Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/0nsvioh61YbytSnl9cRfbyJDp0c.roa
File: 0nsvioh61YbytSnl9cRfbyJDp0c.roa (raw, json)
Hash identifier: X+BXv/M5wDF8Xn3Xgva7hBqMYN1SYqooUH8v3XJmFZ4=
Subject key identifier: D2:7B:2F:8A:88:7A:D5:86:F2:B5:29:E5:F5:C4:5F:6F:22:43:A7:47
Certificate issuer: /CN=bfe3971a32c0692c4e342e911790662470cf31b2
Certificate serial: 0194266AC3CDE498D083F66B5D9D737B8317
Authority key identifier: BF:E3:97:1A:32:C0:69:2C:4E:34:2E:91:17:90:66:24:70:CF:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/0nsvioh61YbytSnl9cRfbyJDp0c.roa
Signing time: Thu 02 Jan 2025 09:48:38 +0000
ROA not before: Thu 02 Jan 2025 09:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201814
IP address blocks: 5.181.188.0/22 maxlen: 22
91.223.3.0/24 maxlen: 24
91.226.198.0/23 maxlen: 23
91.226.198.0/24 maxlen: 24
91.226.199.0/24 maxlen: 24
95.214.52.0/22 maxlen: 23
95.214.52.0/23 maxlen: 23
95.214.54.0/23 maxlen: 23
146.19.24.0/24 maxlen: 24
178.211.139.0/24 maxlen: 24
185.16.36.0/22 maxlen: 24
185.225.191.0/24 maxlen: 24
185.248.24.0/24 maxlen: 24
193.34.212.0/22 maxlen: 22
193.34.212.0/23 maxlen: 23
193.34.214.0/23 maxlen: 23
193.34.215.0/24 maxlen: 24
195.3.220.0/22 maxlen: 22
195.3.220.0/23 maxlen: 23
195.3.222.0/23 maxlen: 23
195.3.222.0/24 maxlen: 24
212.23.222.0/24 maxlen: 24
2a03:cfc0::/32 maxlen: 32
2a03:cfc0::/33 maxlen: 33
2a03:cfc0:8000::/33 maxlen: 33
2a09:d580::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:c3:cd:e4:98:d0:83:f6:6b:5d:9d:73:7b:83:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe3971a32c0692c4e342e911790662470cf31b2
Validity
Not Before: Jan 2 09:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d27b2f8a887ad586f2b529e5f5c45f6f2243a747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c5:1d:ef:93:9c:27:27:0c:2b:3e:db:c6:42:
8c:29:af:f3:39:29:0a:f2:93:c2:a6:43:8c:28:d0:
23:71:24:fc:ab:ba:58:b6:fb:4c:94:cc:4c:f4:ef:
bd:1f:aa:67:1f:ce:0a:22:14:b8:70:1d:6a:c9:5e:
64:93:3a:04:d9:78:b1:86:96:db:17:6c:94:1d:cd:
db:18:6c:c4:b1:a3:b8:9b:ca:17:94:2b:1e:00:8b:
ca:13:9c:f1:d0:10:36:ad:25:ef:d9:f9:ad:ac:98:
ac:0d:54:9c:8c:b4:13:64:dc:a6:9e:79:f0:78:ac:
73:64:3c:01:d4:7f:52:b4:44:34:9f:ee:9c:e4:64:
4a:7d:c2:64:83:0f:71:05:e0:0d:63:d4:a0:78:af:
1c:41:d0:28:1d:02:53:f2:17:6b:65:5b:f9:3d:3e:
03:f9:11:4c:dd:d2:7a:76:9a:1d:a3:22:2f:40:64:
4d:80:66:c7:dc:f7:08:c7:49:03:54:44:ab:70:65:
29:17:c8:40:d5:da:62:7e:63:7e:21:1d:17:5b:4c:
6a:0e:43:cf:02:d7:ea:0e:cc:fb:c9:11:a6:7c:30:
0e:d6:d3:e7:e8:d3:df:77:dd:9c:48:9a:a7:11:6c:
37:e3:31:91:07:9d:0b:73:5f:cd:ee:ff:37:a0:28:
de:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:7B:2F:8A:88:7A:D5:86:F2:B5:29:E5:F5:C4:5F:6F:22:43:A7:47
X509v3 Authority Key Identifier:
keyid:BF:E3:97:1A:32:C0:69:2C:4E:34:2E:91:17:90:66:24:70:CF:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/0nsvioh61YbytSnl9cRfbyJDp0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.188.0/22
91.223.3.0/24
91.226.198.0/23
95.214.52.0/22
146.19.24.0/24
178.211.139.0/24
185.16.36.0/22
185.225.191.0/24
185.248.24.0/24
193.34.212.0/22
195.3.220.0/22
212.23.222.0/24
IPv6:
2a03:cfc0::/32
2a09:d580::/29
Signature Algorithm: sha256WithRSAEncryption
79:19:4a:be:98:8d:da:d8:f4:22:93:33:e9:e5:00:ac:33:65:
91:c6:0d:8c:db:1a:ec:e9:85:23:0b:44:4f:8d:9c:a0:51:44:
c1:0a:46:da:6a:27:b7:2a:58:29:9a:12:ac:2a:63:e9:54:e5:
b4:fe:cb:ba:4e:a0:42:4c:d3:17:ea:23:17:2b:38:12:2a:4f:
80:71:09:79:d8:0f:09:72:dc:d5:ed:68:ca:25:64:51:e2:c2:
67:11:db:fd:d9:07:dc:02:77:03:c9:13:b9:3d:d4:e8:5b:1c:
54:13:18:06:f5:c9:8b:18:db:a2:bd:09:79:76:7d:7d:5b:1a:
65:12:36:11:2b:b3:13:a3:49:a1:e3:fb:e5:46:73:f3:f7:b9:
20:ff:48:b5:c6:4e:ee:5b:7c:fd:10:15:6b:10:ad:7c:0f:79:
ee:e6:8e:f6:69:c1:01:33:f4:84:c0:e8:98:73:cd:9f:6b:11:
c7:00:1f:1a:14:25:61:08:87:a8:ee:cb:22:18:85:53:75:bb:
13:f7:d3:d4:c9:2c:05:22:93:54:2c:8b:c9:da:65:4e:28:cf:
ac:9a:71:66:e9:c1:8b:a2:fd:69:57:84:f4:11:e5:be:11:b3:
52:bd:3f:6b:a1:04:50:94:7f:3e:3d:38:24:8f:49:cb:17:8e:
70:78:56:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:04:57 2025 by rpki-client