Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/l1BU6L9dEkKkAqIbS2doHjnXSBY.roa
File: l1BU6L9dEkKkAqIbS2doHjnXSBY.roa (raw, json)
Hash identifier: eyN2ZW+D6HAYlTagJwYzKT9fA4NSfT9y5b3Tq5p7k4g=
Subject key identifier: 97:50:54:E8:BF:5D:12:42:A4:02:A2:1B:4B:67:68:1E:39:D7:48:16
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0197185295E1184E9BBDD5FC3745CD176BE5
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/l1BU6L9dEkKkAqIbS2doHjnXSBY.roa
Signing time: Wed 28 May 2025 19:15:54 +0000
ROA not before: Wed 28 May 2025 19:15:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212165
IP address blocks: 195.133.26.0/24 maxlen: 24
212.192.246.0/24 maxlen: 24
212.193.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 12:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:18:52:95:e1:18:4e:9b:bd:d5:fc:37:45:cd:17:6b:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: May 28 19:15:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=975054e8bf5d1242a402a21b4b67681e39d74816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:48:ca:6d:77:bf:c5:f3:0b:de:37:0d:4e:b4:
8a:6c:bf:45:eb:07:2b:70:31:05:1b:a7:84:c5:e2:
1b:30:54:56:ab:b6:95:2d:12:a0:30:fd:16:98:63:
1c:a5:c4:a1:5c:b8:88:c1:57:bf:83:01:4d:21:8e:
56:d6:b1:3e:bc:fa:ea:64:df:f7:01:03:41:f0:84:
91:30:3b:e2:65:d5:71:3d:c0:b6:b9:a5:d7:20:16:
0d:f8:6d:72:33:9d:45:8f:db:b3:cb:ff:71:89:7a:
2d:c1:ce:50:be:a3:37:41:49:64:da:89:ce:f1:99:
4a:3f:a3:5a:3f:81:d9:f6:ee:20:76:a0:d9:07:51:
29:2b:cb:95:a7:f8:c2:b6:24:5c:9c:0f:56:05:c9:
05:95:b4:5d:f0:e6:23:39:73:1c:c8:60:c2:d6:28:
dd:fe:98:6e:92:88:d0:4d:1c:d1:57:47:4e:0a:bf:
1c:61:cb:62:d7:cc:7d:ed:2d:dc:20:e1:1c:cc:a3:
dc:66:98:5a:81:7b:34:30:f0:4e:7b:5b:c7:c2:ed:
7c:88:b2:44:48:19:ab:7b:1f:03:3f:9d:69:35:09:
41:3d:b6:a1:61:f9:86:ed:2a:f7:55:4a:c5:56:da:
64:31:23:d3:cc:b9:0d:88:33:c9:91:13:10:99:35:
a9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:50:54:E8:BF:5D:12:42:A4:02:A2:1B:4B:67:68:1E:39:D7:48:16
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/l1BU6L9dEkKkAqIbS2doHjnXSBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.26.0/24
212.192.246.0/24
212.193.31.0/24
Signature Algorithm: sha256WithRSAEncryption
89:7d:36:66:4a:a0:79:1c:08:f6:39:ce:bb:d9:1c:ae:be:fc:
3d:97:b4:cc:54:46:ed:8b:f2:a4:b8:83:1a:41:1f:a7:8a:5c:
7f:47:31:a5:2b:57:1b:b6:6c:12:bf:aa:e6:17:90:ac:48:d3:
db:93:fa:2c:56:97:c1:d8:23:91:a2:ab:eb:ef:ef:4b:07:77:
f4:60:f1:63:b6:ed:b6:0c:8c:a6:74:06:1c:02:33:dd:a0:b9:
6c:2b:88:ac:0a:2a:98:0e:00:c9:96:0b:6a:2d:26:d8:9b:59:
06:a0:5d:48:79:0e:c3:f1:bf:bc:25:8c:21:90:f3:c5:74:c2:
ed:5b:a1:6a:89:51:39:03:3f:3e:74:5f:ae:16:03:d3:70:fe:
27:bc:8b:aa:30:f9:62:88:20:c8:bb:0a:41:28:fe:78:a6:bc:
56:7c:f0:34:a8:61:87:24:0e:e6:cd:28:16:1e:8d:a6:62:3e:
77:19:a1:e2:9c:69:bf:01:0e:eb:44:fe:8c:e2:d4:1b:2e:31:
be:96:19:36:20:fa:57:d4:fc:76:c9:1a:c0:eb:cc:8c:94:e1:
ea:4a:fb:21:13:bf:62:fd:b4:a6:80:1f:e0:29:5a:f4:4e:3a:
c3:26:1b:bc:32:18:66:f4:75:f5:9d:a6:5d:c1:49:c5:85:4c:
fb:dc:f8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:33:09 2025 by rpki-client