Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/akMz2UKf_1_N-Qf0emghqNJSezs.roa
File: akMz2UKf_1_N-Qf0emghqNJSezs.roa (raw, json)
Hash identifier: cVzEd4MgjuNECbnPJgYS7hWGswFwt+AJEatdUhO6MPY=
Subject key identifier: 6A:43:33:D9:42:9F:FF:5F:CD:F9:07:F4:7A:68:21:A8:D2:52:7B:3B
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01975AFE32A5E290D45FCD7F33EA1B3E8E3B
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/akMz2UKf_1_N-Qf0emghqNJSezs.roa
Signing time: Tue 10 Jun 2025 17:58:17 +0000
ROA not before: Tue 10 Jun 2025 17:58:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212477
IP address blocks: 170.62.96.0/22 maxlen: 24
170.62.101.0/24 maxlen: 24
170.62.105.0/24 maxlen: 24
170.62.109.0/24 maxlen: 24
192.253.211.0/24 maxlen: 24
203.188.173.0/24 maxlen: 24
203.188.174.0/24 maxlen: 24
203.188.180.0/24 maxlen: 24
213.254.162.0/24 maxlen: 24
213.254.172.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 07:25:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:fe:32:a5:e2:90:d4:5f:cd:7f:33:ea:1b:3e:8e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jun 10 17:58:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a4333d9429fff5fcdf907f47a6821a8d2527b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:62:7f:d7:22:f6:b9:f6:82:28:e7:0b:47:06:
4c:20:9a:a7:eb:50:74:b8:2a:14:7a:e3:c0:f1:75:
d7:93:12:31:ba:74:c2:3d:68:c7:f3:6f:57:80:2b:
32:42:5e:fa:86:be:13:f9:e2:7c:b2:26:bd:a9:ff:
dc:cd:5d:dd:e5:d0:a2:96:4d:85:27:49:4e:75:68:
cb:28:d1:9f:c3:eb:49:67:a0:21:52:cb:2b:42:19:
b0:da:c2:c4:86:03:a8:26:4d:6b:fa:b2:c0:3b:c5:
b0:de:2d:0c:ed:da:a3:8f:a9:58:0b:cd:82:1d:a9:
e5:3a:e1:cf:fa:a0:79:b3:ca:53:b1:c6:a4:af:e2:
90:1e:be:e9:fc:a0:59:18:bf:c5:3f:be:ba:6a:2f:
fe:ab:db:8f:43:4f:ad:f0:8e:d3:d9:16:0b:97:e3:
ab:b5:8f:1b:6d:ec:c0:df:79:4c:a2:28:df:ad:95:
ac:bf:04:af:8b:f9:ce:1a:d3:84:12:40:a1:4e:50:
74:25:52:cb:e0:a7:a2:ca:35:1c:ca:9e:c7:94:e5:
bf:41:df:79:f5:a0:95:9c:be:1d:09:1f:4a:bc:7a:
b6:f3:0e:f0:20:8e:3e:05:f5:94:58:10:6c:1a:fc:
7f:b1:5b:20:a2:31:e6:2c:26:19:da:cc:de:55:da:
8a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:43:33:D9:42:9F:FF:5F:CD:F9:07:F4:7A:68:21:A8:D2:52:7B:3B
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/akMz2UKf_1_N-Qf0emghqNJSezs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.62.96.0/22
170.62.101.0/24
170.62.105.0/24
170.62.109.0/24
192.253.211.0/24
203.188.173.0-203.188.174.255
203.188.180.0/24
213.254.162.0/24
213.254.172.0/23
Signature Algorithm: sha256WithRSAEncryption
92:2b:db:65:00:aa:e2:36:18:2c:16:db:66:54:35:f5:5e:46:
57:b4:a3:03:ad:6b:2b:15:f0:33:b4:d3:90:87:9a:1c:57:bb:
46:c7:c0:8c:5f:d2:8d:a7:e3:9c:8d:2e:87:92:f4:61:39:1a:
b7:24:4f:d7:90:29:6a:4f:32:68:bc:19:ac:65:be:85:5a:6f:
53:7b:b1:b1:a3:72:1b:1f:a8:f0:0a:31:30:7d:00:9e:b7:9d:
a3:53:6b:01:a4:f5:06:cb:f3:6d:b9:cd:d0:dd:6e:4e:59:26:
8a:51:c7:5b:40:15:3a:e8:26:16:e0:27:87:be:0b:98:96:ea:
70:b1:b1:83:9c:8f:5f:6b:43:df:33:c4:86:82:9d:61:40:b7:
4d:ac:0c:af:fb:6b:0d:6b:2c:09:40:88:10:dd:b0:4a:60:86:
4e:39:d8:6e:fe:19:de:5d:f8:31:7f:2f:bd:00:d0:74:0d:44:
3e:20:6e:52:08:41:b9:62:bb:c3:d7:8a:e7:61:9a:4f:bd:87:
5e:67:54:b8:95:a4:61:c1:b2:04:4f:b7:0e:d3:e1:95:4a:52:
18:c9:0e:0b:88:13:cf:7d:1b:e9:bf:de:97:05:f3:d7:86:5f:
55:8d:6f:d9:58:fc:fa:e4:97:25:cf:6d:31:17:4d:e9:61:93:
9c:97:6e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:05:12 2025 by rpki-client