Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/I32dN6KwFoewNSfpS4XBjG5myXU.roa
File: I32dN6KwFoewNSfpS4XBjG5myXU.roa (raw, json)
Hash identifier: PHYrnIWI7dP/AROY19OnK6Q0ENbOWp8OyZchyzmlbds=
Subject key identifier: 23:7D:9D:37:A2:B0:16:87:B0:35:27:E9:4B:85:C1:8C:6E:66:C9:75
Certificate issuer: /CN=ffb5852780142e413f9f15b24d59913311a10ec2
Certificate serial: 0196ED91B21B2D0B891D81C3A1E4A95EA7DC
Authority key identifier: FF:B5:85:27:80:14:2E:41:3F:9F:15:B2:4D:59:91:33:11:A1:0E:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7WFJ4AULkE_nxWyTVmRMxGhDsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/I32dN6KwFoewNSfpS4XBjG5myXU.roa
Signing time: Tue 20 May 2025 12:01:10 +0000
ROA not before: Tue 20 May 2025 12:01:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47876
IP address blocks: 91.208.150.0/24 maxlen: 24
91.209.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/_7WFJ4AULkE_nxWyTVmRMxGhDsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/_7WFJ4AULkE_nxWyTVmRMxGhDsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7WFJ4AULkE_nxWyTVmRMxGhDsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ed:91:b2:1b:2d:0b:89:1d:81:c3:a1:e4:a9:5e:a7:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffb5852780142e413f9f15b24d59913311a10ec2
Validity
Not Before: May 20 12:01:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=237d9d37a2b01687b03527e94b85c18c6e66c975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cf:e4:7e:07:52:fe:67:f7:d4:e5:e1:48:7e:
a4:30:e1:33:c6:70:dd:a5:ee:b1:e1:aa:4a:2d:ab:
64:5c:f9:e6:26:ff:7c:6a:75:ff:e9:f9:40:8d:26:
22:48:1a:bc:0f:b6:d9:6e:8b:f7:2b:b3:2e:02:48:
de:24:a0:d2:da:9f:8f:cb:f2:f4:58:79:fb:1d:3e:
47:60:5e:c1:23:7c:0f:aa:b1:69:26:30:46:c8:41:
16:91:b1:45:4b:9e:94:a1:9d:d3:d6:74:c5:96:77:
fa:3d:63:86:5e:c2:19:0d:c1:c8:4d:d0:dd:65:fc:
95:1b:44:d6:c5:6a:8b:22:1f:63:47:b6:13:de:9e:
10:5c:f1:2b:34:6b:ab:2b:4b:05:6a:ce:cb:a0:09:
9f:cb:e3:35:d2:31:e0:00:47:a5:f1:2d:55:33:36:
eb:cd:78:0b:36:94:50:e7:93:02:22:e9:be:c9:e2:
4d:ae:04:02:42:a4:26:17:04:a9:fc:ae:f4:9b:0b:
be:d1:7e:fd:ad:32:98:a7:97:fe:3f:dc:15:1a:6e:
46:82:53:be:17:59:5b:11:e7:1d:c3:8c:2a:88:6b:
b4:a4:64:4d:f4:8a:2a:79:4c:f9:7c:66:17:cd:f3:
a7:1f:fd:bc:9b:b3:15:5d:18:c0:39:32:5d:a4:c8:
40:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:7D:9D:37:A2:B0:16:87:B0:35:27:E9:4B:85:C1:8C:6E:66:C9:75
X509v3 Authority Key Identifier:
keyid:FF:B5:85:27:80:14:2E:41:3F:9F:15:B2:4D:59:91:33:11:A1:0E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7WFJ4AULkE_nxWyTVmRMxGhDsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/I32dN6KwFoewNSfpS4XBjG5myXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/_7WFJ4AULkE_nxWyTVmRMxGhDsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.150.0/24
91.209.155.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:80:e5:fc:02:8c:6b:99:f0:e7:2f:7c:d7:c6:55:ff:30:e7:
f7:e4:c7:e0:f5:d4:f2:e9:fb:4a:11:96:ba:c0:a4:39:0e:d8:
f1:ee:47:b3:67:7c:c3:30:fe:00:d4:00:8e:7c:aa:77:00:b5:
69:ac:d4:6a:c1:6c:e2:22:8e:4b:d2:33:22:8e:35:58:36:9d:
ef:96:fa:9d:09:29:26:ed:cc:49:c0:1f:b2:b9:68:f2:82:e7:
84:95:86:89:75:e7:fb:63:fc:2d:53:ff:37:bd:35:aa:6c:af:
9c:9e:99:0b:59:af:1c:83:f9:a3:b7:02:36:fb:72:5c:87:24:
2c:14:ef:8c:3d:45:68:3a:18:89:94:9a:6f:b2:18:c2:29:a9:
15:da:91:11:0f:af:52:63:2b:8d:56:97:a0:53:34:7a:2a:f6:
c4:b5:6b:74:6c:5d:46:95:4c:90:f5:81:7c:64:f8:24:e2:65:
72:40:c0:b2:02:f3:c8:9d:2f:36:04:0b:39:60:84:e0:10:f4:
1f:28:eb:c8:f0:a7:33:74:c6:c5:a6:56:94:f3:1b:70:f5:dd:
69:94:39:2c:aa:e5:14:c3:50:70:8e:11:8c:9e:bf:ec:8c:f9:
b2:c1:7c:17:88:76:9a:98:15:ec:3f:13:4d:41:53:cd:33:51:
f9:26:2a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:48:28 2025 by rpki-client