Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/d03ojnbuBeIJ-lnd7OihnLWEVxw.roa
File: d03ojnbuBeIJ-lnd7OihnLWEVxw.roa (raw, json)
Hash identifier: XlMC0ZRLbmiqoXJQRP7mRdNP4FsXpGfEzY9nYp5h2sg=
Subject key identifier: 77:4D:E8:8E:76:EE:05:E2:09:FA:59:DD:EC:E8:A1:9C:B5:84:57:1C
Certificate issuer: /CN=a8dff01f56e3419d027be7591ceef62851ce0f6b
Certificate serial: 0196D84FCC1938F8476E6FC0E917F44B2ADF
Authority key identifier: A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/d03ojnbuBeIJ-lnd7OihnLWEVxw.roa
Signing time: Fri 16 May 2025 08:57:10 +0000
ROA not before: Fri 16 May 2025 08:57:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51956
IP address blocks: 92.53.236.0/22 maxlen: 22
92.53.236.0/24 maxlen: 24
92.53.237.0/24 maxlen: 24
92.53.238.0/24 maxlen: 24
92.53.239.0/24 maxlen: 24
185.144.132.0/22 maxlen: 22
185.201.172.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d8:4f:cc:19:38:f8:47:6e:6f:c0:e9:17:f4:4b:2a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8dff01f56e3419d027be7591ceef62851ce0f6b
Validity
Not Before: May 16 08:57:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=774de88e76ee05e209fa59ddece8a19cb584571c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:72:9d:da:60:fc:a2:be:d2:bb:fc:bd:d9:d1:
3c:7d:0e:63:10:b3:e6:b6:ff:66:74:1f:cd:b8:14:
d1:86:8c:e0:54:a7:08:db:0a:c2:14:29:c2:36:87:
52:36:26:33:7e:55:9e:cd:e8:5d:c4:ef:7c:59:04:
b9:ed:3d:9e:85:6c:6e:b6:93:ba:14:dc:55:29:fb:
8b:d5:fb:89:ff:e0:1b:ae:9d:4c:19:e8:a0:76:cf:
55:d5:07:82:42:28:a1:15:70:fb:3b:a0:62:17:93:
1c:d0:34:2e:fd:39:56:9a:8f:7c:09:47:ce:79:2f:
55:61:53:28:a3:9d:f5:5a:c6:61:21:a7:2e:76:ea:
c9:5d:5d:de:4e:5c:c1:a5:57:6f:8f:b5:c1:16:a7:
1c:0e:90:cb:d6:e1:6f:b2:cb:97:e3:d7:68:cd:7b:
a8:ec:4c:3b:e9:0b:ef:90:42:61:6b:df:b9:56:39:
fd:c0:35:6c:97:4c:f4:15:b8:73:bd:9d:4f:19:e8:
12:16:d5:8a:47:9b:e0:0e:96:61:9c:2c:d5:65:ed:
75:e3:5f:4c:4e:3f:1a:42:51:30:c8:f8:50:8b:3f:
6e:7f:10:b3:d8:f8:0c:85:f4:e7:ff:28:e1:03:fb:
2a:9c:f5:7d:1f:62:bb:95:f4:9d:b4:d4:87:05:f0:
f8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:4D:E8:8E:76:EE:05:E2:09:FA:59:DD:EC:E8:A1:9C:B5:84:57:1C
X509v3 Authority Key Identifier:
keyid:A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/d03ojnbuBeIJ-lnd7OihnLWEVxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.236.0/22
185.144.132.0/22
185.201.172.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:1b:85:3c:dd:88:bd:eb:63:9c:2a:91:d8:92:81:85:50:77:
0e:55:0f:51:a3:da:52:be:6d:a3:58:ed:12:84:b7:fc:bd:4c:
21:e7:72:60:96:f5:37:e5:01:0c:a9:e9:6b:87:60:ba:17:34:
d7:54:2e:aa:39:0f:c3:1e:d5:d6:e7:8d:85:5d:4a:48:11:fe:
f5:f7:c1:75:a3:93:55:3a:fd:e6:12:9b:ea:35:27:c7:ee:eb:
3f:bc:48:1e:0c:e7:0b:03:f3:b4:1f:51:cd:a2:23:04:df:7d:
61:e9:9c:80:fa:ac:26:74:1a:2a:57:bc:b6:40:47:a3:ae:6d:
0a:d7:c7:3c:bf:e2:3d:d8:7f:bc:cd:cd:fe:5e:2d:7d:d5:0e:
f1:29:07:04:ea:29:80:ec:aa:d4:24:c1:49:8c:57:7b:99:3d:
b3:14:03:01:7f:11:be:84:df:aa:ce:13:7e:46:8d:ba:40:dc:
d7:c8:3f:6b:5a:18:d2:2d:6c:a0:d0:e3:3b:62:5b:35:03:87:
06:69:d3:01:be:74:f3:b1:49:e7:08:1f:86:8b:e9:34:0b:19:
54:26:60:d4:f8:80:d6:cf:2c:a7:09:b3:92:43:86:11:71:e4:
24:0c:66:75:32:c4:d8:48:15:69:c2:76:33:dd:3c:e7:d6:4f:
1b:ee:b7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:24:13 2025 by rpki-client