Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/nBuwfBTi3z0zJL6pv11ndmM21yA.roa
File: nBuwfBTi3z0zJL6pv11ndmM21yA.roa (raw, json)
Hash identifier: ghnQu5Ks9AwvTzzenho3SXArjUF3Z2Fr2IytACYgM0s=
Subject key identifier: 9C:1B:B0:7C:14:E2:DF:3D:33:24:BE:A9:BF:5D:67:76:63:36:D7:20
Certificate issuer: /CN=51bfb46353bfcccff9412dcbdd480f19b4c98397
Certificate serial: 0195F1EE217F71F188375D666B17858A39D0
Authority key identifier: 51:BF:B4:63:53:BF:CC:CF:F9:41:2D:CB:DD:48:0F:19:B4:C9:83:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/nBuwfBTi3z0zJL6pv11ndmM21yA.roa
Signing time: Tue 01 Apr 2025 15:17:49 +0000
ROA not before: Tue 01 Apr 2025 15:17:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25070
IP address blocks: 88.135.188.0/22 maxlen: 22
88.135.188.0/24 maxlen: 24
91.201.152.0/22 maxlen: 22
109.197.33.0/24 maxlen: 24
109.197.34.0/24 maxlen: 24
109.197.38.0/24 maxlen: 24
195.200.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f1:ee:21:7f:71:f1:88:37:5d:66:6b:17:85:8a:39:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51bfb46353bfcccff9412dcbdd480f19b4c98397
Validity
Not Before: Apr 1 15:17:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c1bb07c14e2df3d3324bea9bf5d67766336d720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fb:af:89:5e:3b:48:46:ce:23:05:de:0d:bf:
cb:b9:b3:47:9b:ec:c7:53:0c:31:31:5c:5b:58:c4:
b9:7d:aa:ac:6d:a5:79:ce:66:21:b5:a4:09:89:9f:
e3:ae:9a:a6:39:06:ea:99:17:99:d5:a0:30:b5:77:
07:e6:6f:08:82:35:ce:51:48:98:e8:33:92:a8:7a:
a1:e4:18:61:8d:ad:c4:b1:c0:85:ca:9e:dd:38:3b:
fc:31:6d:23:9d:4f:53:97:c4:26:80:25:e9:a1:59:
1b:fb:24:bf:0d:30:e1:28:43:8d:f5:14:8a:f4:04:
b2:1f:5a:1c:7f:b9:2c:ec:92:6e:d4:cf:21:72:55:
cb:23:02:7b:c2:0a:57:3a:24:d5:95:99:ec:f6:33:
a7:cd:fa:c8:9a:fd:37:ee:0b:50:fa:34:42:f1:c1:
d8:21:30:38:28:b9:1a:42:cf:26:60:49:49:9f:f6:
7b:ed:af:65:2f:aa:c1:4d:de:50:f5:ef:0d:ce:04:
d4:cd:5d:63:39:5e:1b:d9:7d:fc:1c:1d:0a:c6:fa:
5e:1a:da:ab:ac:90:b9:77:83:af:12:88:d6:81:1a:
25:fd:b1:f9:fc:94:d9:f7:d5:0d:02:cb:64:ff:84:
ce:6b:91:a2:f0:fe:97:c1:ad:91:84:f5:e6:9c:1d:
91:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:1B:B0:7C:14:E2:DF:3D:33:24:BE:A9:BF:5D:67:76:63:36:D7:20
X509v3 Authority Key Identifier:
keyid:51:BF:B4:63:53:BF:CC:CF:F9:41:2D:CB:DD:48:0F:19:B4:C9:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/nBuwfBTi3z0zJL6pv11ndmM21yA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.188.0/22
91.201.152.0/22
109.197.33.0-109.197.34.255
109.197.38.0/24
195.200.206.0/24
Signature Algorithm: sha256WithRSAEncryption
10:10:a5:44:22:84:5c:f4:c2:7a:bd:3e:ec:a1:5d:70:59:15:
87:f5:f0:28:06:7a:3a:83:05:d1:c1:b0:df:1f:cd:2c:41:37:
ea:4c:43:5b:3b:27:c4:08:2b:c7:4b:88:1c:76:dd:50:f2:5e:
b3:c9:cf:d7:1d:23:e5:dc:1f:96:26:86:f4:38:08:b4:3c:d2:
52:fe:55:31:d4:9d:f0:8d:4a:a3:f4:40:44:2d:07:aa:34:59:
35:e6:56:98:f4:37:74:bc:b2:f8:fd:b3:a2:f3:c5:7a:ad:b6:
1c:fb:ff:f7:30:18:ac:fe:05:51:cd:72:a8:e4:dc:e1:63:2f:
9a:9f:6a:33:8f:84:25:6c:fc:65:ba:48:3f:74:29:21:19:a3:
52:dc:4e:f7:2c:29:da:65:2c:d4:31:e2:0d:11:ca:fb:2e:bb:
63:7f:ac:14:b4:21:20:d1:5d:37:7e:26:41:27:5d:f4:ac:67:
85:ce:e0:64:87:88:05:7c:61:39:c7:94:00:ca:71:ac:81:3e:
c6:da:eb:a0:fc:86:65:0b:b4:08:bb:bf:76:94:f0:90:4b:d7:
62:98:7b:87:fd:b4:fe:61:6d:6a:d5:e1:bf:98:e8:95:28:d1:
56:1a:6b:4c:4b:59:3a:77:cc:97:b9:ff:a5:8e:3d:0d:c5:36:
4f:c9:a9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:35:00 2025 by rpki-client