Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/rNJomldCeu_xMB-3_GrfVy4SpuA.roa
File: rNJomldCeu_xMB-3_GrfVy4SpuA.roa (raw, json)
Hash identifier: 0qwCuh+Crxi2V764XIv8ArKA6g54Zdfi93Itg0+iAvA=
Subject key identifier: AC:D2:68:9A:57:42:7A:EF:F1:30:1F:B7:FC:6A:DF:57:2E:12:A6:E0
Certificate issuer: /CN=de9461c211bf3551c5507c930b4204c6ec43b322
Certificate serial: 01970F03790421E1D7113778F343D3D82330
Authority key identifier: DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/rNJomldCeu_xMB-3_GrfVy4SpuA.roa
Signing time: Mon 26 May 2025 23:52:55 +0000
ROA not before: Mon 26 May 2025 23:52:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211392
IP address blocks: 91.192.106.0/23 maxlen: 23
91.192.106.0/24 maxlen: 24
91.192.107.0/24 maxlen: 24
91.193.58.0/23 maxlen: 23
91.193.58.0/24 maxlen: 24
91.193.59.0/24 maxlen: 24
193.106.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0f:03:79:04:21:e1:d7:11:37:78:f3:43:d3:d8:23:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9461c211bf3551c5507c930b4204c6ec43b322
Validity
Not Before: May 26 23:52:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=acd2689a57427aeff1301fb7fc6adf572e12a6e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:64:05:cd:46:a8:72:b4:69:46:fb:2b:6e:84:
c6:07:c2:47:95:51:08:d4:4a:0a:d9:05:d0:b0:02:
dd:e1:3b:88:b6:95:c7:0d:13:13:29:19:98:ab:8f:
7c:2f:3d:7c:97:e8:0f:1e:ae:cc:2c:7d:53:e5:8d:
79:fa:b1:23:63:a3:48:57:44:6d:db:cc:12:75:67:
08:4b:a0:02:11:62:b6:f8:15:2c:9f:46:b2:c0:65:
99:1c:54:b6:bb:ef:fb:46:fe:89:91:17:7e:73:58:
3a:76:84:84:d7:3c:66:20:84:a7:fc:d0:76:1b:64:
9a:15:94:80:68:7d:e1:84:08:b8:64:3c:ea:c7:ba:
17:68:d4:61:18:e6:51:b5:60:a2:b8:84:6d:cc:7f:
7f:d1:ac:0a:52:01:f2:ff:5e:96:be:62:9d:c6:0e:
22:1e:04:84:95:fd:5c:71:1f:4e:fe:bf:e0:e5:0b:
0a:f7:83:4a:18:26:62:b8:26:83:4f:ee:1c:85:2d:
0f:f1:29:68:c2:8f:9d:e2:58:1d:0f:f6:28:09:fb:
5e:68:e3:ad:59:ff:35:bd:34:d5:b0:66:66:96:ea:
12:04:54:66:16:68:9e:8e:3d:30:06:2f:5d:36:5c:
ba:b8:08:c4:26:56:5c:5f:ab:76:f8:0d:44:2e:06:
aa:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D2:68:9A:57:42:7A:EF:F1:30:1F:B7:FC:6A:DF:57:2E:12:A6:E0
X509v3 Authority Key Identifier:
keyid:DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/rNJomldCeu_xMB-3_GrfVy4SpuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.106.0/23
91.193.58.0/23
193.106.189.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:c1:82:8e:ee:eb:e7:40:1c:6f:23:d7:bc:52:6f:4a:7a:83:
20:0b:ac:14:46:39:3e:61:89:38:93:4e:de:31:37:2c:5a:43:
d8:b9:4a:86:8c:36:c1:45:68:49:99:07:f5:aa:f2:f7:cc:a4:
47:a8:b9:23:09:37:d6:3b:96:03:07:10:d9:e5:df:5b:38:12:
86:fe:fd:77:16:8d:21:1c:e6:41:8e:d2:98:db:21:9c:25:83:
16:dd:66:9b:1d:2e:4e:18:2c:d9:b5:47:4d:3a:9e:70:dd:81:
03:01:cd:04:30:a0:eb:cd:0e:f5:6d:8c:a5:20:a7:f3:68:6a:
76:12:00:26:87:30:f2:3c:ee:2e:c6:d0:a9:87:34:60:6d:d0:
d7:f3:ee:d1:14:1f:f3:d8:9c:53:72:2b:59:76:45:6d:82:c4:
94:cb:54:3e:a5:58:81:64:96:73:eb:6e:c6:ff:0e:0d:f4:91:
8c:69:77:77:90:e8:7b:ff:03:98:e0:fa:fc:84:7d:4c:55:43:
02:55:20:77:41:a6:20:e6:7f:39:0f:fc:d1:b1:e8:da:eb:3d:
48:b0:b3:a9:65:df:de:a0:4b:64:a1:27:74:da:69:6e:2b:6e:
98:6d:12:d9:5e:3b:80:6d:6d:99:07:ea:b9:38:aa:4c:52:3a:
1d:e6:7f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:41:45 2025 by rpki-client