Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/P0bor4j0d0bmHHzNKkJIoLXf-2U.roa
File: P0bor4j0d0bmHHzNKkJIoLXf-2U.roa (raw, json)
Hash identifier: 1pquELJ+M1APTEFrnXs6Yn33MCXEpAgq+JfKEajWDz4=
Subject key identifier: 3F:46:E8:AF:88:F4:77:46:E6:1C:7C:CD:2A:42:48:A0:B5:DF:FB:65
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 0196F90150086E4947B2CF1F3B18346B31B2
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/P0bor4j0d0bmHHzNKkJIoLXf-2U.roa
Signing time: Thu 22 May 2025 17:18:54 +0000
ROA not before: Thu 22 May 2025 17:18:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213541
IP address blocks: 91.108.236.0/24 maxlen: 24
91.108.238.0/24 maxlen: 24
91.108.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f9:01:50:08:6e:49:47:b2:cf:1f:3b:18:34:6b:31:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: May 22 17:18:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f46e8af88f47746e61c7ccd2a4248a0b5dffb65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5c:38:9f:0d:fe:c2:d2:09:6c:d8:af:ba:f5:
92:3b:2b:e9:d0:93:a0:6e:91:02:68:d0:c2:a2:30:
2f:6a:8f:d1:bb:70:fb:5e:76:2b:74:bd:82:7b:ee:
45:21:10:4e:e2:83:81:50:33:f9:d6:63:41:78:2f:
e0:8b:28:95:d4:cf:11:34:f3:fa:db:bc:98:a3:b2:
c3:06:df:2b:bf:62:47:36:b6:7e:b3:cb:43:22:07:
bf:24:65:44:63:fc:e2:40:12:cc:1b:60:d3:5e:a0:
d3:f9:90:11:61:6d:29:c9:a3:7a:74:02:37:2f:ae:
21:11:45:77:71:b3:51:42:d5:99:78:0f:f7:3c:04:
43:34:0c:38:d9:1a:51:c0:47:43:79:9a:2b:36:bb:
5b:03:54:0a:8f:e4:ca:67:1a:6f:48:5f:5c:38:e4:
98:28:12:23:7a:5c:a2:a1:b2:79:28:31:63:b8:be:
8b:6f:77:60:79:0e:4c:04:d9:4c:49:0d:b8:3a:93:
f5:d9:25:63:e8:53:d4:9b:4a:ac:18:af:b9:b8:71:
37:0f:c7:b6:64:4e:89:a6:79:c1:74:db:56:9b:f2:
cd:41:2b:f9:95:71:ce:73:7f:72:df:80:43:83:5c:
07:56:f5:93:20:d3:24:d4:36:fd:7e:c8:47:1d:92:
6b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:46:E8:AF:88:F4:77:46:E6:1C:7C:CD:2A:42:48:A0:B5:DF:FB:65
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/P0bor4j0d0bmHHzNKkJIoLXf-2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.236.0/24
91.108.238.0/24
91.108.255.0/24
Signature Algorithm: sha256WithRSAEncryption
44:4b:fb:bc:23:83:d6:e0:cc:98:7f:22:fa:81:60:71:e8:94:
66:9a:f6:0d:d1:fa:0a:9c:bc:ba:10:17:7d:58:40:f3:32:d3:
57:7e:01:31:b9:9c:fc:7d:fd:f1:bf:57:a9:b3:d9:e7:18:a2:
a8:71:2c:c8:9a:2d:a8:99:b7:7b:9d:ca:95:7e:85:83:f9:4a:
48:f6:cf:8a:6a:bc:68:99:15:d5:30:b8:9c:a9:3d:e4:1f:35:
32:9b:ce:e0:b4:3e:21:4b:ed:59:52:c9:81:b4:47:d7:27:83:
7a:0d:37:ac:ce:03:37:71:6a:0e:49:3d:5f:14:32:34:e4:1f:
fb:94:52:d0:73:bb:c6:41:30:a3:83:bb:f0:37:b7:da:d8:87:
40:3b:32:92:d1:ec:b3:4c:a7:5c:86:5a:24:3c:e2:20:b0:e2:
98:45:54:a1:47:45:b8:4d:04:13:aa:e0:3e:14:bb:2e:55:61:
8b:26:c9:c3:8b:d6:3f:46:6f:86:4a:1a:75:c8:bf:d0:0d:96:
b4:58:a9:54:bf:3c:65:d0:7d:fe:7f:f4:9e:66:7a:a3:a8:39:
4f:f6:e8:75:7a:55:80:a5:7f:97:21:fb:da:49:55:a5:a1:34:
06:f7:a7:76:60:a9:21:00:fc:14:d8:9b:18:dc:0c:d0:5d:e1:
e0:4b:5c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:16:41 2025 by rpki-client