Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cbTCxfxwOB1R9CZGpxhIAM8RSvs.roa
File: cbTCxfxwOB1R9CZGpxhIAM8RSvs.roa (raw, json)
Hash identifier: qyekFuQP3IgFCGQp98nyPmjVhjAwvjk4muuy8vDCl6E=
Subject key identifier: 71:B4:C2:C5:FC:70:38:1D:51:F4:26:46:A7:18:48:00:CF:11:4A:FB
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0197007BAEB713299DEF8091B74B63EE45A0
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cbTCxfxwOB1R9CZGpxhIAM8RSvs.roa
Signing time: Sat 24 May 2025 04:09:55 +0000
ROA not before: Sat 24 May 2025 04:09:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211066
IP address blocks: 5.83.134.0/24 maxlen: 24
5.175.140.0/24 maxlen: 24
5.175.192.0/24 maxlen: 24
94.103.163.0/24 maxlen: 24
185.47.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:00:7b:ae:b7:13:29:9d:ef:80:91:b7:4b:63:ee:45:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 24 04:09:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=71b4c2c5fc70381d51f42646a7184800cf114afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0f:3c:b8:a1:ce:d2:38:6a:2c:ce:f4:ee:ae:
92:bf:d4:34:8a:f8:ee:3b:40:a0:81:91:24:b9:76:
a0:e7:3f:f7:f0:28:86:7b:cc:5b:ea:20:24:95:98:
94:18:57:b5:b8:9e:ef:57:4d:01:44:95:08:a9:19:
a5:a1:74:17:63:32:a1:7e:3c:fb:32:c7:4a:4a:90:
16:f3:11:49:7f:f0:74:5f:ee:84:c7:21:ac:4c:5c:
96:d5:3f:fa:36:a6:ac:3f:ce:7c:8b:6c:68:8f:6c:
fe:df:2d:44:fd:d0:8c:e7:a1:d9:98:a3:c4:2a:fd:
35:ef:e3:a9:66:91:ba:70:f1:8c:18:54:4e:9b:bb:
5f:63:11:53:e5:86:51:dd:0a:d7:d7:75:0c:41:a7:
f7:88:f7:4f:65:b3:54:9d:9d:0b:fa:13:4d:47:7b:
21:35:01:66:80:66:0d:0e:b2:84:54:67:38:67:ec:
a0:cb:c5:be:1c:10:21:5c:89:10:fe:c3:99:1b:d7:
91:5f:6a:6a:1d:f4:e8:67:01:e9:a3:9f:4e:c3:84:
94:ec:8c:a3:e0:25:30:8f:28:c2:b9:fc:2a:17:9f:
cf:7c:f7:f0:9a:c2:9f:fb:ab:18:93:bc:7f:c3:7f:
37:bc:24:28:73:31:ae:56:f2:c3:73:58:df:44:fd:
ac:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B4:C2:C5:FC:70:38:1D:51:F4:26:46:A7:18:48:00:CF:11:4A:FB
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cbTCxfxwOB1R9CZGpxhIAM8RSvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.134.0/24
5.175.140.0/24
5.175.192.0/24
94.103.163.0/24
185.47.143.0/24
Signature Algorithm: sha256WithRSAEncryption
29:39:5e:8d:58:0e:ab:ee:1b:0b:fe:b4:99:91:0e:41:24:4a:
73:7a:2e:d1:0b:bc:c1:bb:b0:da:87:32:ab:9a:47:52:4a:41:
2f:0f:f3:e9:d6:21:34:ce:dc:73:a0:be:77:ff:85:4f:34:c4:
cb:25:b2:c6:2a:76:b0:e0:b0:ba:da:51:17:3d:90:86:7d:f2:
3b:cf:f8:79:ce:24:d8:ad:62:86:ab:37:11:7c:94:54:11:d3:
8f:d8:d1:a0:c9:23:87:9c:7d:47:80:1c:dd:23:4d:0d:b8:63:
e6:58:3c:71:f1:ef:ea:e2:5d:96:c8:5d:39:a7:2f:ba:85:03:
65:30:ba:85:f8:42:b7:bc:90:b4:65:a7:c6:7f:2e:89:32:aa:
e5:06:7f:d8:e7:09:92:3a:ac:a2:e6:fc:83:ce:47:2c:2e:d4:
d6:16:d5:91:13:eb:68:b9:90:29:56:4d:28:c6:35:f8:80:7e:
ae:fa:07:da:b1:05:7a:2e:cf:8d:5d:81:7f:63:40:4a:41:40:
66:19:2e:38:23:ce:fb:1b:71:60:1a:33:11:63:fd:84:be:e7:
74:a4:f8:88:c0:b3:03:88:dc:67:ca:3e:e9:f5:ff:f3:4d:bb:
2d:50:25:83:6f:a0:d4:36:81:7c:42:2e:1d:34:4e:18:c8:8e:
06:97:86:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 10:19:13 2025 by rpki-client