Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/sbVaoK7cyxj-VnD8va75ix3nyNw.roa
File: sbVaoK7cyxj-VnD8va75ix3nyNw.roa (raw, json)
Hash identifier: pjsFkCMbQgy3U0JkO6dlxHoVecJnrxFt7pITy+Qn6l0=
Subject key identifier: B1:B5:5A:A0:AE:DC:CB:18:FE:56:70:FC:BD:AE:F9:8B:1D:E7:C8:DC
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0195C770C0DA4D3FF508F76F0B40A0F9FF94
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/sbVaoK7cyxj-VnD8va75ix3nyNw.roa
Signing time: Mon 24 Mar 2025 09:16:50 +0000
ROA not before: Mon 24 Mar 2025 09:16:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.114.0/23 maxlen: 23
194.87.134.0/23 maxlen: 23
195.58.58.0/23 maxlen: 23
195.58.62.0/23 maxlen: 23
195.133.0.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c7:70:c0:da:4d:3f:f5:08:f7:6f:0b:40:a0:f9:ff:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Mar 24 09:16:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1b55aa0aedccb18fe5670fcbdaef98b1de7c8dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:aa:f0:cc:97:b3:f7:05:ff:da:44:fb:2e:af:
da:04:c9:14:3c:07:08:95:14:00:04:06:bc:8c:79:
5c:f4:ff:98:18:7c:85:d6:0b:b8:73:5a:94:7e:53:
f1:66:98:e1:50:b3:05:dd:ce:f9:01:fc:37:12:00:
a5:42:d7:64:72:0e:3a:b3:c2:12:23:32:dc:94:ee:
e4:cb:1e:d4:d4:17:30:f2:f6:cb:65:86:42:cc:c3:
60:77:ee:68:42:c3:c0:3d:19:dc:61:62:9a:90:38:
97:e9:b9:da:14:fe:03:c4:54:32:3f:e7:03:3f:40:
ae:13:79:71:48:82:46:49:8f:92:99:ec:4b:16:16:
c4:25:99:47:0b:45:14:ca:c5:6b:13:31:dd:f7:84:
12:22:04:9f:6b:7b:5b:57:af:e5:a5:de:98:1a:a9:
0d:fd:7c:84:64:1f:12:91:a3:47:b8:fd:28:f2:8d:
32:80:75:f1:f5:68:33:cf:04:b9:df:0b:0c:dd:30:
04:65:90:75:d3:fa:7b:05:16:43:75:54:e2:53:1a:
5c:b0:f7:fd:c8:8e:12:26:6c:5a:9d:a2:dc:52:cc:
f2:8f:ce:8c:e8:0b:4f:4a:58:40:f3:14:20:e6:bd:
de:49:e3:d5:13:81:0a:34:63:33:27:69:3f:ad:e8:
d5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B5:5A:A0:AE:DC:CB:18:FE:56:70:FC:BD:AE:F9:8B:1D:E7:C8:DC
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/sbVaoK7cyxj-VnD8va75ix3nyNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.114.0/23
194.87.134.0/23
195.58.58.0/23
195.58.62.0/23
195.133.0.0/24
195.133.84.0/23
Signature Algorithm: sha256WithRSAEncryption
92:b8:93:b0:9a:d0:50:e5:b5:07:fa:f2:09:f6:ec:0d:1c:8b:
2c:c6:cf:c5:ff:06:db:87:d5:db:75:4a:6e:fd:50:a4:ba:ac:
b9:2c:2b:af:b4:71:3b:7a:b1:55:fd:8b:c7:9d:34:5a:19:07:
bf:8b:d9:58:28:ad:1b:68:97:cb:2d:95:53:76:20:df:70:7e:
ef:0d:47:66:6b:46:5c:cf:0b:5c:6e:49:db:ac:fb:3c:f0:75:
8f:43:4b:61:dd:ef:65:a9:e8:1b:d8:e1:17:7d:d4:c1:98:94:
32:ce:85:83:ce:1a:87:93:d2:77:da:62:9b:ee:29:77:65:77:
13:ea:27:d8:43:6d:c9:85:50:0e:8d:7b:8f:33:66:b2:9c:b3:
38:fe:4d:fc:08:b2:2d:9a:bf:56:5e:2e:51:00:83:1c:60:01:
4c:d4:3f:03:34:5b:7e:36:47:9d:64:07:bc:e6:b8:86:2f:54:
76:d7:3f:bd:23:df:6f:70:27:2e:d0:ae:2e:9f:e8:1c:6e:cd:
4b:8d:93:74:e2:da:d8:6f:7b:1d:71:1b:15:10:08:1e:d8:6f:
74:ea:9d:69:71:19:d6:43:82:e7:5d:af:ea:f7:96:dd:aa:58:
0f:00:8d:93:3f:d0:11:88:ff:ca:f9:03:f6:05:41:d3:cd:bb:
82:97:7c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:03:57 2025 by rpki-client