Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/bJ91jF4SszEyTIK0a5bPFNieMcY.roa
File: bJ91jF4SszEyTIK0a5bPFNieMcY.roa (raw, json)
Hash identifier: 4GUCUo9J5mUrDS2qg1ahYZMQtG6oOPC8EqiNn41d1lI=
Subject key identifier: 6C:9F:75:8C:5E:12:B3:31:32:4C:82:B4:6B:96:CF:14:D8:9E:31:C6
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01970CFBF507D5223144F762DF312ECE81AB
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/bJ91jF4SszEyTIK0a5bPFNieMcY.roa
Signing time: Mon 26 May 2025 14:25:28 +0000
ROA not before: Mon 26 May 2025 14:25:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199546
IP address blocks: 193.187.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0c:fb:f5:07:d5:22:31:44:f7:62:df:31:2e:ce:81:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: May 26 14:25:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c9f758c5e12b331324c82b46b96cf14d89e31c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0a:9b:7a:db:b6:36:45:05:34:06:73:ff:b3:
72:a6:92:1e:1e:05:bd:f1:28:bb:4f:8b:af:54:9e:
12:68:b9:fb:13:17:43:ee:78:97:17:2b:f8:ff:ce:
1d:9c:49:b2:b7:27:5f:c6:8e:da:5f:df:e1:04:00:
86:d0:41:1f:8c:3b:c8:96:51:2d:18:51:cf:98:41:
ad:83:e3:0e:d7:cd:0b:d4:60:14:20:35:ae:31:e5:
bc:55:d0:e1:e9:27:be:8e:23:17:5f:6c:30:3a:67:
f1:eb:40:d0:95:70:8f:c2:26:aa:ba:13:72:77:2d:
25:15:20:eb:d2:c8:b4:72:9c:17:dd:65:e9:6c:98:
bc:b8:0a:29:b3:55:71:21:80:a4:ba:ca:14:5b:ee:
19:21:cc:b4:0b:69:6f:ad:b9:76:ba:ae:89:44:a5:
78:36:08:aa:6f:8e:0a:d7:df:27:1d:78:79:e2:3e:
04:88:3f:c1:31:45:5f:d7:57:87:47:fc:92:97:59:
ac:74:89:eb:92:e1:db:94:aa:99:cc:4d:b7:89:de:
13:5f:29:96:84:32:cb:d2:9f:f0:f4:1c:0b:c6:75:
ad:91:69:9f:b2:a1:d2:4c:f5:03:65:f2:b2:a0:12:
8c:74:c0:41:90:06:6f:5c:3c:28:71:6a:1e:d1:d2:
cf:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:9F:75:8C:5E:12:B3:31:32:4C:82:B4:6B:96:CF:14:D8:9E:31:C6
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/bJ91jF4SszEyTIK0a5bPFNieMcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.104.0/24
Signature Algorithm: sha256WithRSAEncryption
49:2e:b5:50:c5:ab:51:4f:6f:c3:a9:c0:40:ab:5e:96:2d:e5:
d6:53:af:77:9b:91:67:37:df:ed:d9:d2:8f:20:c4:7b:f4:7f:
d6:d1:bf:f8:a7:c4:91:3a:b8:04:b4:e0:7f:c4:5a:2c:3b:c1:
4a:cf:f3:f1:4c:6c:0e:72:22:cf:57:25:07:b6:aa:d5:a3:dd:
77:f5:71:ac:15:92:fc:c5:3b:b6:86:d8:5e:79:12:2b:c8:77:
58:d3:57:62:81:02:fa:33:28:57:15:78:6e:8a:ad:a6:48:c3:
71:ab:a8:8a:f0:20:02:51:ac:04:fa:4f:e6:12:b0:07:cc:df:
58:0c:a9:d8:0b:ac:66:b4:c4:c8:a3:7b:b7:2b:29:d7:a0:27:
7f:19:a5:1b:f8:8b:0c:19:a8:32:45:7a:94:6a:6a:57:54:7e:
cd:ff:53:9f:ec:ba:84:40:46:b1:4d:e1:b2:2b:9e:f5:1e:1f:
6a:7b:01:16:9c:1a:9c:d9:b0:d1:d7:42:c5:40:37:3d:6d:d8:
2e:53:e1:4c:ef:0b:8e:8b:84:40:4c:d7:30:15:8f:e0:22:79:
49:c4:99:87:57:88:43:aa:4e:05:d9:b7:82:65:31:bc:f1:33:
ab:96:5d:d5:40:38:9a:a5:b6:f1:29:95:d7:fe:a0:c9:9d:40:
64:0d:8b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 14:37:20 2025 by rpki-client