Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/9WBHWeF0AALAS2LaPR182-cvOAM.roa
File: 9WBHWeF0AALAS2LaPR182-cvOAM.roa (raw, json)
Hash identifier: Zn/5ahBGkIXjCN5QHytKBdBBAFYJv7n9tTPyMX3nI8I=
Subject key identifier: F5:60:47:59:E1:74:00:02:C0:4B:62:DA:3D:1D:7C:DB:E7:2F:38:03
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 0196C3630CD7422A16B95F20445D35234B5C
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/9WBHWeF0AALAS2LaPR182-cvOAM.roa
Signing time: Mon 12 May 2025 07:26:10 +0000
ROA not before: Mon 12 May 2025 07:26:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34987
IP address blocks: 31.145.82.0/24 maxlen: 24
212.15.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:63:0c:d7:42:2a:16:b9:5f:20:44:5d:35:23:4b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: May 12 07:26:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5604759e1740002c04b62da3d1d7cdbe72f3803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3c:b0:06:88:e0:60:a9:17:41:ed:58:c0:6d:
b7:24:03:14:f5:36:b2:55:74:df:3b:fa:40:99:32:
cb:9d:13:5e:9f:58:f8:83:8f:d6:0b:24:00:8d:5d:
c9:5a:c7:ae:4c:b5:b9:d0:c8:dc:cc:08:7b:a7:16:
50:f1:c4:a4:50:5d:79:1c:da:a2:59:36:c8:ab:e8:
f5:84:75:2d:ab:72:93:36:fc:94:d8:c1:fb:69:94:
01:1d:bb:93:86:03:8d:48:f5:95:d4:7d:4c:85:95:
91:ef:40:23:ab:ac:09:be:60:25:33:d9:a8:e3:eb:
f1:62:c5:c6:11:88:87:25:eb:43:a1:ad:7f:60:20:
db:75:67:96:30:7d:90:af:7b:11:83:86:2d:53:6e:
6d:a0:86:03:48:45:a4:13:8b:04:fc:cf:51:71:f8:
e5:40:f6:25:40:4c:24:60:c2:85:84:47:da:93:c4:
c1:35:ac:83:0f:b6:c3:24:80:55:11:3e:ed:6f:b9:
4c:86:89:ab:c3:49:31:9a:8e:6d:9d:b1:6e:ff:6b:
aa:ff:06:85:80:f1:2a:86:3a:e6:0a:cf:68:97:79:
14:ae:3c:a8:bb:34:13:86:77:5a:f6:23:88:15:02:
9c:40:c3:4d:f9:c8:fc:9c:03:36:9b:a5:70:03:2e:
70:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:60:47:59:E1:74:00:02:C0:4B:62:DA:3D:1D:7C:DB:E7:2F:38:03
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/9WBHWeF0AALAS2LaPR182-cvOAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.145.82.0/24
212.15.25.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:90:9a:8a:b5:d9:9a:4f:63:ad:77:3c:fe:8d:9f:f9:2f:bb:
b2:46:97:24:55:84:c8:70:2b:fb:be:1e:a9:b1:99:cf:05:ff:
6f:c0:7c:ef:f4:51:3c:c0:bc:59:43:36:57:6f:8c:41:0b:33:
ad:f8:37:6c:83:bf:31:f9:e9:9a:a2:40:e9:8d:c4:9c:03:c9:
39:d1:f2:5b:37:55:08:5b:25:6d:05:24:2e:3e:f8:53:5a:42:
86:f9:1a:18:5b:3c:87:7f:77:28:d9:b6:d7:d8:cc:5f:36:0a:
76:3c:6a:b1:dc:08:2e:76:f5:ba:b8:75:c1:b6:d2:ee:e6:42:
f7:0b:37:4b:0e:1d:5b:fb:1e:06:d8:ab:ee:44:f6:2d:66:e4:
b2:00:ff:3e:d2:8f:06:e4:bb:6f:a6:34:40:89:f3:fa:60:e9:
f9:54:87:ed:28:06:40:3e:8b:a4:fd:af:4a:20:6f:ec:73:94:
a5:cb:8f:07:68:c9:07:b4:a6:5a:67:e7:29:13:7a:7c:04:1b:
f0:da:08:ca:a9:7c:6f:20:22:8d:0a:5b:87:d0:e2:92:5c:bd:
9b:94:67:7a:d7:03:2b:c1:0f:52:db:e9:63:9f:03:d8:bc:6c:
61:19:5c:8c:a7:89:8e:59:ae:cc:c8:a3:62:8c:04:b1:31:16:
95:55:03:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:55:25 2025 by rpki-client