Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/boNmBi9rxJ8sEktI_Or-vgSYhTI.roa
File: boNmBi9rxJ8sEktI_Or-vgSYhTI.roa (raw, json)
Hash identifier: 2BLeiQDvwVfeYlW4OnaApILOvlfU2cgTlJXyJhTLHHk=
Subject key identifier: 6E:83:66:06:2F:6B:C4:9F:2C:12:4B:48:FC:EA:FE:BE:04:98:85:32
Certificate issuer: /CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
Certificate serial: 01958582186F47E5F92ED3AEC2FCAC374CDA
Authority key identifier: F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/boNmBi9rxJ8sEktI_Or-vgSYhTI.roa
Signing time: Tue 11 Mar 2025 14:00:50 +0000
ROA not before: Tue 11 Mar 2025 14:00:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35042
IP address blocks: 88.214.25.0/24 maxlen: 24
91.228.101.0/24 maxlen: 24
185.55.240.0/22 maxlen: 22
193.24.208.0/22 maxlen: 22
193.24.208.0/23 maxlen: 23
193.24.210.0/23 maxlen: 23
194.24.160.0/24 maxlen: 24
2a00:1910::/32 maxlen: 32
2a00:1911::/32 maxlen: 32
2a00:1912::/32 maxlen: 32
2a00:1913::/32 maxlen: 32
2a09:8700::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:85:82:18:6f:47:e5:f9:2e:d3:ae:c2:fc:ac:37:4c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
Validity
Not Before: Mar 11 14:00:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e8366062f6bc49f2c124b48fceafebe04988532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:58:78:86:31:a4:fb:e5:69:50:f1:63:28:d9:
1f:62:cb:a4:b6:db:a8:cd:08:2a:ce:cf:07:0a:c8:
37:43:a0:f9:e5:9a:95:cd:6c:c2:bc:3f:86:d8:d2:
7b:e5:45:34:92:ed:39:d6:d3:c6:79:08:7c:59:6e:
0b:66:17:ed:a6:8f:3c:8c:39:55:a0:31:a1:d7:b9:
5e:50:6c:79:d9:8d:25:64:ac:45:ba:91:3f:54:57:
3d:78:aa:46:79:d9:63:32:95:4d:c5:f2:17:22:02:
d5:1b:90:1c:5f:17:f2:35:ef:38:e0:94:a2:ae:77:
06:4c:b9:17:47:59:01:57:f2:39:4c:46:c2:d6:2b:
60:f6:1a:c2:07:41:ba:55:37:16:5c:20:d5:01:f1:
d3:2f:81:b9:b8:ec:0f:af:98:09:b1:c5:fc:74:54:
64:cf:96:a3:6d:07:aa:20:01:cd:4b:a6:de:e8:b8:
f0:2b:83:cd:ed:fd:80:ef:7e:27:bd:0d:d6:52:d3:
32:30:68:39:66:50:d0:1d:01:de:7b:6d:06:f8:81:
24:f0:92:86:45:4d:c2:87:a7:fa:ea:35:0f:89:73:
d5:a7:50:7a:55:17:84:2a:b2:f4:28:a7:b9:30:ea:
05:eb:cf:a4:74:e4:ce:31:08:b6:b7:9e:86:21:e5:
38:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:83:66:06:2F:6B:C4:9F:2C:12:4B:48:FC:EA:FE:BE:04:98:85:32
X509v3 Authority Key Identifier:
keyid:F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/boNmBi9rxJ8sEktI_Or-vgSYhTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.25.0/24
91.228.101.0/24
185.55.240.0/22
193.24.208.0/22
194.24.160.0/24
IPv6:
2a00:1910::/30
2a09:8700::/32
Signature Algorithm: sha256WithRSAEncryption
1a:72:f7:86:b8:72:b7:8f:2d:fe:7f:ca:02:ee:8a:6d:b1:9f:
1a:35:0e:a2:38:9a:6a:b4:b5:1e:42:63:5a:72:61:31:2f:68:
58:22:40:3f:cc:5b:43:54:51:48:ad:ea:70:02:5e:7b:e6:5e:
b6:30:73:b4:a6:0f:57:9d:1b:d1:ee:e6:7f:a3:3b:ff:3a:e4:
75:2c:ec:1d:2d:da:a7:9c:8a:c6:d9:76:e6:f5:d0:85:d1:17:
e4:79:a8:e7:0c:30:2e:f3:7b:ce:d5:1c:36:58:c9:a5:77:d6:
93:ed:00:d0:b9:32:f8:92:bb:9a:e1:79:df:75:05:f2:cd:d9:
ca:2a:d9:4d:ad:9f:5e:51:29:b1:a0:8a:fd:72:f0:f5:87:20:
3f:fb:68:c9:56:5e:ac:fd:17:fa:c6:44:0b:80:49:51:b8:02:
df:8a:62:1e:44:a7:f4:8b:a5:32:42:59:55:aa:e3:d2:20:a4:
51:5c:76:d2:7a:38:88:37:6d:f9:1a:c2:1e:a5:f6:4a:84:89:
76:a8:ce:84:96:2e:85:cc:45:25:0e:bd:87:ea:42:be:b1:ef:
68:d8:35:db:ae:8f:76:ef:2a:67:63:ec:83:bc:86:59:62:a2:
d1:c9:75:98:89:1f:1a:53:9a:c9:6d:b7:27:aa:1a:30:95:74:
bb:6f:ee:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:00:25 2025 by rpki-client