Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/CJvoWnaR2bDBM3uwknntcn2bVMA.roa
File: CJvoWnaR2bDBM3uwknntcn2bVMA.roa (raw, json)
Hash identifier: Fb5QqnBE+SmiT0K9fxFnS2c5V8bamOheKNBY72WLunI=
Subject key identifier: 08:9B:E8:5A:76:91:D9:B0:C1:33:7B:B0:92:79:ED:72:7D:9B:54:C0
Certificate issuer: /CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Certificate serial: 0196AE91C3040A309C7FD67C140A8F6CBA0D
Authority key identifier: 50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/CJvoWnaR2bDBM3uwknntcn2bVMA.roa
Signing time: Thu 08 May 2025 06:25:10 +0000
ROA not before: Thu 08 May 2025 06:25:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204528
IP address blocks: 81.199.3.0/24 maxlen: 24
81.199.15.0/24 maxlen: 24
81.199.20.0/24 maxlen: 24
81.199.94.0/24 maxlen: 24
81.199.97.0/24 maxlen: 24
81.199.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:91:c3:04:0a:30:9c:7f:d6:7c:14:0a:8f:6c:ba:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Validity
Not Before: May 8 06:25:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=089be85a7691d9b0c1337bb09279ed727d9b54c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:46:43:55:d5:1f:a3:43:40:e8:53:d0:2a:70:
c5:7b:ea:38:9b:19:9d:20:d8:e6:e7:f7:2a:dd:83:
97:71:b0:85:41:29:23:ce:2c:b7:45:4c:2a:f1:c4:
b8:89:a3:3b:c7:ff:a0:2d:27:ed:5d:98:5d:e7:ba:
2e:8a:72:dc:6d:36:a5:19:61:10:66:eb:45:12:0a:
f4:59:8a:0d:fe:5d:f8:db:a2:84:a8:df:c3:c6:1b:
67:95:53:70:66:c2:bc:6d:16:68:00:3d:2d:a4:a4:
1e:8d:16:73:76:74:6d:e3:af:b5:c2:c0:df:27:e4:
cb:7d:bf:6e:1e:85:46:79:9c:30:e9:ea:19:ca:1d:
c3:90:f3:6f:76:e8:dc:38:dd:bc:d7:7c:a9:bb:61:
60:03:9f:ba:a1:5b:d8:44:74:d2:e6:06:1b:7a:40:
d1:c0:59:f2:c5:05:9c:5a:11:bc:b7:f0:82:bb:c4:
b8:8e:12:cc:e3:6e:db:ce:76:55:6c:37:48:e7:38:
c4:fd:a0:42:58:c2:c6:c8:25:0c:cf:fe:c7:85:df:
b4:b6:cc:15:87:b6:d3:83:68:21:3b:93:fe:1c:ec:
e0:e9:47:d9:9b:66:42:ba:52:a4:67:47:eb:43:79:
f3:3d:dc:ce:ce:7a:b8:64:a1:73:3b:78:75:5b:fb:
7d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:9B:E8:5A:76:91:D9:B0:C1:33:7B:B0:92:79:ED:72:7D:9B:54:C0
X509v3 Authority Key Identifier:
keyid:50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/CJvoWnaR2bDBM3uwknntcn2bVMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.199.3.0/24
81.199.15.0/24
81.199.20.0/24
81.199.94.0/24
81.199.97.0/24
81.199.201.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:41:3f:4b:d2:b9:7c:b0:d3:27:72:80:f0:32:61:a5:bd:6d:
37:fa:69:b9:7b:00:5c:2e:75:29:a1:da:d3:7c:5e:b3:a1:7b:
19:e7:57:0e:10:b5:94:41:2e:dd:59:4c:b5:3c:a1:1c:9e:da:
34:8b:7a:34:e7:bd:4e:64:80:47:d7:61:a0:14:5f:01:2c:4d:
86:13:85:80:3e:97:2f:ed:9d:53:bf:d5:7c:57:bf:02:fb:76:
33:0d:01:56:5c:bb:56:ea:c9:59:ae:b9:eb:f8:00:de:8e:f1:
50:b6:0f:74:4d:ec:11:cb:da:e1:a7:e8:e6:f3:a6:6c:8b:46:
e7:d8:45:25:46:b5:86:9e:27:dd:c0:7d:3d:04:94:f8:34:85:
df:0d:09:70:db:f7:15:02:77:14:86:f0:ac:cc:5c:60:15:45:
39:de:b5:ad:80:7b:45:4e:70:0b:39:48:6a:02:9a:ef:7b:96:
02:5a:33:f7:ff:cd:91:8b:0e:aa:19:25:dc:b7:a3:3d:b0:88:
cf:62:ed:57:2d:50:ad:88:96:c5:b9:9e:cb:19:c0:e8:83:2d:
f4:8f:aa:91:1a:dd:c5:4e:27:5b:e2:43:fb:0e:b8:8b:fc:89:
b9:18:33:d1:12:c4:40:c0:36:1f:dd:dd:44:a5:8c:f8:0d:00:
71:d1:60:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 18:52:44 2025 by rpki-client