Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/ownf_EA4QLCePC3UUTTwGnLoTLw.roa
File: ownf_EA4QLCePC3UUTTwGnLoTLw.roa (raw, json)
Hash identifier: 93BCrxGb3Lysj+TYISTy8jTAsJzMKioWglq3RX6G7Ok=
Subject key identifier: A3:09:DF:FC:40:38:40:B0:9E:3C:2D:D4:51:34:F0:1A:72:E8:4C:BC
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 0197E5951664C1ACA454F78865918ACD03C0
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/ownf_EA4QLCePC3UUTTwGnLoTLw.roa
Signing time: Mon 07 Jul 2025 15:50:42 +0000
ROA not before: Mon 07 Jul 2025 15:50:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210644
IP address blocks: 91.108.240.0/24 maxlen: 24
91.108.241.0/24 maxlen: 24
91.108.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e5:95:16:64:c1:ac:a4:54:f7:88:65:91:8a:cd:03:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Jul 7 15:50:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a309dffc403840b09e3c2dd45134f01a72e84cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6b:80:3b:94:92:01:2a:09:18:05:7b:70:1d:
1d:0e:a2:f4:86:60:c6:94:1c:81:5f:22:16:10:9c:
fe:5d:b2:2b:55:a9:4b:1c:53:f3:2c:59:85:df:a5:
d5:4f:3d:a8:e9:7c:0c:01:5d:b3:6e:ce:3e:5b:b9:
c7:d6:b5:b4:9e:52:ba:61:83:b4:b0:e7:2c:a1:35:
10:bd:62:bd:b9:cb:0b:b0:84:64:99:7a:f7:7d:a1:
1d:dd:05:7c:66:89:dc:dc:63:82:a1:5e:7f:47:a6:
bc:97:3c:d2:55:5e:6d:25:ed:45:34:d9:7d:74:aa:
fb:bc:2c:f0:62:54:95:57:4f:79:32:10:dd:4a:55:
3a:af:7a:43:9a:65:07:45:4a:bc:d9:b8:81:f0:94:
4b:25:a4:37:3f:1f:56:36:8b:b9:3e:5a:4e:30:bc:
bf:29:94:62:83:b5:d9:49:82:29:b3:8d:88:ba:9e:
20:2a:17:ca:79:f8:fd:66:fe:27:95:ac:12:1d:14:
88:43:e7:35:87:33:a2:8f:8a:51:d9:80:92:59:d5:
14:03:f2:dd:92:6a:82:ee:44:35:cb:86:b7:67:80:
20:69:84:8f:1e:0d:76:b5:00:e9:41:ac:a3:3a:2c:
f4:4f:47:0a:82:25:9d:eb:4c:f1:41:ed:a2:5e:f8:
d0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:09:DF:FC:40:38:40:B0:9E:3C:2D:D4:51:34:F0:1A:72:E8:4C:BC
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/ownf_EA4QLCePC3UUTTwGnLoTLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.240.0-91.108.242.255
Signature Algorithm: sha256WithRSAEncryption
3b:cc:24:91:f0:ce:64:80:4d:ef:2f:1f:36:bf:6c:ee:19:66:
7f:8b:29:cd:04:ac:d1:a2:d8:3b:32:af:76:4b:31:a0:76:85:
82:36:54:22:41:af:64:46:27:90:94:ac:cc:12:ce:18:40:bd:
eb:96:a4:da:14:77:bf:20:d9:be:60:1a:97:12:0b:2c:b9:90:
e1:bd:70:62:22:cf:8c:66:6c:82:57:f1:cf:4f:4c:81:9f:f2:
db:2c:90:10:a1:77:b0:f1:56:9b:57:6f:14:5e:b5:75:24:bc:
6e:c7:1f:f8:58:43:7b:08:90:15:75:48:b3:25:11:0b:9f:af:
4f:46:67:b0:02:bd:47:e1:ce:7e:3f:5a:c3:92:30:84:be:23:
3d:d2:5f:9a:52:9e:b7:b0:e3:a3:b9:e4:89:db:5b:6b:da:35:
93:8a:4a:c9:c9:cd:5b:63:c2:cc:5d:92:61:f7:3d:11:d4:f8:
27:13:c9:ea:18:3c:58:fe:cb:77:be:fe:61:24:12:cd:8d:16:
a6:74:11:1b:21:b0:23:a8:af:2e:a0:85:58:a5:b4:13:9b:f1:
b3:43:de:92:79:8d:71:75:71:ff:42:40:36:cf:de:03:2d:83:
42:ea:c6:f0:8e:4c:34:9c:b5:bd:33:1b:3a:b6:16:ba:ab:79:
c8:c1:d7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:37:12 2025 by rpki-client