Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/rupNQnzVXpHhZGo4k4orZsL9fsI.roa
File: rupNQnzVXpHhZGo4k4orZsL9fsI.roa (raw, json)
Hash identifier: Sef19YxuD467IYWmHT5hBmXK8CI1St5Uce/fkYmJFrI=
Subject key identifier: AE:EA:4D:42:7C:D5:5E:91:E1:64:6A:38:93:8A:2B:66:C2:FD:7E:C2
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 0195AD6BEF5E4F7DF563F96B2644FDA5CC52
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/rupNQnzVXpHhZGo4k4orZsL9fsI.roa
Signing time: Wed 19 Mar 2025 08:01:26 +0000
ROA not before: Wed 19 Mar 2025 08:01:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15899
IP address blocks: 31.42.91.0/24 maxlen: 24
31.42.92.0/24 maxlen: 24
31.42.93.0/24 maxlen: 24
31.42.94.0/24 maxlen: 24
31.42.95.0/24 maxlen: 24
91.90.228.0/23 maxlen: 23
91.90.228.0/24 maxlen: 24
91.90.229.0/24 maxlen: 24
91.90.240.0/24 maxlen: 24
91.90.241.0/24 maxlen: 24
91.90.242.0/24 maxlen: 24
91.90.245.0/24 maxlen: 24
176.103.187.0/24 maxlen: 24
176.106.96.0/22 maxlen: 24
185.47.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 05:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ad:6b:ef:5e:4f:7d:f5:63:f9:6b:26:44:fd:a5:cc:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Mar 19 08:01:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aeea4d427cd55e91e1646a38938a2b66c2fd7ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:49:a7:8a:53:fe:9a:12:59:4e:d5:f3:ee:73:
d3:10:95:e6:cc:d2:7a:43:9a:d9:82:64:7a:c1:9c:
57:dd:9c:4f:0a:1e:82:82:61:d3:9b:6e:d8:90:32:
64:81:7d:9a:cd:6a:06:dd:5f:64:37:45:a3:ba:ee:
c8:12:b4:ea:2a:6b:7e:57:15:92:61:b5:b1:bb:a9:
44:22:84:60:81:de:49:1a:dd:a0:3e:cd:e8:d7:9a:
97:92:dc:f6:0e:6d:4b:7c:82:40:be:37:fb:92:73:
59:e6:50:f9:d6:ee:12:f5:f5:4a:27:cc:9f:ca:81:
94:c6:3a:56:e4:54:7f:31:0e:e7:9b:52:e0:2f:16:
30:33:f9:24:f1:f9:79:ec:c0:6a:17:dc:ea:7e:44:
3a:57:47:4a:8f:06:f4:df:17:8d:40:f9:b9:27:7e:
e6:b7:43:44:07:6f:a1:55:b3:54:00:aa:20:fa:06:
82:d8:8e:11:e4:d5:bf:61:4b:a0:74:18:42:9f:46:
f5:72:e6:96:11:97:97:3d:46:20:5c:6c:47:ec:59:
c1:ca:d0:d2:6a:72:72:a1:08:57:34:ed:c2:9e:7d:
89:fc:af:34:fc:d0:25:80:b1:55:de:67:f1:c3:95:
67:41:7f:3b:1e:c3:f5:47:42:2f:4d:00:ec:b1:0a:
26:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:EA:4D:42:7C:D5:5E:91:E1:64:6A:38:93:8A:2B:66:C2:FD:7E:C2
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/rupNQnzVXpHhZGo4k4orZsL9fsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.91.0-31.42.95.255
91.90.228.0/23
91.90.240.0-91.90.242.255
91.90.245.0/24
176.103.187.0/24
176.106.96.0/22
185.47.9.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:6e:e8:c8:e9:fa:54:0e:ec:2c:80:9c:43:02:71:bd:64:37:
90:d8:68:29:e4:73:56:76:f9:97:c0:70:52:e9:b1:85:57:7e:
6e:6f:bc:ee:1b:8c:8d:36:a2:0f:3a:86:3e:d9:da:a3:aa:f5:
37:d1:d4:a4:11:c6:0a:62:c9:a4:d4:c5:d7:53:bc:de:f9:2c:
71:8f:55:ba:a7:95:81:68:a9:82:82:35:43:bd:fc:72:ba:6a:
93:f9:39:d1:8e:5a:6d:75:d5:25:0c:81:05:eb:16:ec:17:bb:
6b:b4:25:9c:cc:85:b3:c4:86:b7:4a:c6:04:13:ad:47:21:0b:
08:81:7f:01:d5:06:0f:d5:65:ce:dd:32:dc:47:5f:70:54:0b:
d2:cb:63:9a:63:0f:d1:12:08:e9:79:da:66:48:7a:61:ac:08:
81:b5:74:56:38:c3:ac:e4:d9:af:15:66:c1:e8:37:ac:df:62:
a6:d5:85:fd:52:18:55:12:2f:e0:12:69:d4:28:40:fd:87:8f:
ca:74:82:1f:e8:ad:80:47:41:26:d8:fc:11:a9:8b:16:e5:a9:
ce:91:c5:34:88:07:55:21:37:4a:c0:9b:5a:7b:f8:1d:9a:7a:
00:52:9d:78:dc:e7:f8:e0:48:e0:70:f5:ea:f7:1d:4e:ea:60:
90:da:7d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:06:29 2025 by rpki-client