Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/AOPS_RNUN6C_o_rOcZL9uTkJpmY.roa
File: AOPS_RNUN6C_o_rOcZL9uTkJpmY.roa (raw, json)
Hash identifier: Px9yrVlBYtJJHli8YOeQSPpBhl1NXrWdG9JALrRzsfU=
Subject key identifier: 00:E3:D2:FD:13:54:37:A0:BF:A3:FA:CE:71:92:FD:B9:39:09:A6:66
Certificate issuer: /CN=6e7eb1318a3cc8834f5c06854bec14f5837746d9
Certificate serial: 01978862C40A178F4D36C1EC4EDD2DB3993C
Authority key identifier: 6E:7E:B1:31:8A:3C:C8:83:4F:5C:06:85:4B:EC:14:F5:83:77:46:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bn6xMYo8yINPXAaFS-wU9YN3Rtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/AOPS_RNUN6C_o_rOcZL9uTkJpmY.roa
Signing time: Thu 19 Jun 2025 13:31:03 +0000
ROA not before: Thu 19 Jun 2025 13:31:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214836
IP address blocks: 91.212.184.0/24 maxlen: 24
2001:67c:874::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bn6xMYo8yINPXAaFS-wU9YN3Rtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:62:c4:0a:17:8f:4d:36:c1:ec:4e:dd:2d:b3:99:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e7eb1318a3cc8834f5c06854bec14f5837746d9
Validity
Not Before: Jun 19 13:31:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=00e3d2fd135437a0bfa3face7192fdb93909a666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fa:68:fb:b2:81:85:db:46:cb:85:89:a3:d8:
80:c9:f0:60:ea:ac:e1:5d:19:39:98:88:f3:e7:48:
b7:2b:9d:bd:78:6e:7d:3b:fe:1e:ff:b0:5e:ad:27:
9d:28:e6:b6:67:8d:65:1d:47:0f:de:a7:c7:78:6b:
f7:00:aa:27:db:13:fe:3c:f4:aa:94:f5:ac:05:2b:
11:8c:ee:70:8b:91:79:3f:f9:e3:a9:08:29:9a:8e:
70:88:54:c7:2c:aa:35:20:3a:4c:1b:12:c5:4a:eb:
27:47:d7:8c:1c:0f:2a:08:f5:db:2d:64:de:0b:06:
1d:f5:dd:86:22:fc:d5:98:46:5f:29:50:9d:b3:c2:
a9:a0:55:ea:e4:22:af:75:46:6b:c2:54:a2:33:b9:
52:40:5e:be:95:60:ac:d4:8c:43:38:25:cb:41:b6:
94:8d:7b:b2:25:bc:15:a3:89:d2:c6:68:f2:d1:a5:
29:1b:ae:9f:a5:1d:61:bf:d8:9a:42:a7:12:42:86:
a1:57:17:db:6c:89:97:45:a6:50:6b:da:44:eb:5c:
d1:b2:2e:ed:19:ce:8a:11:85:fe:79:4f:16:c4:7a:
41:44:1c:9a:5c:de:eb:6b:e3:b2:f3:9d:e9:75:24:
d7:75:36:c2:d6:13:6b:aa:fb:b1:2f:3e:7b:b9:e4:
fc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E3:D2:FD:13:54:37:A0:BF:A3:FA:CE:71:92:FD:B9:39:09:A6:66
X509v3 Authority Key Identifier:
keyid:6E:7E:B1:31:8A:3C:C8:83:4F:5C:06:85:4B:EC:14:F5:83:77:46:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bn6xMYo8yINPXAaFS-wU9YN3Rtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/AOPS_RNUN6C_o_rOcZL9uTkJpmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.184.0/24
IPv6:
2001:67c:874::/48
Signature Algorithm: sha256WithRSAEncryption
80:69:87:36:2e:4e:61:d6:31:a9:28:65:c8:19:21:bf:4d:96:
59:05:44:74:74:5c:d5:bc:20:72:b1:12:f2:d1:3b:24:9e:28:
0f:6b:06:9b:08:90:88:1b:00:b9:64:f1:dc:d1:d2:d4:00:97:
43:9a:a7:9f:ba:4c:a5:54:76:df:69:76:f9:66:ef:a8:54:e2:
ac:14:e5:cb:56:2d:8a:12:6d:47:40:30:ca:aa:f6:51:41:58:
20:59:ec:c8:8f:a8:9c:e2:b5:c6:20:f9:4f:90:3c:67:fe:13:
41:3f:02:c0:9a:c7:80:65:ee:74:11:f7:d2:a1:97:82:8d:9e:
94:d2:78:48:53:44:1a:06:68:9d:37:bb:f3:07:1d:5d:e6:8e:
64:36:59:20:de:26:bf:1c:35:41:7b:14:b5:f2:6a:75:60:e4:
6b:a3:37:47:f7:5e:f5:f9:4e:6a:82:ad:89:ff:3d:03:c4:9d:
9a:ce:3b:b3:cf:c9:fd:eb:27:6c:d2:d0:52:fb:50:5e:c0:66:
28:36:3c:09:63:20:a8:c2:df:c6:6a:f8:bb:ac:bc:fe:e3:48:
69:17:82:dd:d8:81:b9:a0:34:7f:21:77:9c:a5:d9:1d:d3:42:
a7:42:20:c0:58:ac:71:1f:79:f5:20:42:a0:55:d8:f5:d1:7b:
dc:16:af:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:44:43 2025 by rpki-client