Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xU-Abi-TdsOD0SIg50Byco910Mo.roa
File: xU-Abi-TdsOD0SIg50Byco910Mo.roa (raw, json)
Hash identifier: kFvz3t4vwlHZ9cCSDkxYtQ2sQKvI9g2OFq9uUbxVwFg=
Subject key identifier: C5:4F:80:6E:2F:93:76:C3:83:D1:22:20:E7:40:72:72:8F:75:D0:CA
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0196A5410B132B9B1B113876B4CA00F089D8
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xU-Abi-TdsOD0SIg50Byco910Mo.roa
Signing time: Tue 06 May 2025 11:00:25 +0000
ROA not before: Tue 06 May 2025 11:00:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.114.0/23 maxlen: 23
194.87.134.0/23 maxlen: 23
195.58.58.0/23 maxlen: 23
195.58.62.0/23 maxlen: 23
195.133.84.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Jun 2025 15:25:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:41:0b:13:2b:9b:1b:11:38:76:b4:ca:00:f0:89:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: May 6 11:00:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c54f806e2f9376c383d12220e74072728f75d0ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:02:e3:d8:e6:6f:51:54:53:ad:af:90:af:b5:
9a:aa:6b:05:dc:11:07:f1:f3:c2:3a:82:74:99:c4:
97:f6:ba:51:a4:16:75:24:03:82:bc:d7:a9:27:54:
e5:ca:93:5e:38:1e:c1:ec:8e:6e:3f:fc:8b:fa:4d:
05:ab:88:a9:47:3f:37:47:48:96:b0:ca:3b:f7:93:
c5:74:87:81:7f:de:fb:bf:96:3d:92:bb:cd:37:05:
06:81:5a:87:d1:e7:ed:79:7b:ca:ec:21:4b:23:31:
ea:77:d6:58:13:0f:ee:45:f8:7f:47:c9:88:ff:62:
c7:50:8c:62:1b:29:8c:39:bb:c7:53:c1:bb:92:26:
99:1b:f8:f4:ed:4c:45:4e:98:b4:bc:11:e4:71:b2:
d3:84:38:41:67:14:ce:8a:9d:6e:48:ee:ae:53:37:
86:24:ac:13:fa:4f:7e:f1:d1:ab:73:c6:e6:11:a2:
ce:3a:5d:fd:1d:8d:36:51:07:70:37:1c:7a:0b:ee:
c9:19:24:a2:de:e5:fc:0d:f8:4a:8d:17:f8:46:83:
1d:73:31:c6:db:4e:25:0c:73:77:f6:2e:ac:8c:90:
4e:34:0e:35:94:2f:67:ce:19:97:b2:3a:d7:30:df:
38:4b:78:55:fa:27:71:49:b2:79:b3:dd:ef:7a:98:
d1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:4F:80:6E:2F:93:76:C3:83:D1:22:20:E7:40:72:72:8F:75:D0:CA
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xU-Abi-TdsOD0SIg50Byco910Mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.114.0/23
194.87.134.0/23
195.58.58.0/23
195.58.62.0/23
195.133.84.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:c4:2b:7f:00:52:19:76:7b:14:2e:8c:a0:15:b4:ca:d6:58:
2e:43:84:1f:e3:09:24:eb:dd:68:40:a8:cb:5d:be:eb:24:42:
fd:7f:33:75:36:34:06:36:d5:dd:03:fe:fb:19:52:79:25:3d:
32:86:cd:68:28:46:84:f4:b7:a3:5f:5f:b4:6f:6a:5e:b9:65:
32:22:05:7d:01:30:87:22:ef:b0:4f:48:6e:8b:05:df:9f:60:
35:d3:5a:03:a5:c4:59:f5:f7:ed:8d:77:32:b2:81:97:1f:fe:
ef:9d:33:4b:52:62:c5:e9:60:af:f9:6c:13:8e:80:ea:c3:63:
14:6c:b3:d9:fb:31:9a:c7:0b:f6:47:f6:9a:80:4c:c6:5d:3f:
36:2e:bb:f5:c5:e6:51:4c:06:ef:d2:eb:0a:a7:33:6a:17:da:
f3:ff:71:54:a0:f8:63:17:fc:c3:a1:1f:06:1e:54:b4:74:82:
c2:1a:60:f9:f7:bb:8c:c0:d4:c1:a8:fa:52:d3:41:57:7a:ab:
5f:ba:5c:51:70:85:70:0f:92:9b:38:b3:e5:a7:ea:7b:63:dd:
61:a6:e4:62:90:4a:32:0a:60:c9:c0:f7:73:a1:06:3b:17:70:
a3:87:e3:41:97:f4:c7:f0:f4:90:b0:f0:a6:52:85:03:f5:88:
65:d8:50:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:40:15 2025 by rpki-client