Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/B5FqXDaYZCVMb2B7pm4jOy1LI9c.roa
File: B5FqXDaYZCVMb2B7pm4jOy1LI9c.roa (raw, json)
Hash identifier: YqjrPS9Nh7fuqNTun1gC0PMGcvqjmxQx8dHgTyQYeDo=
Subject key identifier: 07:91:6A:5C:36:98:64:25:4C:6F:60:7B:A6:6E:23:3B:2D:4B:23:D7
Certificate issuer: /CN=df158dcb290ec5ae7f66c1fa0f8d963211deea54
Certificate serial: 01965E1A662C6B03626F4D761D34BD13C6A0
Authority key identifier: DF:15:8D:CB:29:0E:C5:AE:7F:66:C1:FA:0F:8D:96:32:11:DE:EA:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xWNyykOxa5_ZsH6D42WMhHe6lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/B5FqXDaYZCVMb2B7pm4jOy1LI9c.roa
Signing time: Tue 22 Apr 2025 15:25:10 +0000
ROA not before: Tue 22 Apr 2025 15:25:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216210
IP address blocks: 91.216.112.0/24 maxlen: 24
2a14:f580::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xWNyykOxa5_ZsH6D42WMhHe6lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:1a:66:2c:6b:03:62:6f:4d:76:1d:34:bd:13:c6:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df158dcb290ec5ae7f66c1fa0f8d963211deea54
Validity
Not Before: Apr 22 15:25:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07916a5c369864254c6f607ba66e233b2d4b23d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:65:97:bb:a0:41:1a:f9:dd:e4:26:6c:cb:bc:
10:1b:ba:87:9c:c2:32:30:d6:d2:e9:cf:2b:2d:95:
7d:01:e3:1f:4b:0e:60:87:e7:05:69:cc:81:89:b8:
7b:0a:09:35:99:9c:da:d2:ff:b6:c0:0e:d1:b7:a1:
fe:66:79:a3:a9:07:b3:56:db:fb:00:a9:8e:7f:87:
0e:08:08:e6:79:f2:8d:c3:2e:ed:18:ba:2c:22:ad:
05:65:48:00:a8:31:0c:ef:62:b0:ea:84:97:63:c9:
5c:48:03:78:01:82:04:06:47:22:4a:9c:49:d5:dc:
8d:0e:12:4c:c5:66:14:c1:c6:50:ae:d9:8c:7f:d8:
86:6f:0c:7a:c1:75:67:0c:11:3e:45:93:df:d3:cc:
a0:05:96:e6:46:54:4b:dc:a3:c3:56:8a:42:b8:ce:
98:f2:32:e2:8c:0b:39:80:01:ca:3d:41:81:d2:61:
76:a1:65:d5:3e:ae:7c:77:da:d3:93:01:2c:bd:1f:
4c:5e:6c:5f:5b:e4:3a:46:25:03:74:93:e9:53:99:
c8:74:49:93:f9:b2:b1:59:c7:3f:2a:00:64:6f:b7:
c1:cf:4b:7b:c2:7f:5c:f4:e0:ba:4b:fd:57:29:ce:
61:c8:07:ee:b1:0f:5f:87:29:f5:19:9f:70:ee:eb:
be:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:91:6A:5C:36:98:64:25:4C:6F:60:7B:A6:6E:23:3B:2D:4B:23:D7
X509v3 Authority Key Identifier:
keyid:DF:15:8D:CB:29:0E:C5:AE:7F:66:C1:FA:0F:8D:96:32:11:DE:EA:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xWNyykOxa5_ZsH6D42WMhHe6lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/B5FqXDaYZCVMb2B7pm4jOy1LI9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.112.0/24
IPv6:
2a14:f580::/29
Signature Algorithm: sha256WithRSAEncryption
2b:4b:63:13:66:ae:2c:1f:4e:26:f1:c9:8a:97:3c:82:1a:f2:
e6:11:7d:ef:99:03:30:e2:f3:29:99:2a:e7:02:7f:fd:e4:0f:
7c:c2:c3:6b:b4:68:0f:5f:59:19:f5:2d:06:6a:3a:af:24:3b:
1c:b7:3a:83:20:b7:de:4e:1c:7b:f8:26:fb:7e:82:e0:2d:7e:
be:94:c2:c5:5b:93:c7:81:8c:fa:37:65:66:bf:3b:52:23:33:
3a:99:86:17:5c:e6:75:ed:7f:a8:47:f7:a7:10:b5:a3:6a:c0:
e3:cc:76:45:cd:cf:38:8d:6c:0b:fe:55:1c:ca:72:f8:ac:d7:
7f:d2:ad:a6:e6:28:ca:a8:42:24:58:b5:e5:0f:6b:96:68:dd:
28:44:0a:41:f9:d5:6f:a2:21:bc:64:82:4e:e4:06:18:75:56:
a2:39:7d:3b:17:0e:ff:d9:b9:af:d5:77:b1:4b:e5:b4:04:5a:
42:2e:97:1a:5c:b9:3e:67:ee:67:79:66:eb:75:61:dd:ea:d1:
f6:c6:2e:49:4b:42:2f:09:5c:1a:89:19:07:66:c5:c0:e3:0e:
4c:d6:47:fc:16:70:37:a3:c4:d8:e1:12:c7:bc:22:40:d4:d8:
f4:01:f4:09:e1:43:db:70:ab:84:ee:61:ce:ae:1d:2e:e5:85:
4b:b2:80:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:23:45 2025 by rpki-client