Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/obe04FJWUoCw7A2AhMGVvIb9Smw.roa
File: obe04FJWUoCw7A2AhMGVvIb9Smw.roa (raw, json)
Hash identifier: nK6duh1DRPYXoQE/lOIqfECVU8xvobqjI5rqa0zmKYc=
Subject key identifier: A1:B7:B4:E0:52:56:52:80:B0:EC:0D:80:84:C1:95:BC:86:FD:4A:6C
Certificate issuer: /CN=5f3a6c21941c1e13bffc4d44d61bd2595fdd8fe8
Certificate serial: 0196A6DF8C649F215BDA970677768781261E
Authority key identifier: 5F:3A:6C:21:94:1C:1E:13:BF:FC:4D:44:D6:1B:D2:59:5F:DD:8F:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/obe04FJWUoCw7A2AhMGVvIb9Smw.roa
Signing time: Tue 06 May 2025 18:33:10 +0000
ROA not before: Tue 06 May 2025 18:33:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215082
IP address blocks: 91.233.120.0/24 maxlen: 24
194.104.235.0/24 maxlen: 24
2a14:3ec0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:df:8c:64:9f:21:5b:da:97:06:77:76:87:81:26:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f3a6c21941c1e13bffc4d44d61bd2595fdd8fe8
Validity
Not Before: May 6 18:33:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1b7b4e052565280b0ec0d8084c195bc86fd4a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b0:67:33:83:3a:7a:97:8b:e6:11:ec:f5:19:
f6:98:3c:36:af:5b:18:5f:69:b0:98:bf:f1:54:0f:
d8:28:6d:04:35:21:a7:1f:d2:67:22:75:67:71:bf:
23:f2:cf:47:25:f2:cf:1f:87:c2:45:b2:52:20:41:
8a:53:e2:5a:f5:2d:55:42:49:1d:02:29:78:4d:c7:
0e:8e:be:b1:ab:1c:ed:56:1d:34:7e:17:d4:db:22:
c7:f2:b6:7f:fb:19:61:5f:2f:5b:07:1a:d2:0f:ce:
82:88:57:50:58:ae:11:df:9a:8a:3c:bf:e9:75:12:
be:54:57:69:0f:d5:5b:b8:ea:4b:1c:97:2a:7e:82:
1b:8f:90:b9:4b:ad:76:97:d0:8d:07:33:9b:a8:6a:
90:18:62:de:3d:24:e1:74:1d:6a:c0:a9:70:9a:72:
96:9e:4a:87:4f:5a:0f:99:27:93:18:dd:62:5b:44:
2c:20:1a:22:f3:4f:d8:12:ad:9e:f4:ff:dc:7b:f8:
79:ed:46:32:0f:4c:4f:9e:a3:2a:0b:7a:bd:79:f3:
e9:d3:46:ad:10:3e:41:a4:63:fc:e8:3d:16:b4:88:
d7:0e:da:b6:9a:3a:6a:32:0d:84:a2:cd:27:6f:e6:
da:97:9c:d2:17:57:c4:d8:2a:e0:f4:9c:82:6e:4c:
d8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B7:B4:E0:52:56:52:80:B0:EC:0D:80:84:C1:95:BC:86:FD:4A:6C
X509v3 Authority Key Identifier:
keyid:5F:3A:6C:21:94:1C:1E:13:BF:FC:4D:44:D6:1B:D2:59:5F:DD:8F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/obe04FJWUoCw7A2AhMGVvIb9Smw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.120.0/24
194.104.235.0/24
IPv6:
2a14:3ec0::/48
Signature Algorithm: sha256WithRSAEncryption
1c:38:21:1c:e9:dc:01:a8:5c:46:de:c5:53:e7:e8:be:91:69:
80:3d:87:93:99:d7:53:b8:e6:52:0e:77:48:a7:d8:d4:24:bd:
56:26:ee:ca:5a:d6:09:44:09:80:37:eb:f5:38:23:1d:42:a9:
3e:53:62:d3:af:58:05:7f:1a:fe:f5:0d:f3:83:12:1b:d3:69:
b9:bd:6d:58:6e:78:98:f4:08:d7:bb:c7:cd:e7:53:48:c1:af:
36:cd:36:29:2c:a0:d7:01:66:17:6d:71:91:ed:bf:77:d0:f3:
54:52:87:a3:e4:57:01:74:3e:44:09:4b:e6:f1:0a:69:c5:60:
88:f4:5e:9e:14:40:fc:da:e9:90:58:a5:c2:a6:3b:e5:00:c6:
b0:4b:ef:ff:75:70:a4:97:ae:94:0d:82:6e:a0:dd:e9:d2:57:
c1:4c:de:64:37:36:fe:4d:64:21:a6:d1:10:74:eb:7a:7a:68:
78:53:fa:56:cc:cd:90:e1:4f:39:4a:2e:6f:3c:4b:aa:3f:b3:
db:59:17:5b:19:fa:18:87:e3:d2:39:ee:1a:92:21:91:13:3c:
0e:ed:17:84:7e:68:97:56:42:a7:1f:05:29:64:5a:33:cc:c4:
fa:ef:ef:e7:70:56:6d:2e:c7:b3:b1:da:4d:5f:b9:8a:28:bf:
8e:8c:3d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 00:11:02 2025 by rpki-client