Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/tN3Ne2OBckVQlQSe0-tiflKX7HA.roa
File: tN3Ne2OBckVQlQSe0-tiflKX7HA.roa (raw, json)
Hash identifier: +JBi6Zqbvyt0c8qpJoLj5rLIApw1IM0YXBygW6AqLW8=
Subject key identifier: B4:DD:CD:7B:63:81:72:45:50:95:04:9E:D3:EB:62:7E:52:97:EC:70
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0196FC5ED2816C3119C4CE1A8597BDC3AC53
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/tN3Ne2OBckVQlQSe0-tiflKX7HA.roa
Signing time: Fri 23 May 2025 08:59:54 +0000
ROA not before: Fri 23 May 2025 08:59:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 11351
IP address blocks: 92.71.32.0/20 maxlen: 24
92.71.64.0/18 maxlen: 24
213.201.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fc:5e:d2:81:6c:31:19:c4:ce:1a:85:97:bd:c3:ac:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: May 23 08:59:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4ddcd7b638172455095049ed3eb627e5297ec70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8d:19:49:19:80:22:c9:5b:c4:7f:fd:47:33:
5f:d5:57:9f:23:88:49:66:0c:08:70:03:f1:de:2c:
d8:2d:e4:8b:a1:54:70:90:0a:51:75:ed:b2:ba:80:
3d:57:05:44:a2:f4:f4:8f:3c:40:06:90:77:65:4a:
e9:e0:a6:6f:2d:05:ae:e9:c3:9b:58:4f:0f:ba:81:
64:02:a6:75:b6:0b:7e:e4:ba:f8:e4:d6:15:d4:34:
80:0c:85:02:28:6c:14:52:f0:83:78:27:34:a9:49:
5a:8d:60:fa:da:fc:5a:62:1a:a7:e8:23:fb:af:60:
26:1a:7e:a5:8c:76:d0:03:52:46:5a:af:2a:66:dc:
d7:1d:2e:90:71:3e:17:5b:74:a6:ec:e5:50:3c:66:
70:26:88:02:b8:4c:7e:9f:00:02:b3:77:44:72:08:
e9:af:f8:67:6d:b2:47:b2:de:38:8b:64:0f:06:94:
3b:4e:0a:4c:f9:91:da:3c:b4:27:f9:2b:a8:dc:ac:
1c:99:14:84:eb:86:46:a0:ae:77:39:8d:b5:1c:b2:
84:63:07:30:00:4b:99:be:59:89:b4:8c:36:77:8c:
de:98:77:cc:ea:06:85:0f:07:5c:ba:fa:87:7a:43:
65:79:09:b4:33:ec:27:0f:4a:4a:93:ee:45:b1:66:
59:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DD:CD:7B:63:81:72:45:50:95:04:9E:D3:EB:62:7E:52:97:EC:70
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/tN3Ne2OBckVQlQSe0-tiflKX7HA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.71.32.0/20
92.71.64.0/18
213.201.240.0/20
Signature Algorithm: sha256WithRSAEncryption
31:a7:40:0c:f3:db:e8:cb:43:e4:be:23:d2:71:a5:60:45:fa:
ee:fd:cc:ad:2b:e1:74:80:83:07:9f:f3:98:89:4f:2a:f2:d9:
d9:97:b0:bb:d6:cd:d5:1e:6c:14:bc:7f:f8:ba:69:22:73:c3:
f3:fb:04:d7:00:e5:09:94:3c:c0:b2:55:55:38:94:e2:76:e2:
39:44:12:46:07:f6:39:cf:78:76:2a:11:b4:7f:44:e3:91:97:
fa:f2:85:e3:c5:4a:91:f0:23:f7:93:cf:7d:3d:1f:73:63:13:
42:9e:eb:fc:11:e2:2f:bc:83:e8:87:27:f8:03:c9:16:24:e9:
8c:5a:57:d4:27:60:d8:23:ca:2f:5a:69:28:d8:c6:52:50:bb:
38:d5:a3:50:32:a4:3e:56:54:80:25:20:e0:81:95:fb:df:e8:
7f:da:3c:bc:f6:3e:01:6d:03:8c:bb:4d:c0:72:bd:f8:cc:44:
36:e0:50:fe:b1:d8:18:c7:36:8b:f7:9b:9b:aa:bf:0e:01:a1:
7d:28:68:66:ba:aa:b8:f1:dd:cd:2c:99:1b:ff:64:bf:d6:ca:
45:cd:d8:07:bc:c4:97:e4:2f:34:7a:11:07:57:49:b8:5b:58:
55:3a:25:fe:15:a5:21:45:ca:37:ca:41:fe:bf:be:fa:08:d9:
8d:3d:80:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:42:44 2025 by rpki-client