Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/3a9dbf-01d2-4f10-813d-eab61ddb898a/1/G_QAj13053ZQmqPjvoFu7lprfls.roa
File: G_QAj13053ZQmqPjvoFu7lprfls.roa (raw, json)
Hash identifier: v8AAmxC8K2fmbWdzfzNZzKaQdWure2gG3MF9k3IbA6o=
Subject key identifier: 1B:F4:00:8F:5D:F4:E7:76:50:9A:A3:E3:BE:81:6E:EE:5A:6B:7E:5B
Certificate issuer: /CN=3216efccd15e978a7040a5d4b79c417fb966bf28
Certificate serial: 01977D199470C996B385BA762DC100713463
Authority key identifier: 32:16:EF:CC:D1:5E:97:8A:70:40:A5:D4:B7:9C:41:7F:B9:66:BF:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MhbvzNFel4pwQKXUt5xBf7lmvyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/3a9dbf-01d2-4f10-813d-eab61ddb898a/1/G_QAj13053ZQmqPjvoFu7lprfls.roa
Signing time: Tue 17 Jun 2025 08:55:17 +0000
ROA not before: Tue 17 Jun 2025 08:55:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61000
IP address blocks: 37.123.240.0/21 maxlen: 24
185.112.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/3a9dbf-01d2-4f10-813d-eab61ddb898a/1/MhbvzNFel4pwQKXUt5xBf7lmvyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/3a9dbf-01d2-4f10-813d-eab61ddb898a/1/MhbvzNFel4pwQKXUt5xBf7lmvyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MhbvzNFel4pwQKXUt5xBf7lmvyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:19:94:70:c9:96:b3:85:ba:76:2d:c1:00:71:34:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3216efccd15e978a7040a5d4b79c417fb966bf28
Validity
Not Before: Jun 17 08:55:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1bf4008f5df4e776509aa3e3be816eee5a6b7e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7d:42:bd:b2:ee:02:0d:0b:80:53:5f:f6:e3:
fe:aa:2a:7b:0b:43:92:88:6a:94:c6:01:34:34:5a:
51:a0:be:b9:77:62:9f:4c:23:9d:46:eb:8a:4f:cd:
ff:74:0b:40:8e:cd:73:a8:7c:be:ce:48:a8:ee:f0:
50:66:9b:86:c8:60:d5:79:d9:7f:04:0f:f0:15:06:
5c:a8:54:bb:24:58:a5:c6:f8:48:fa:7d:33:df:e8:
76:ee:2b:76:6e:a9:eb:ec:ce:aa:8d:bf:9d:66:4d:
b3:2c:14:20:5d:fc:24:df:14:b1:ca:08:4f:e0:28:
47:84:b2:dd:1b:48:00:c9:5a:51:ca:08:ac:f9:90:
b3:7c:f7:35:7e:e4:31:32:43:cc:28:96:97:3c:57:
4f:a9:a2:1d:4e:cf:9f:b5:a3:8b:8b:e8:5e:37:67:
e7:67:4d:05:17:6e:1b:f2:b6:bb:08:59:b2:6b:4e:
a6:a7:19:6c:d6:b3:cf:71:c1:2d:35:35:35:0c:0a:
ce:a0:21:55:5f:d7:23:9e:9c:ab:a9:eb:37:86:4d:
9f:8b:d2:82:95:46:0b:56:6d:fe:f5:fd:c0:f8:34:
4f:33:76:c2:97:a8:e9:63:8d:f7:4b:a0:7b:cf:3d:
0d:67:31:99:74:5e:ce:50:bf:3e:ab:d4:81:55:9e:
f9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F4:00:8F:5D:F4:E7:76:50:9A:A3:E3:BE:81:6E:EE:5A:6B:7E:5B
X509v3 Authority Key Identifier:
keyid:32:16:EF:CC:D1:5E:97:8A:70:40:A5:D4:B7:9C:41:7F:B9:66:BF:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MhbvzNFel4pwQKXUt5xBf7lmvyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/3a9dbf-01d2-4f10-813d-eab61ddb898a/1/G_QAj13053ZQmqPjvoFu7lprfls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/3a9dbf-01d2-4f10-813d-eab61ddb898a/1/MhbvzNFel4pwQKXUt5xBf7lmvyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.123.240.0/21
185.112.92.0/22
Signature Algorithm: sha256WithRSAEncryption
02:4a:56:b3:88:d4:41:cd:55:f6:53:77:c8:21:2f:bc:d7:4e:
59:9e:16:a5:16:f4:3c:3c:ca:70:61:a9:d1:36:dd:13:f9:e2:
fa:2a:36:31:4a:c9:07:06:42:a0:5c:1c:d0:8e:a4:e3:88:77:
37:6c:f7:2e:bd:a2:34:4b:28:30:fe:92:59:b3:3a:9d:53:c2:
62:d9:13:45:d6:03:d8:ea:47:56:92:e2:5d:c3:d7:b3:b4:58:
0e:52:94:90:2a:9f:36:74:f3:af:b4:2c:96:0e:14:30:92:f0:
8d:b9:64:f5:94:60:21:41:9c:b0:e2:30:82:46:67:3a:7a:9d:
68:a8:e8:2c:28:73:06:c4:fb:b4:05:c2:63:42:fe:ef:37:02:
56:3b:c7:e4:a4:62:db:ba:cc:62:bf:ab:ae:7a:48:56:d9:4b:
d9:22:91:6c:73:3b:32:2a:6c:5a:f9:59:4b:b2:98:89:8c:66:
32:28:07:0f:39:50:ed:53:d7:4d:ae:b0:cd:58:ba:73:df:c0:
7d:85:ba:d2:7d:29:30:27:02:b5:e1:46:36:a1:26:8c:d5:77:
19:f6:c7:a5:a1:25:e9:63:47:4c:7e:1d:4b:c3:15:aa:22:d8:
84:c9:d3:7c:99:14:28:23:87:f2:49:ed:71:24:9e:26:95:7c:
82:d5:a1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:13:55 2025 by rpki-client