Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/6rzi3V37-DL7HxiJUsYmIjeCcH0.roa
File: 6rzi3V37-DL7HxiJUsYmIjeCcH0.roa (raw, json)
Hash identifier: s1AKKCDSpLgupEU0vvWeRrqW+A6pSMh35V3PFHDriBg=
Subject key identifier: EA:BC:E2:DD:5D:FB:F8:32:FB:1F:18:89:52:C6:26:22:37:82:70:7D
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 0196A10EE6CBA8C8EACB4E1C620807422559
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/6rzi3V37-DL7HxiJUsYmIjeCcH0.roa
Signing time: Mon 05 May 2025 15:27:10 +0000
ROA not before: Mon 05 May 2025 15:27:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213990
IP address blocks: 80.71.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:0e:e6:cb:a8:c8:ea:cb:4e:1c:62:08:07:42:25:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: May 5 15:27:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eabce2dd5dfbf832fb1f188952c626223782707d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2d:84:1a:75:89:13:d5:f3:a8:cb:6d:d2:0f:
99:dd:3b:8b:77:e0:96:c0:fd:3d:a7:6a:69:eb:64:
ff:e8:20:3f:98:c1:62:4d:0f:d8:d8:00:84:2a:b4:
2e:75:2e:f6:d5:36:7a:dd:44:86:ca:56:48:b6:34:
cd:3f:5a:91:d5:14:84:e7:01:85:5c:bf:aa:6d:3f:
0d:34:5a:bb:ef:2a:1a:23:de:cd:85:ae:1a:d2:d5:
f1:da:69:9a:a3:21:3a:e9:e2:e6:d1:52:8e:4d:8d:
b1:db:51:ee:e0:d9:b5:3b:7b:aa:0f:ea:d5:9f:24:
61:38:5b:c9:d6:8a:35:7c:1e:f4:f8:a0:b2:e6:90:
f9:fa:bb:3b:7b:9f:4d:4a:67:ce:79:9b:60:dc:9d:
bb:ee:d4:b1:3d:10:ab:1d:67:67:62:01:b9:9e:e4:
56:74:66:bb:8a:e5:03:80:3a:60:d9:68:5e:6b:76:
e0:46:39:20:64:7f:fc:6a:b9:d7:c7:0e:d5:18:de:
4c:a7:5a:2f:26:70:5e:93:35:b8:26:88:13:e6:b6:
88:9c:90:48:88:e4:a5:6a:7f:67:3d:2f:c0:42:2c:
06:91:80:4f:0c:b7:34:17:aa:af:33:41:37:17:a8:
5c:42:24:c9:71:f2:7e:e6:66:6a:df:e7:ba:bc:f2:
b6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:BC:E2:DD:5D:FB:F8:32:FB:1F:18:89:52:C6:26:22:37:82:70:7D
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/6rzi3V37-DL7HxiJUsYmIjeCcH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.229.0/24
Signature Algorithm: sha256WithRSAEncryption
25:6b:e3:8c:8c:41:4f:0d:04:6d:22:1d:63:25:12:b2:73:a6:
d0:0c:10:38:72:dd:bb:48:a7:60:92:44:ea:fd:1d:1e:c6:90:
5f:b6:47:03:ce:4d:6a:ac:54:e1:28:21:6b:2c:b2:69:cf:d8:
38:13:30:0a:80:86:3f:68:13:56:4d:1e:9f:42:eb:8a:22:ca:
aa:75:bd:20:93:8d:0c:a0:a2:a7:bd:4e:cb:9e:6c:0b:e1:57:
5a:55:e2:87:fb:48:a7:1e:63:e1:f2:3a:26:9b:cb:5f:af:c6:
85:6d:8a:cc:4f:84:26:f9:54:44:97:9e:7f:06:1a:ab:63:a1:
6a:ae:72:e8:e5:c2:92:43:89:ba:08:83:39:2d:8e:79:c8:a2:
71:7f:a4:6b:f8:7c:db:cf:3b:41:46:9e:09:22:a5:6d:a4:29:
80:24:16:e1:10:af:84:8d:48:81:51:d1:32:80:a7:7a:af:36:
8d:5b:34:5d:0c:d6:4c:19:69:b2:ea:1d:c5:02:70:b2:c2:e9:
4e:c6:ce:1c:1c:3f:06:e5:ab:54:cd:73:66:f6:8c:0d:6b:f1:
53:be:07:74:8b:6d:e0:6c:93:95:0f:d8:71:76:2d:69:d1:11:
9f:13:88:70:8c:65:b4:0d:c5:12:f4:f7:63:92:d7:b4:c1:c8:
42:95:5d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:23:05 2025 by rpki-client