Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/s6l73Ozc9G__irpTpPlNucOT8bs.roa
File: s6l73Ozc9G__irpTpPlNucOT8bs.roa (raw, json)
Hash identifier: GqBwmeoAuFCGB9Y+I57QWriPb1mo81JmyaYf7vUIrHc=
Subject key identifier: B3:A9:7B:DC:EC:DC:F4:6F:FF:8A:BA:53:A4:F9:4D:B9:C3:93:F1:BB
Certificate issuer: /CN=206f1c32bc0a9006081d552fede67d6842921ec3
Certificate serial: 0196A4FC272479C05B1B659B5E6C34C9EF27
Authority key identifier: 20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/s6l73Ozc9G__irpTpPlNucOT8bs.roa
Signing time: Tue 06 May 2025 09:45:10 +0000
ROA not before: Tue 06 May 2025 09:45:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212683
IP address blocks: 2a11:2647::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:fc:27:24:79:c0:5b:1b:65:9b:5e:6c:34:c9:ef:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206f1c32bc0a9006081d552fede67d6842921ec3
Validity
Not Before: May 6 09:45:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3a97bdcecdcf46fff8aba53a4f94db9c393f1bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:eb:c9:a9:7e:c5:f2:e2:ea:92:b6:d9:9d:61:
9a:60:6f:f4:13:50:22:ba:72:ca:dd:df:43:66:7c:
93:70:95:d9:3c:7c:46:8a:f7:48:50:52:64:40:bb:
67:10:95:33:76:17:f6:c5:c5:f7:90:c5:ec:3c:64:
9d:80:f8:43:20:e4:25:35:33:27:aa:18:c1:93:f4:
cc:d3:54:48:dd:e3:66:00:ac:c6:6a:aa:66:13:64:
cb:8f:6e:90:05:16:33:f6:69:5f:46:0c:a3:9e:74:
ec:cf:ea:61:66:2a:63:31:65:56:b2:bf:7d:31:f9:
da:d4:5f:e7:e5:dc:c2:de:f4:99:f4:32:b8:b8:d3:
ea:1c:9f:42:b4:26:3b:f2:e4:a3:bb:30:64:24:10:
a9:24:21:17:3f:af:01:fb:e6:cd:6e:9b:97:7a:ee:
67:c6:bf:68:d6:8f:bd:e6:66:4c:0e:61:cd:41:f6:
c7:92:37:a6:60:14:bd:1a:19:d9:ea:ef:63:3a:1c:
65:6e:b3:de:a2:fc:5f:f2:58:c5:74:c8:e3:f7:2b:
a1:79:d9:87:b7:0c:29:1d:25:84:15:b0:99:f0:54:
55:89:8f:d7:d9:fb:35:b0:5b:6b:81:bd:2e:e9:18:
d2:bb:d5:6b:22:88:4a:fa:c8:1f:5f:2c:bc:11:bb:
21:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A9:7B:DC:EC:DC:F4:6F:FF:8A:BA:53:A4:F9:4D:B9:C3:93:F1:BB
X509v3 Authority Key Identifier:
keyid:20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/s6l73Ozc9G__irpTpPlNucOT8bs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:2647::/32
Signature Algorithm: sha256WithRSAEncryption
61:37:de:8e:5c:97:f3:12:82:ad:61:87:cb:71:e7:ad:c6:8e:
d1:3d:c2:8b:68:ac:96:3f:f8:b3:5a:2a:e5:db:82:76:e6:e6:
22:1a:c5:1f:47:4e:c8:2f:4f:c2:3b:8b:45:ea:8f:b1:d7:f1:
4f:62:0f:57:03:7b:81:0d:e1:e0:dc:56:e3:7e:33:ed:0c:07:
87:ca:5b:a7:c2:3f:c7:40:8d:55:e8:12:07:30:e9:d5:d7:bc:
5c:da:4a:f6:c6:ba:78:6b:2e:fc:44:eb:98:0a:cd:27:ae:b2:
d8:df:b0:98:b6:6c:1a:a9:6c:4e:79:6e:5f:cc:d2:3f:1f:0d:
ae:7c:71:b8:5d:10:39:4f:e7:14:f0:3f:97:5f:bc:3b:50:b4:
e5:56:33:a2:25:19:85:27:e7:b9:f5:0f:cf:26:36:69:d6:bb:
55:af:95:e1:60:97:40:79:5a:b4:94:8e:ae:4d:0c:61:79:5e:
a5:3d:72:99:ab:3f:de:13:68:2a:d9:02:70:06:44:d9:57:9a:
e0:69:db:b2:1a:14:d9:26:ce:8b:cc:7a:e7:9d:2a:0c:92:f1:
10:29:6b:3f:93:fc:92:e0:35:bb:b6:e9:47:4c:97:4c:fb:89:
a0:9b:73:e8:12:16:e9:b8:6a:af:8f:dc:ae:66:c5:90:6c:aa:
ec:8f:1a:d9
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZak/CckecBbG2WbXmw0ye8nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwNmYxYzMyYmMwYTkwMDYwODFkNTUyZmVkZTY3ZDY4NDI5
MjFlYzMwHhcNMjUwNTA2MDk0NTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiM2E5N2JkY2VjZGNmNDZmZmY4YWJhNTNhNGY5NGRiOWMzOTNmMWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquvJqX7F8uLqkrbZnWGaYG/0E1Ai
unLK3d9DZnyTcJXZPHxGivdIUFJkQLtnEJUzdhf2xcX3kMXsPGSdgPhDIOQlNTMn
qhjBk/TM01RI3eNmAKzGaqpmE2TLj26QBRYz9mlfRgyjnnTsz+phZipjMWVWsr99
Mfna1F/n5dzC3vSZ9DK4uNPqHJ9CtCY78uSjuzBkJBCpJCEXP68B++bNbpuXeu5n
xr9o1o+95mZMDmHNQfbHkjemYBS9GhnZ6u9jOhxlbrPeovxf8ljFdMjj9yuhedmH
twwpHSWEFbCZ8FRViY/X2fs1sFtrgb0u6RjSu9VrIohK+sgfXyy8EbshmQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFLOpe9zs3PRv/4q6U6T5TbnDk/G7MB8GA1UdIwQY
MBaAFCBvHDK8CpAGCB1VL+3mfWhCkh7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzIt
YmJhODYwYjI2YzAyLzEvczZsNzNPemM5R19faXJwVHBQbE51Y09UOGJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzItYmJhODYwYjI2YzAy
LzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhEmRzAN
BgkqhkiG9w0BAQsFAAOCAQEAYTfejlyX8xKCrWGHy3HnrcaO0T3Ci2islj/4s1oq
5duCdubmIhrFH0dOyC9PwjuLReqPsdfxT2IPVwN7gQ3h4NxW434z7QwHh8pbp8I/
x0CNVegSBzDp1de8XNpK9sa6eGsu/ETrmArNJ66y2N+wmLZsGqlsTnluX8zSPx8N
rnxxuF0QOU/nFPA/l1+8O1C05VYzoiUZhSfnufUPzyY2ada7Va+V4WCXQHlatJSO
rk0MYXlepT1ymas/3hNoKtkCcAZE2Vea4GnbshoU2SbOi8x6550qDJLxEClrP5P8
kuA1u7bpR0yXTPuJoJtz6BIW6bhqr4/crmbFkGyq7I8a2Q==
-----END CERTIFICATE-----
Generated at Sat May 10 14:22:21 2025 by rpki-client