Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/saaFFJdprL2UcH3v0LL3zZpp7jc.roa
File: saaFFJdprL2UcH3v0LL3zZpp7jc.roa (raw, json)
Hash identifier: YyF7BBYn0BiV4oWuG7tgrnT28h9nKay6fwuXu0twrBw=
Subject key identifier: B1:A6:85:14:97:69:AC:BD:94:70:7D:EF:D0:B2:F7:CD:9A:69:EE:37
Certificate issuer: /CN=3642bbc83e28c103c17d5a201edef5672634dbe8
Certificate serial: 0196CEBCEE0CD4F608BFE5E04CA85D9E60EB
Authority key identifier: 36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/saaFFJdprL2UcH3v0LL3zZpp7jc.roa
Signing time: Wed 14 May 2025 12:20:10 +0000
ROA not before: Wed 14 May 2025 12:20:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211709
IP address blocks: 188.125.162.0/24 maxlen: 24
193.3.41.0/24 maxlen: 24
193.162.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:bc:ee:0c:d4:f6:08:bf:e5:e0:4c:a8:5d:9e:60:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3642bbc83e28c103c17d5a201edef5672634dbe8
Validity
Not Before: May 14 12:20:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1a685149769acbd94707defd0b2f7cd9a69ee37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0b:0a:92:08:43:e7:6d:32:91:2e:bb:fe:4e:
f4:a8:76:36:df:a3:fc:b7:78:ef:26:30:db:33:38:
74:4a:c1:fa:3f:c9:f0:44:35:10:a1:06:f6:8e:80:
a9:39:15:e7:da:de:28:e7:4c:1c:09:d3:78:5d:8a:
76:bc:40:c0:6a:9b:c6:cf:6c:44:60:95:92:c3:71:
96:02:b5:69:ad:1d:a3:1d:0b:00:b1:45:bb:b3:29:
90:e3:a3:50:64:57:7f:3e:93:97:34:70:98:b0:6a:
9f:0a:84:b8:fd:22:5c:63:09:5e:00:75:2f:d4:e3:
31:fc:4b:c3:cd:a7:4c:db:6e:e4:60:0e:43:bb:9b:
4e:e2:16:34:f7:39:8a:ea:4e:33:70:ff:82:c2:12:
6f:0a:83:ac:83:08:90:16:9b:0d:ba:a9:ec:65:89:
81:b9:d4:f3:a1:bf:88:c1:8d:81:29:87:83:42:94:
e9:50:76:5f:d6:49:8f:c3:da:d8:3a:a8:87:c4:4b:
58:cf:9a:c0:75:25:75:bf:0b:59:cf:53:ac:6f:26:
82:6c:2b:ba:87:29:6f:80:20:33:e1:10:16:93:14:
2d:10:40:d6:f9:7c:43:be:8e:93:9b:d7:93:32:48:
eb:77:81:66:a6:aa:27:6b:53:86:5f:ab:24:15:1a:
4f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A6:85:14:97:69:AC:BD:94:70:7D:EF:D0:B2:F7:CD:9A:69:EE:37
X509v3 Authority Key Identifier:
keyid:36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/saaFFJdprL2UcH3v0LL3zZpp7jc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.125.162.0/24
193.3.41.0/24
193.162.105.0/24
Signature Algorithm: sha256WithRSAEncryption
64:81:7f:44:d6:39:42:2e:ff:0b:e5:d3:1d:1d:3e:a2:d3:f8:
1e:b7:23:66:2c:07:b4:b3:76:db:a8:f9:cc:cc:93:72:f9:21:
42:39:14:5c:f5:f4:2c:0e:db:2e:69:2a:61:0f:eb:48:00:1b:
6c:fe:73:1a:6c:2d:73:b6:d1:e3:e0:a7:4a:94:48:9f:a8:f3:
91:9d:92:c6:6c:ff:1f:ce:1c:9d:3a:68:57:94:5b:2d:1e:55:
60:5a:5b:fb:58:81:15:70:d4:0a:4c:0c:8e:e6:fd:58:0d:70:
4c:c6:01:13:78:73:bc:3d:5b:02:da:0b:32:dd:a9:81:ac:71:
c0:aa:c9:99:03:83:0f:92:75:27:e5:9e:92:d5:05:b0:3d:fc:
40:e9:52:03:5c:21:55:7a:4a:1a:d2:3f:24:df:49:e6:05:5c:
0f:41:07:07:96:43:71:9d:8d:52:c0:59:23:16:92:f0:ad:c0:
7c:22:a5:97:07:c5:2e:80:56:bc:4d:85:5a:88:5a:ff:2d:82:
79:1e:d5:51:0c:64:b6:f9:62:d0:1f:89:c6:ce:0a:08:f4:a0:
28:d1:ea:89:5e:81:39:e6:ae:21:07:89:1f:c7:b3:40:0a:e7:
7e:95:9e:a5:ab:cc:68:f4:59:cb:09:0c:8b:19:ef:b8:95:7a:
11:4f:dd:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:02:53 2025 by rpki-client