Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/91OWvN-6lcl5Fjzg5TvE5yYe_W4.roa
File: 91OWvN-6lcl5Fjzg5TvE5yYe_W4.roa (raw, json)
Hash identifier: Sivu4JLd/Px8fxeRF7CLCRjdAgN7VlKHUjwBf43gaK0=
Subject key identifier: F7:53:96:BC:DF:BA:95:C9:79:16:3C:E0:E5:3B:C4:E7:26:1E:FD:6E
Certificate issuer: /CN=4aae738ee1782735939a4fb0d672a6317b7f5243
Certificate serial: 0196B50F71AF2AD4C997CAAEACB0D52707CC
Authority key identifier: 4A:AE:73:8E:E1:78:27:35:93:9A:4F:B0:D6:72:A6:31:7B:7F:52:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/91OWvN-6lcl5Fjzg5TvE5yYe_W4.roa
Signing time: Fri 09 May 2025 12:40:10 +0000
ROA not before: Fri 09 May 2025 12:40:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 680
IP address blocks: 141.25.0.0/16 maxlen: 16
192.53.103.0/24 maxlen: 24
192.129.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:0f:71:af:2a:d4:c9:97:ca:ae:ac:b0:d5:27:07:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aae738ee1782735939a4fb0d672a6317b7f5243
Validity
Not Before: May 9 12:40:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f75396bcdfba95c979163ce0e53bc4e7261efd6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2f:61:00:43:83:b6:02:4e:98:dc:24:4b:02:
33:38:6b:39:bd:b0:a9:04:7e:b6:a7:4a:cc:26:f7:
68:58:a3:2a:19:d5:f6:0b:48:83:37:c1:ad:ed:5d:
c6:ec:91:6f:15:89:76:7d:fc:09:74:53:de:99:b7:
4d:98:7e:9a:4b:b0:c4:88:f0:8c:da:49:59:f7:ec:
a3:0a:66:30:7c:20:54:12:1c:fb:1d:bd:85:20:19:
b7:69:15:fe:d1:31:18:8b:a6:72:77:28:b5:dc:d9:
43:20:68:cc:a1:57:41:3d:23:7c:77:bb:75:1c:2f:
06:8b:57:97:79:e9:cc:fd:70:6a:89:21:dc:13:08:
3b:fd:4c:e4:50:9e:8a:01:af:50:76:5a:96:9e:00:
af:a2:8d:18:45:ad:83:6b:22:bc:dc:d6:0c:f2:9f:
c2:16:d4:f5:3c:a6:16:51:6c:82:73:bb:23:3f:e6:
8b:fe:9e:51:f2:c0:18:bb:c7:81:1d:6c:60:e8:36:
96:9d:64:ce:3a:de:6d:ac:97:6f:a6:38:6a:6f:21:
bf:49:1c:bd:6f:5e:d7:1e:36:ae:36:6f:52:f1:d7:
1f:36:3a:a0:f8:12:fa:fd:11:c0:8f:b9:29:ce:6e:
5d:30:9a:56:ef:73:4b:e4:38:e6:1e:46:7f:f7:40:
05:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:53:96:BC:DF:BA:95:C9:79:16:3C:E0:E5:3B:C4:E7:26:1E:FD:6E
X509v3 Authority Key Identifier:
keyid:4A:AE:73:8E:E1:78:27:35:93:9A:4F:B0:D6:72:A6:31:7B:7F:52:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/91OWvN-6lcl5Fjzg5TvE5yYe_W4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.25.0.0/16
192.53.103.0/24
192.129.51.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:bd:df:a3:a8:fd:4b:cf:9a:46:28:ba:19:4a:76:df:a8:ad:
bb:2d:a5:ff:dd:3d:a7:4e:34:86:c5:83:91:54:f6:20:5f:2e:
12:63:f2:3f:37:41:23:91:5e:31:87:ea:8e:19:b5:0b:26:ed:
8a:d8:31:99:01:26:f0:9f:4b:84:8a:09:cc:6f:4a:da:7d:44:
24:ff:ba:91:c4:ed:47:30:4b:0c:a6:63:3e:2a:f5:11:2c:c0:
31:bd:18:c5:c2:3e:08:b0:e0:0d:0c:b4:58:88:4d:c1:a8:b7:
83:2f:17:49:5d:cf:dc:c6:79:de:b6:22:37:18:2d:d7:d4:05:
6e:2d:6f:fd:40:97:a0:7a:e4:69:dc:a6:27:b2:1b:4f:fc:7d:
85:f9:66:f0:15:dc:06:52:1d:a3:b7:6d:d2:7b:b9:a5:c4:7d:
0f:16:1e:d8:05:6d:79:9f:95:5e:e4:be:a4:be:55:2a:1c:62:
1e:06:22:91:ee:95:df:31:f5:fe:aa:1f:2c:2d:92:21:0d:b2:
4f:59:e7:fd:71:4c:35:b9:37:17:5d:17:d1:26:85:0b:5d:72:
91:c8:e2:49:e5:cf:6f:c6:4e:11:ca:7c:29:d8:35:0b:5a:18:
50:50:10:c7:53:0b:62:61:47:16:ea:f2:d0:d1:5a:d3:fa:ca:
95:b8:bf:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:23:57 2025 by rpki-client