Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/P6GzP5P2SxjOupJ8No6O5AiPRkM.roa
File: P6GzP5P2SxjOupJ8No6O5AiPRkM.roa (raw, json)
Hash identifier: l3pphqq6jJ7FfOxu+IR4p5jo8lTrdpoxwwYXrq5fDuY=
Subject key identifier: 3F:A1:B3:3F:93:F6:4B:18:CE:BA:92:7C:36:8E:8E:E4:08:8F:46:43
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0195F2A0A80ED93C332F09DB91D7C73FEF0F
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/P6GzP5P2SxjOupJ8No6O5AiPRkM.roa
Signing time: Tue 01 Apr 2025 18:32:49 +0000
ROA not before: Tue 01 Apr 2025 18:32:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134526
IP address blocks: 45.138.109.0/24 maxlen: 32
194.49.108.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f2:a0:a8:0e:d9:3c:33:2f:09:db:91:d7:c7:3f:ef:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Apr 1 18:32:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3fa1b33f93f64b18ceba927c368e8ee4088f4643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4a:49:6d:d1:c3:30:46:d3:71:b6:a2:bb:0a:
16:02:46:8a:49:3b:9d:48:e8:ac:fa:07:14:87:eb:
fa:15:00:78:01:a9:ac:68:7b:92:f7:06:84:74:5a:
4f:58:79:d4:00:6a:c2:c3:1b:df:14:e0:ce:da:98:
7e:04:84:5b:28:2e:34:ef:31:98:a4:f9:8d:b7:9b:
28:ac:76:1e:17:d1:9e:04:2e:fc:2c:16:0b:9b:16:
ae:d5:4d:ff:9f:39:b2:56:01:e3:89:5b:58:64:ab:
a6:35:31:af:48:cd:d5:69:8e:27:55:d6:f9:dc:dc:
c9:b8:4e:95:ac:fa:09:bb:71:6e:a3:c7:3c:82:81:
d6:17:cb:b6:c7:d7:84:29:5b:93:e6:95:9f:60:65:
40:fd:cc:f9:5e:a1:8b:39:96:1f:18:dc:5b:17:0f:
b4:14:e6:b7:d9:e8:f6:8f:40:02:e6:78:bd:c7:5c:
45:e6:af:e4:73:c9:d9:9d:b3:54:b9:26:5d:83:82:
ab:d8:23:08:6d:1c:fe:e7:0b:c7:d4:43:44:a9:e0:
2f:50:d0:3f:cd:be:f0:67:4d:56:a8:e2:6a:a6:ef:
f0:d5:56:cf:84:6b:3f:6b:b0:6a:2d:81:81:7b:26:
4a:e6:a5:d5:3f:99:69:1d:b7:a7:34:36:f2:9f:5b:
a3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A1:B3:3F:93:F6:4B:18:CE:BA:92:7C:36:8E:8E:E4:08:8F:46:43
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/P6GzP5P2SxjOupJ8No6O5AiPRkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.109.0/24
194.49.108.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:e4:03:0f:df:9b:e4:9c:42:35:bd:26:fc:4b:cd:48:02:23:
2f:58:04:87:0f:74:76:ff:6f:09:42:00:01:b7:9b:68:45:b2:
8f:28:a5:ae:56:55:13:59:11:81:33:4e:9c:c8:ad:47:09:42:
56:5e:4e:4d:2c:39:8e:fd:6e:f8:59:46:98:b2:89:35:2c:ca:
79:87:54:79:cf:74:63:97:19:29:54:11:5c:4d:87:72:03:64:
1b:e5:0b:07:84:03:75:fc:c0:a2:4e:43:e6:f3:e3:65:69:89:
63:b8:36:10:90:60:98:90:a4:e9:de:bf:da:25:1c:4b:ae:5f:
64:a7:55:e7:a1:af:59:fd:ea:eb:54:66:04:ed:95:d9:1c:ef:
9d:86:a1:1d:2e:d9:2a:29:41:d6:95:48:fa:22:d2:0c:a7:c1:
17:6a:5a:a2:91:23:e9:c0:09:6f:04:35:ad:c1:57:b6:43:8d:
0c:1c:2f:1f:ec:0e:00:47:f9:57:11:94:18:12:25:93:7c:05:
30:33:77:04:cf:a2:68:8e:54:4f:cf:cf:37:8e:fa:85:c7:91:
db:ad:89:e1:3d:37:91:82:74:05:c0:a9:7d:e0:87:7f:fc:0b:
91:91:8d:d0:4d:4b:d8:d9:a8:3c:44:40:9e:ad:55:3b:ac:c7:
64:4a:a8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 22:02:27 2025 by rpki-client