Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/dxnH_mlBfsyDbL13KIn09IOkwmE.roa
File: dxnH_mlBfsyDbL13KIn09IOkwmE.roa (raw, json)
Hash identifier: HoHIawzDxalns9bEIKyQ/xzgMFk4xuJIaPqd7NtcZW4=
Subject key identifier: 77:19:C7:FE:69:41:7E:CC:83:6C:BD:77:28:89:F4:F4:83:A4:C2:61
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019716392C2A23134773C631417493FA1236
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/dxnH_mlBfsyDbL13KIn09IOkwmE.roa
Signing time: Wed 28 May 2025 09:28:54 +0000
ROA not before: Wed 28 May 2025 09:28:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202656
IP address blocks: 31.41.251.0/24 maxlen: 24
31.41.252.0/24 maxlen: 24
31.41.254.0/24 maxlen: 24
45.87.126.0/24 maxlen: 24
45.95.29.0/24 maxlen: 24
45.128.125.0/24 maxlen: 24
45.128.126.0/24 maxlen: 24
45.128.127.0/24 maxlen: 24
45.128.128.0/24 maxlen: 24
45.151.29.0/24 maxlen: 24
83.138.54.0/24 maxlen: 24
88.151.8.0/24 maxlen: 24
91.212.103.0/24 maxlen: 24
94.154.190.0/24 maxlen: 24
146.19.129.0/24 maxlen: 24
176.116.15.0/24 maxlen: 24
176.126.96.0/24 maxlen: 24
193.28.178.0/24 maxlen: 24
193.187.105.0/24 maxlen: 24
194.59.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:16:39:2c:2a:23:13:47:73:c6:31:41:74:93:fa:12:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: May 28 09:28:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7719c7fe69417ecc836cbd772889f4f483a4c261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:aa:31:59:bc:43:5b:83:36:fd:1f:d9:7b:d0:
ad:35:bb:6e:d1:91:3f:b9:0c:2d:51:29:c2:7d:8d:
10:68:21:1e:eb:be:af:cb:81:1a:10:8e:d5:8b:d6:
85:1d:e0:16:3b:ea:ef:c9:93:d3:34:63:79:ac:31:
13:be:85:83:74:31:48:6b:65:94:84:9d:1a:44:2d:
b5:04:7e:eb:96:f5:12:da:26:95:a5:96:8a:f9:e6:
cb:62:0b:ac:eb:8f:a1:30:ce:d5:37:30:49:f1:68:
cc:51:ba:a6:fa:64:01:10:5c:6c:45:2b:99:fe:fa:
89:35:b1:07:f8:55:ee:a9:3a:4b:70:7c:b8:42:a0:
37:87:03:5a:dd:98:68:ca:0b:cd:b8:81:cb:b1:c4:
b5:eb:bf:96:e8:ad:83:6e:77:ce:04:9a:44:3d:75:
7b:2a:75:7e:83:53:ee:b7:0e:fe:74:37:06:7b:18:
91:cc:a5:26:51:1e:db:18:1b:65:39:f8:ec:8a:1e:
84:c7:47:68:79:30:cd:e0:dd:e0:fe:80:d9:69:8f:
b0:43:d2:db:cf:79:c8:86:39:82:50:d7:18:29:a5:
95:22:c4:b1:42:64:cc:e4:df:51:89:01:e7:b1:39:
21:31:cb:5c:ac:ed:8b:60:d4:7a:57:42:19:8b:ca:
29:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:19:C7:FE:69:41:7E:CC:83:6C:BD:77:28:89:F4:F4:83:A4:C2:61
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/dxnH_mlBfsyDbL13KIn09IOkwmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.251.0-31.41.252.255
31.41.254.0/24
45.87.126.0/24
45.95.29.0/24
45.128.125.0-45.128.128.255
45.151.29.0/24
83.138.54.0/24
88.151.8.0/24
91.212.103.0/24
94.154.190.0/24
146.19.129.0/24
176.116.15.0/24
176.126.96.0/24
193.28.178.0/24
193.187.105.0/24
194.59.187.0/24
Signature Algorithm: sha256WithRSAEncryption
35:6b:3a:a8:65:dd:bf:e6:2a:c1:cb:e9:34:f5:7c:f4:49:ba:
d0:02:11:b8:1b:cf:31:75:e1:cd:d6:72:97:ad:6d:2b:14:42:
2d:6f:3b:91:e9:15:a7:3d:1a:58:31:bd:ad:bf:25:34:cc:85:
a3:31:32:ad:db:2d:fc:74:31:b0:72:5a:bc:25:25:ca:e2:86:
c8:d5:05:da:98:fa:e2:60:5a:03:56:5c:60:de:74:d8:97:ab:
78:37:08:7d:51:2d:cb:9a:9a:77:aa:df:71:dd:09:e9:ec:c3:
eb:d2:b8:cd:a7:97:36:b2:60:30:f1:39:9a:01:65:ab:36:61:
38:b0:c5:ee:3f:16:6f:10:df:55:59:8d:de:7b:cc:ef:4e:89:
0b:71:03:43:39:88:58:a7:ea:00:43:51:80:47:79:19:63:42:
73:57:14:71:fb:0f:0b:a1:c9:d6:57:e2:e2:5f:ff:7b:e5:df:
f5:cf:de:20:57:cb:10:f7:bb:9e:08:e2:3f:98:54:35:21:20:
82:8e:90:61:38:74:8f:0f:b4:ae:72:02:8e:18:42:87:28:4f:
c7:e1:ec:61:03:df:2d:ee:15:5e:d5:e5:29:05:90:4f:87:fd:
5a:0f:25:58:94:36:36:83:26:c3:f7:e4:ed:78:eb:30:42:8f:
c8:21:74:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 13:38:09 2025 by rpki-client