Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/ve2iEFS7yneK4NHtoTNszVB8cZo.roa
File: ve2iEFS7yneK4NHtoTNszVB8cZo.roa (raw, json)
Hash identifier: g/XvhTcgORHoQzc25n1ZqGUd92LVhhds69w5ITmpr4Q=
Subject key identifier: BD:ED:A2:10:54:BB:CA:77:8A:E0:D1:ED:A1:33:6C:CD:50:7C:71:9A
Certificate issuer: /CN=168a919a4a463f3ca2bba5442550fc247da90cae
Certificate serial: 019638784E8120B129BC6A8ACDFFBED41B03
Authority key identifier: 16:8A:91:9A:4A:46:3F:3C:A2:BB:A5:44:25:50:FC:24:7D:A9:0C:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FoqRmkpGPzyiu6VEJVD8JH2pDK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/ve2iEFS7yneK4NHtoTNszVB8cZo.roa
Signing time: Tue 15 Apr 2025 08:02:10 +0000
ROA not before: Tue 15 Apr 2025 08:02:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196776
IP address blocks: 91.215.236.0/22 maxlen: 24
91.215.236.0/23 maxlen: 24
91.215.238.0/24 maxlen: 24
91.215.239.0/24 maxlen: 24
91.229.250.0/23 maxlen: 24
195.88.90.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/FoqRmkpGPzyiu6VEJVD8JH2pDK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/FoqRmkpGPzyiu6VEJVD8JH2pDK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FoqRmkpGPzyiu6VEJVD8JH2pDK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:38:78:4e:81:20:b1:29:bc:6a:8a:cd:ff:be:d4:1b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=168a919a4a463f3ca2bba5442550fc247da90cae
Validity
Not Before: Apr 15 08:02:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bdeda21054bbca778ae0d1eda1336ccd507c719a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e8:78:2c:ce:42:c8:0c:fb:97:14:69:f0:09:
a6:5a:27:84:63:4a:2f:aa:9e:57:8a:3a:6b:f5:74:
a4:9b:bd:dd:09:58:a0:21:9a:b3:64:e0:78:7e:b8:
0e:63:3a:79:d8:7e:c9:53:9d:47:4a:b3:6c:9f:14:
c0:dd:28:74:e1:15:99:45:03:a6:c1:a8:4f:b7:e8:
ed:6f:0c:55:e5:f7:c4:80:37:82:1d:e7:ff:1d:94:
90:d3:3a:8d:79:44:61:da:32:1b:fe:a0:e3:ed:d6:
26:07:94:a4:2e:a3:cb:4b:b3:49:5e:e0:65:ab:11:
01:fe:ca:b0:56:b0:34:ad:87:92:6a:39:2d:7e:7b:
cf:2a:56:28:90:e0:a8:05:95:cf:91:a2:85:a0:e8:
39:1a:89:aa:64:6a:b1:1a:e3:35:29:8f:6b:cf:e7:
8c:f8:d4:2a:20:2e:cb:98:5f:88:33:ce:e8:e3:a0:
f6:2b:6c:65:e1:e5:ac:bd:6d:ff:80:82:92:d2:da:
af:bc:84:29:03:09:b5:80:62:05:cd:50:64:5e:63:
b0:d5:21:a5:c0:5e:41:92:91:b3:09:8c:4e:16:8b:
ad:9c:06:72:4b:40:f4:d2:cd:e9:62:a8:67:19:18:
65:68:67:64:49:8f:73:13:1e:39:7d:ea:eb:a3:58:
99:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:ED:A2:10:54:BB:CA:77:8A:E0:D1:ED:A1:33:6C:CD:50:7C:71:9A
X509v3 Authority Key Identifier:
keyid:16:8A:91:9A:4A:46:3F:3C:A2:BB:A5:44:25:50:FC:24:7D:A9:0C:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FoqRmkpGPzyiu6VEJVD8JH2pDK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/ve2iEFS7yneK4NHtoTNszVB8cZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/FoqRmkpGPzyiu6VEJVD8JH2pDK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.215.236.0/22
91.229.250.0/23
195.88.90.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:61:32:0e:e3:d1:8d:dd:d0:ce:e9:15:2e:8c:c2:12:2c:45:
ff:25:28:9d:a3:ac:4a:4c:89:da:70:09:c8:53:44:5c:93:7f:
15:7a:66:10:81:1c:8c:df:3c:de:f6:91:11:3a:92:3a:a6:d4:
c3:3b:e9:20:68:7a:c7:6f:b0:6a:d4:19:b6:99:30:7f:0c:55:
26:62:6c:3c:cd:a8:6a:bd:0e:8b:ff:7a:bc:26:03:46:18:d1:
84:9e:7c:e3:2a:9f:90:c3:70:0e:7d:88:26:d3:91:0e:0f:ba:
24:6a:ba:39:b1:8d:dc:91:d3:73:62:ec:2b:86:3e:32:5d:47:
40:1c:9f:8e:fc:e4:fd:11:9a:ad:bd:3c:c5:7a:b2:63:fd:2f:
03:68:55:6d:e0:50:db:75:6f:00:3e:22:91:40:54:09:c1:81:
58:32:c1:ff:40:c8:e9:ad:1c:22:de:da:5c:bd:a7:d4:7e:d7:
8f:0d:c0:a4:c0:24:e6:e8:7f:64:8e:1e:e3:ea:ec:a2:6b:5b:
68:7f:c2:d1:7c:d4:b6:15:fb:b5:4b:3f:1a:68:19:08:d2:fe:
43:5f:46:14:07:49:3e:00:b0:a9:87:34:35:b3:7b:79:8c:0c:
a5:d1:5f:1a:0b:95:56:7b:1e:33:7c:1c:54:2f:ca:cb:28:0a:
aa:c4:e7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:51:00 2025 by rpki-client