Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/C6x_6w-E774Ctv2tM-pwvlDis4g.roa
File: C6x_6w-E774Ctv2tM-pwvlDis4g.roa (raw, json)
Hash identifier: INLpD3Xn2Y08yhQMCV4sfvThKHmVJ+/cWpnVIk0AjIY=
Subject key identifier: 0B:AC:7F:EB:0F:84:EF:BE:02:B6:FD:AD:33:EA:70:BE:50:E2:B3:88
Certificate issuer: /CN=ece6498d174adf5c89a365c2d1e477dcf24f982e
Certificate serial: 0197A5F13FD3AC9E913383A8C2C1598A95A7
Authority key identifier: EC:E6:49:8D:17:4A:DF:5C:89:A3:65:C2:D1:E4:77:DC:F2:4F:98:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7OZJjRdK31yJo2XC0eR33PJPmC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/C6x_6w-E774Ctv2tM-pwvlDis4g.roa
Signing time: Wed 25 Jun 2025 07:15:40 +0000
ROA not before: Wed 25 Jun 2025 07:15:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198949
IP address blocks: 91.212.189.0/24 maxlen: 24
198.202.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7OZJjRdK31yJo2XC0eR33PJPmC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 19:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a5:f1:3f:d3:ac:9e:91:33:83:a8:c2:c1:59:8a:95:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ece6498d174adf5c89a365c2d1e477dcf24f982e
Validity
Not Before: Jun 25 07:15:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0bac7feb0f84efbe02b6fdad33ea70be50e2b388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:07:53:89:f2:e7:18:78:3a:f7:40:31:33:7c:
1b:ab:57:3b:51:a4:b3:77:96:d6:cf:9c:1a:b6:c8:
f3:2c:d4:ed:05:64:87:45:f4:4d:6d:e7:31:7f:c3:
2b:fa:38:9d:14:6a:bb:8c:98:15:11:dd:b0:10:5e:
06:73:6c:bd:82:46:78:89:94:c6:59:65:86:3d:19:
e2:28:7f:2f:19:8a:1a:b7:60:ef:d0:98:a0:b0:d4:
55:05:fc:83:9c:7f:32:ca:99:fc:72:79:7d:28:22:
fc:00:c8:b2:f6:69:2a:41:e3:80:d8:26:29:50:82:
84:4a:0c:39:37:8d:2b:87:f6:47:d5:a6:ea:50:03:
52:d3:52:3f:ae:f0:13:c3:6d:b0:44:e4:5a:6d:d8:
6b:63:49:af:ec:f0:f8:d1:94:ed:c1:d8:0e:67:47:
0e:2c:9b:6d:29:02:ec:11:c7:62:3b:26:7c:a6:52:
15:e7:52:f3:a0:42:4d:5c:6a:57:e4:95:d4:d0:d9:
31:af:45:df:45:e6:f9:ec:8b:37:54:d1:e9:67:5c:
8d:fa:2b:ba:03:87:51:ff:18:03:a5:a3:5b:e9:d5:
04:3b:bd:12:25:da:54:db:9c:32:d1:d6:d4:dc:9a:
e2:cf:b6:aa:8f:90:70:bc:ec:92:28:69:0c:56:66:
43:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:AC:7F:EB:0F:84:EF:BE:02:B6:FD:AD:33:EA:70:BE:50:E2:B3:88
X509v3 Authority Key Identifier:
keyid:EC:E6:49:8D:17:4A:DF:5C:89:A3:65:C2:D1:E4:77:DC:F2:4F:98:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7OZJjRdK31yJo2XC0eR33PJPmC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/C6x_6w-E774Ctv2tM-pwvlDis4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.189.0/24
198.202.22.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:42:d7:37:71:a5:5d:09:f1:44:f4:ef:b7:1d:c7:fd:91:cd:
d6:a9:20:68:f1:22:5a:34:a3:ae:00:a2:31:2f:a4:93:6b:41:
64:f6:3d:22:50:5b:91:81:06:5f:51:bc:90:e6:fd:c4:77:7c:
da:9c:00:d1:ef:83:ff:f2:f5:05:dd:95:48:f9:50:03:2a:50:
ad:3f:ed:e0:bf:0c:55:84:69:48:f7:a8:e3:1f:b9:98:af:2b:
8d:7f:5b:24:c3:19:5e:cd:7b:d6:38:fe:02:35:de:ab:d0:9c:
59:26:2a:5c:af:50:78:d8:c3:04:5c:18:20:99:0f:42:d8:49:
d4:e6:e0:a9:80:8e:c4:ce:7f:7a:9b:ce:12:0f:33:cb:3e:e2:
67:25:55:20:1a:de:dc:53:48:64:4b:85:4e:38:63:da:1e:4e:
28:fb:e4:66:70:12:ef:8b:87:f2:e9:d3:a6:bb:3e:1e:2e:35:
cb:87:c2:c5:f3:2a:22:83:2b:ba:d3:a1:68:39:d9:6d:cf:0a:
7b:da:85:12:80:99:2e:35:c5:e1:ab:bd:89:47:55:67:33:63:
b8:04:b8:ca:4c:8a:50:40:d8:62:32:e8:23:ba:fd:8f:d3:23:
c5:46:72:4f:dc:5d:5a:c3:6d:bd:0a:8e:25:02:19:84:f6:e0:
15:36:63:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 22:07:48 2025 by rpki-client