Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/4b5CGvWQzn4qZYyRKCUYEa-_wbY.roa
File: 4b5CGvWQzn4qZYyRKCUYEa-_wbY.roa (raw, json)
Hash identifier: S8N5Z25usZbSADAlcNMNCHkZ5xfr5ltoN7EEzp/vUZQ=
Subject key identifier: E1:BE:42:1A:F5:90:CE:7E:2A:65:8C:91:28:25:18:11:AF:BF:C1:B6
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 019632F0BC59FD8E581974DFABA4BEEAA603
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/4b5CGvWQzn4qZYyRKCUYEa-_wbY.roa
Signing time: Mon 14 Apr 2025 06:15:59 +0000
ROA not before: Mon 14 Apr 2025 06:15:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197897
IP address blocks: 88.203.250.0/24 maxlen: 24
88.203.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:32:f0:bc:59:fd:8e:58:19:74:df:ab:a4:be:ea:a6:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Apr 14 06:15:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1be421af590ce7e2a658c9128251811afbfc1b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3a:e5:14:16:04:f3:61:8e:4b:72:bd:50:24:
54:11:bf:91:2c:bd:51:1a:3b:28:ea:28:d4:bf:2d:
0e:49:67:30:5d:8e:b3:24:d6:87:80:98:29:4c:fa:
22:3b:40:56:79:b2:7b:d4:44:9a:83:ef:de:aa:d7:
35:50:13:9e:9f:ea:48:96:d5:2d:0c:68:6f:f0:91:
d0:25:0d:d6:27:b3:eb:4d:8c:cf:7f:03:7a:80:ad:
fc:c7:16:12:54:22:f2:1a:aa:7b:58:8c:c8:f6:34:
28:77:10:a2:ba:e9:a2:d9:22:4f:ee:24:38:90:9b:
80:7f:b9:a5:36:1d:36:2b:31:de:9a:02:d4:bf:58:
e0:26:c4:42:1d:e1:e7:da:55:55:43:65:ff:53:67:
d6:58:4e:d6:93:e9:5a:d6:1b:6f:0d:79:0b:54:da:
04:ae:2e:e2:60:c4:cf:ea:a7:ea:38:6f:33:10:e7:
03:cb:f5:3d:94:96:50:89:3f:c2:e6:56:39:40:19:
69:9e:81:39:1f:81:12:5b:89:29:b6:05:64:e4:16:
43:b4:7b:c1:92:34:2f:b1:ec:9a:10:3b:18:ef:c8:
13:41:d8:21:8e:43:33:90:0c:dc:32:01:b7:38:5e:
31:cb:03:c8:06:27:d5:73:31:c3:7c:48:63:36:3a:
e8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:BE:42:1A:F5:90:CE:7E:2A:65:8C:91:28:25:18:11:AF:BF:C1:B6
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/4b5CGvWQzn4qZYyRKCUYEa-_wbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.203.250.0/23
Signature Algorithm: sha256WithRSAEncryption
96:a4:be:dd:a6:a1:00:a4:07:19:83:00:93:93:99:56:28:5c:
7e:66:57:57:56:cd:07:c0:2b:b6:85:56:51:79:a6:4f:eb:53:
3a:db:7b:60:ff:e8:f0:e7:78:29:5a:e5:48:cc:33:6a:aa:65:
6a:8b:2f:17:6c:08:89:1c:83:68:a2:83:17:45:4d:5c:27:12:
e8:bf:f9:3c:00:6d:59:97:c4:ad:52:03:ff:11:58:9d:14:34:
cb:75:03:f1:f7:8c:ef:06:a8:6c:5d:7f:41:b7:f4:8e:18:f0:
7c:9e:2a:09:9e:ef:a6:7f:e2:63:c9:c3:f7:02:04:7a:e1:59:
8c:5c:99:ae:b6:3f:cb:b6:88:2b:39:84:a9:35:d3:42:1c:de:
1b:9a:36:44:2e:5a:5b:20:c6:fb:89:3e:cd:d3:d2:19:94:f7:
1e:45:8d:ea:64:c6:ee:8c:45:dd:e7:9e:2d:04:3f:81:3d:33:
c9:bc:70:a2:b9:15:6e:d2:83:66:ca:a4:2b:62:10:e8:0f:65:
4a:b4:d7:eb:e0:c8:5b:8b:c1:6c:79:c4:dc:b4:fd:2a:f2:9b:
49:5b:2a:69:a9:44:94:55:4d:0d:30:3a:6c:97:b3:80:38:da:
30:7f:bc:d7:8c:d2:e9:31:ec:7c:43:a4:b1:18:76:4a:82:ce:
0f:cc:0c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:27:59 2025 by rpki-client