Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/jS5n1QIkV5a4mMLNQcvKPtlrQ-M.roa
File: jS5n1QIkV5a4mMLNQcvKPtlrQ-M.roa (raw, json)
Hash identifier: lelwm9WsLrqz4fINUrusZCHF/wAouDsWxQ/qaZbxy6o=
Subject key identifier: 8D:2E:67:D5:02:24:57:96:B8:98:C2:CD:41:CB:CA:3E:D9:6B:43:E3
Certificate issuer: /CN=23dd05eb7bd945c65df1873552dcc90cb2e17723
Certificate serial: 0196AFB5D0C8C8639592096D3F54E30C6D4E
Authority key identifier: 23:DD:05:EB:7B:D9:45:C6:5D:F1:87:35:52:DC:C9:0C:B2:E1:77:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/jS5n1QIkV5a4mMLNQcvKPtlrQ-M.roa
Signing time: Thu 08 May 2025 11:44:10 +0000
ROA not before: Thu 08 May 2025 11:44:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200495
IP address blocks: 91.198.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:b5:d0:c8:c8:63:95:92:09:6d:3f:54:e3:0c:6d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23dd05eb7bd945c65df1873552dcc90cb2e17723
Validity
Not Before: May 8 11:44:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d2e67d502245796b898c2cd41cbca3ed96b43e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b3:89:21:c0:74:e2:39:f5:51:e3:6b:ea:0f:
bf:aa:53:a9:8d:6f:66:c4:ea:88:22:af:b6:39:22:
7c:c8:00:47:c7:50:3a:0f:b5:22:57:03:f5:e4:30:
6c:2a:0d:4a:f3:c4:46:89:9b:18:ca:a8:ac:e5:9d:
7d:71:6a:56:a6:b5:62:66:c2:b5:54:83:fb:95:4e:
ef:47:a9:a0:e3:98:7f:be:e3:c0:6f:3f:f7:3c:15:
f5:5c:31:1f:40:84:a2:99:94:0e:01:10:61:09:a9:
ed:b7:3a:8f:69:b9:55:df:c9:15:82:08:7e:94:52:
bd:01:10:1d:ba:a2:ae:fa:2c:e0:90:95:17:2f:29:
f6:f8:9c:df:c4:13:c3:63:4f:ed:c3:98:bf:35:38:
65:3a:e6:e1:24:ff:3c:99:35:1d:d1:c6:75:6b:35:
4f:76:33:fb:e4:65:3f:d9:5f:67:52:fe:ad:ac:80:
2b:89:c8:e7:43:08:b5:0d:fa:7b:2a:db:0c:b1:30:
5d:29:e1:c5:dc:b4:58:96:99:6e:ca:c1:9f:1d:63:
24:85:cd:d8:35:88:c4:8b:54:05:af:33:d7:4c:4f:
52:86:a7:1f:4a:58:39:13:3b:a5:86:77:20:51:58:
d5:fe:64:15:88:97:ec:c5:03:1e:41:7f:a3:13:48:
56:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:2E:67:D5:02:24:57:96:B8:98:C2:CD:41:CB:CA:3E:D9:6B:43:E3
X509v3 Authority Key Identifier:
keyid:23:DD:05:EB:7B:D9:45:C6:5D:F1:87:35:52:DC:C9:0C:B2:E1:77:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/jS5n1QIkV5a4mMLNQcvKPtlrQ-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.188.0/24
Signature Algorithm: sha256WithRSAEncryption
27:3b:26:97:b7:3a:2a:8d:01:b8:1f:4d:a1:85:b0:6a:27:59:
7d:31:9e:c1:7b:6d:fb:ca:b0:e5:2f:9c:06:7a:39:73:a8:67:
65:ec:9d:86:ca:e4:93:5e:48:1f:fc:54:c3:83:7d:b0:7b:6f:
83:48:1e:e6:59:b1:94:66:55:7e:bc:ca:1e:0e:69:1c:4a:65:
4b:d4:21:a5:1d:1e:30:0c:8b:91:4e:50:8f:84:d0:48:8b:9a:
ae:25:54:de:48:8a:dc:cf:3d:0f:24:1b:96:22:1a:40:76:f9:
7c:8e:40:41:a9:4a:8b:c2:28:12:63:d5:9d:09:8e:8f:f9:b2:
d7:60:49:29:eb:fe:c8:f7:69:5a:44:ab:dc:2a:ac:f1:1a:ee:
11:e9:0b:e6:a9:18:93:61:e0:8f:55:f4:7b:dd:f2:ed:12:58:
31:e1:eb:e1:50:54:4b:64:96:a8:8c:61:d1:ae:56:03:e2:c6:
b7:5f:40:56:13:25:22:82:f4:5c:74:98:9c:d6:08:f9:d8:95:
33:a4:64:fd:42:af:66:da:a3:7d:7a:09:ac:1d:f2:5e:55:0d:
a0:40:12:5d:7f:72:6d:ce:bd:e5:a9:51:14:44:ca:07:2a:b3:
90:a8:42:b9:71:43:07:41:6d:f6:e5:ce:50:24:16:a7:a4:c0:
ac:90:a7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:41:22 2025 by rpki-client