00:1d:90:4e:07:b5:f9:0d:c8:5e:58:3e:
c7:d6:94:41:2b:18:38:4f:1e:48:11:94:36:5e:9e:5f:40:dc:
e1:eb:0f:f4:d5:07:29:70:aa:b8:ba:24:80:f2:f5:fd:fd:95:
2a:df:79:69:02:a9:47:9e:f6:0a:1a:3f:61:f4:13:ae:3c:9c:
dc:58:fc:55:d6:f3:b4:7d:06:b5:fb:bf:a9:21:69:0f:3b:2c:
56:c7:dd:44:52:e6:5f:ca:8a:9f:67:97:48:5f:d2:05:65:32:
8a:bb:91:9f:60:e7:e7:4e:4a:3f:c4:7d:2e:32:69:3c:82:a0:
b8:be:00:23:d4:e4:f9:6e:37:b8:81:2b:e8:ed:6b:f7:1a:68:
98:f7:59:35:4a:46:0b:cb:63:4d:2e:4a:e8:58:7d:b1:98:53:
2f:df:10:97:fa:09:5a:2f:56:1b:1c:28:fc:ed:de:f9:b1:10:
58:ee:c0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 03:52:37 2025 by rpki-client