Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/a9_bN0F2h_Kug5sgN-Kpf5AuF0Y.roa
File: a9_bN0F2h_Kug5sgN-Kpf5AuF0Y.roa (raw, json)
Hash identifier: f6TkQWvmEWMglWzfpXp6gmToVC7S2f1cCbDqMTnyBzg=
Subject key identifier: 6B:DF:DB:37:41:76:87:F2:AE:83:9B:20:37:E2:A9:7F:90:2E:17:46
Certificate issuer: /CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
Certificate serial: 019422201535B17B7DDDB5F6BD501FFE76CD
Authority key identifier: E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/a9_bN0F2h_Kug5sgN-Kpf5AuF0Y.roa
Signing time: Wed 01 Jan 2025 13:48:35 +0000
ROA not before: Wed 01 Jan 2025 13:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5528
IP address blocks: 188.92.22.0/24 maxlen: 32
188.92.23.0/24 maxlen: 32
195.130.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:15:35:b1:7b:7d:dd:b5:f6:bd:50:1f:fe:76:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
Validity
Not Before: Jan 1 13:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6bdfdb37417687f2ae839b2037e2a97f902e1746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:76:70:10:5c:65:4a:ef:16:fe:d3:98:fa:1d:
81:79:80:58:5c:94:2b:5b:dd:b3:8b:35:48:ca:db:
49:b3:01:1d:30:56:f5:fd:95:46:c8:1c:c2:1d:4f:
26:0b:9c:b4:d7:62:dc:f1:72:67:ca:d6:57:18:f7:
1c:18:c3:db:69:3a:1d:77:89:59:09:10:5d:8e:b4:
8a:91:40:9b:0e:4c:e9:ae:e2:cd:3c:d2:3d:4c:df:
35:85:e5:f3:ce:db:12:37:c6:a5:01:81:18:ab:3d:
19:98:b0:62:b8:12:f8:4c:f9:57:f7:66:7e:e2:7d:
20:ef:b3:f9:73:8a:83:da:28:2e:d2:47:82:9e:de:
fa:65:a3:10:9e:ab:e8:62:f1:9f:a3:7d:83:02:01:
70:0c:34:16:46:4b:e2:b0:05:fa:32:3d:5d:24:a5:
fa:42:e3:e9:bf:db:79:50:de:8a:27:9a:04:03:19:
67:0f:5e:96:25:1b:ae:36:b4:4b:85:25:f6:ab:dc:
19:d1:58:da:e5:53:15:9f:d4:84:5e:e1:29:04:35:
b4:32:28:57:87:73:0d:a7:cf:ed:5a:76:1f:32:ba:
b2:8d:85:f8:f9:8e:7c:d7:c6:98:3e:c8:eb:45:dd:
55:3d:5a:bb:86:df:83:4f:76:54:f5:76:b4:62:46:
ff:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:DF:DB:37:41:76:87:F2:AE:83:9B:20:37:E2:A9:7F:90:2E:17:46
X509v3 Authority Key Identifier:
keyid:E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/a9_bN0F2h_Kug5sgN-Kpf5AuF0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.92.22.0/23
195.130.205.0/24
Signature Algorithm: sha256WithRSAEncryption
14:c5:0b:d8:05:b5:86:5c:ac:16:47:bb:20:a0:a3:b0:9d:cb:
48:39:a8:a1:10:80:56:cf:23:9d:4f:c8:9c:55:a2:28:5f:2f:
f0:f1:fd:d5:1a:7b:e1:d5:ed:02:35:10:b7:91:c2:db:7b:94:
38:4b:65:b4:9b:b5:d9:c4:99:55:4a:d1:9b:ba:07:70:fd:06:
9e:4d:52:4f:e3:b9:5d:7e:b3:3b:1a:29:5d:00:71:3e:f3:b3:
34:0e:74:6a:31:1a:52:0f:42:5e:d7:a7:74:d0:88:ed:88:7d:
2e:26:47:8e:d8:26:47:0c:79:16:12:d9:c9:b9:53:dd:b9:af:
10:78:42:8f:8b:8c:32:54:86:ad:c6:9d:04:4a:a8:ba:99:b5:
9b:d0:f0:8e:07:42:87:e1:16:f8:fb:17:c6:4b:fc:45:65:86:
14:c0:bf:18:22:0f:06:1c:6f:67:35:16:68:a4:6a:c3:8a:43:
01:80:4b:61:81:6d:ec:73:ef:0a:7c:c9:20:be:17:77:01:61:
14:fa:d4:55:fa:d7:fe:ab:33:25:47:e8:bb:75:e2:1b:97:00:
86:92:ff:f1:dc:43:b5:a4:dd:70:56:2d:e8:e7:5a:84:cc:ab:
cb:d0:28:e0:0b:e7:73:f2:e8:38:e7:4d:1d:39:5e:2e:02:8f:
8a:32:7c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:19:58 2025 by rpki-client