Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/Cw3KSb4w5fVGO1h3Oj_H-hpchVg.roa
File: Cw3KSb4w5fVGO1h3Oj_H-hpchVg.roa (raw, json)
Hash identifier: uQeSPU2EF8IdzkDhENLmsFnhh9oxYjUNdNs+h74gmgY=
Subject key identifier: 0B:0D:CA:49:BE:30:E5:F5:46:3B:58:77:3A:3F:C7:FA:1A:5C:85:58
Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial: 0196808BD7B8470AD7607C8C31DD9BB6A03D
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/Cw3KSb4w5fVGO1h3Oj_H-hpchVg.roa
Signing time: Tue 29 Apr 2025 07:56:10 +0000
ROA not before: Tue 29 Apr 2025 07:56:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134094
IP address blocks: 89.252.132.0/24 maxlen: 24
89.252.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:8b:d7:b8:47:0a:d7:60:7c:8c:31:dd:9b:b6:a0:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Validity
Not Before: Apr 29 07:56:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b0dca49be30e5f5463b58773a3fc7fa1a5c8558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:36:22:3a:10:c3:25:93:a3:8c:c9:51:88:d8:
ea:3a:27:14:30:07:b8:80:5c:35:2c:ac:ca:98:22:
8d:73:fc:7a:b5:5e:04:04:fa:67:e8:94:54:58:fc:
de:85:2c:01:df:af:49:62:d9:00:d7:21:a0:2b:07:
63:52:17:96:08:c0:0e:1b:6a:26:c9:84:28:26:7c:
89:b4:00:0b:d0:ac:13:19:b5:a3:92:c1:04:07:86:
19:5c:1b:b5:fe:c6:1e:47:8e:a7:b2:ce:0c:1d:d5:
dc:70:eb:11:35:62:55:cc:09:fe:ce:10:35:bf:63:
bd:f5:49:ca:41:48:ba:5f:50:b2:1d:29:b6:b2:77:
4d:b9:aa:58:f9:88:ae:7f:2f:64:ba:60:7b:c7:c9:
69:68:31:5d:9d:10:ab:d9:37:0b:d2:35:6f:91:aa:
42:96:fe:03:1d:52:3e:cf:e6:29:6b:90:fb:c8:5d:
07:d1:ee:e3:35:ea:08:a0:56:18:06:6e:33:b4:93:
b5:31:ca:dc:d4:a6:ca:eb:30:72:6f:55:3a:2c:a6:
36:18:0e:69:6a:d3:02:c9:31:6b:52:58:4d:f2:30:
1f:6d:a5:e0:1c:70:00:ed:7f:e7:7d:69:eb:23:56:
e0:b7:70:b3:42:98:74:57:8c:fe:8c:88:a1:bd:02:
fd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:0D:CA:49:BE:30:E5:F5:46:3B:58:77:3A:3F:C7:FA:1A:5C:85:58
X509v3 Authority Key Identifier:
keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/Cw3KSb4w5fVGO1h3Oj_H-hpchVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.252.132.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:97:25:87:9b:f5:9f:e1:4c:5d:5c:65:b2:f1:55:78:76:77:
da:a6:77:1d:6a:87:e7:6d:9a:5b:71:a5:fe:41:24:e6:3a:9b:
cc:d5:e6:1b:31:54:52:4e:de:72:70:d6:26:05:ed:ef:75:96:
2e:12:b0:72:c2:ba:44:e7:2e:b0:54:66:2c:42:bf:07:a1:f1:
7f:66:fc:67:a7:7d:49:f9:28:a9:02:93:18:a6:b7:ca:a0:5d:
d2:f6:f9:2d:61:b7:c0:8f:00:2d:30:80:29:0f:4b:98:61:a3:
48:17:2d:b2:87:e3:b4:b3:bf:80:b2:e6:23:6d:86:ea:b1:39:
20:3a:9f:19:fc:ec:a3:3e:16:ca:42:e4:6f:2d:70:97:c9:0e:
ad:16:bc:9a:14:bc:58:20:9e:6d:ee:7c:e0:10:15:3c:03:15:
22:a8:bb:57:4b:62:f6:9c:6a:97:17:e2:c7:f3:ab:f7:58:0d:
4e:28:29:99:60:73:07:14:e6:1c:1e:2e:2e:5f:61:90:13:8f:
c8:85:56:0d:36:41:08:b5:71:7a:21:00:9f:7b:54:13:59:21:
45:e1:ce:17:ce:b1:35:ba:57:2c:c8:37:40:c9:1a:6a:74:f5:
63:be:9c:9e:e7:c5:37:fa:f3:b8:59:2a:0d:e8:14:5e:3e:26:
f0:7c:41:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:24:33 2025 by rpki-client