Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/54YZLFfQTtdtKQTXNV_vCc9pRQc.roa
File: 54YZLFfQTtdtKQTXNV_vCc9pRQc.roa (raw, json)
Hash identifier: Q097sEG/tVqfzt58HSoAVC6EIFd3hWWbatqTDySeYEM=
Subject key identifier: E7:86:19:2C:57:D0:4E:D7:6D:29:04:D7:35:5F:EF:09:CF:69:45:07
Certificate issuer: /CN=206f1c32bc0a9006081d552fede67d6842921ec3
Certificate serial: 01968CA428B1AA7455E6E0DC87C81510602F
Authority key identifier: 20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/54YZLFfQTtdtKQTXNV_vCc9pRQc.roa
Signing time: Thu 01 May 2025 16:18:10 +0000
ROA not before: Thu 01 May 2025 16:18:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3170
IP address blocks: 83.97.16.0/22 maxlen: 24
91.240.224.0/24 maxlen: 24
185.17.196.0/22 maxlen: 24
185.175.90.0/24 maxlen: 24
188.64.34.0/23 maxlen: 24
188.64.36.0/22 maxlen: 24
193.35.56.0/22 maxlen: 24
193.105.188.0/24 maxlen: 24
194.69.165.0/24 maxlen: 24
195.74.52.0/22 maxlen: 24
195.144.8.0/24 maxlen: 24
195.191.218.0/23 maxlen: 24
2a03:ee40::/32 maxlen: 32
2a07:240::/29 maxlen: 48
2a10:4740::/29 maxlen: 48
2a11:2640::/32 maxlen: 32
2a11:2641::/32 maxlen: 32
2a11:2647::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 15:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8c:a4:28:b1:aa:74:55:e6:e0:dc:87:c8:15:10:60:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206f1c32bc0a9006081d552fede67d6842921ec3
Validity
Not Before: May 1 16:18:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e786192c57d04ed76d2904d7355fef09cf694507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:27:35:47:e8:45:c6:26:5c:06:f3:be:4c:e5:
cb:e7:d5:73:82:2a:4b:c0:71:c7:4f:73:9b:04:58:
04:eb:71:a9:fa:71:99:cf:a8:cf:01:bf:50:c3:ed:
97:8b:c0:ab:ca:e9:a7:d9:25:57:cd:99:b2:27:18:
8e:e6:ea:a0:58:1b:3a:8b:42:27:b4:fc:59:b7:77:
68:f2:63:55:28:df:b5:38:36:25:dc:69:08:ae:ca:
ad:76:a1:89:e9:50:56:10:84:cc:d0:c9:d2:77:05:
c0:90:f1:be:e3:25:aa:0a:46:bd:89:97:1f:77:82:
1b:2f:76:f6:df:d8:13:54:82:76:a2:e8:05:23:ee:
1a:2a:63:a8:55:52:ac:b2:14:35:82:29:3d:f9:0b:
e8:d9:0b:85:fb:d6:10:c2:d8:4d:7e:ea:2b:fb:99:
0b:58:6b:bf:05:98:3d:87:ad:ed:6a:63:db:6a:2b:
c1:fd:44:69:ed:9b:fa:76:09:b3:12:e9:69:5c:78:
79:b5:73:b6:c1:28:ee:28:58:87:0f:96:fc:fb:17:
e3:ee:af:67:d9:c2:26:96:c4:b7:c0:c9:63:19:36:
97:b6:34:75:e6:5f:50:e0:16:ec:0b:29:69:14:76:
68:dd:fa:51:f3:4c:ff:c0:20:24:18:a2:50:1f:09:
4d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:86:19:2C:57:D0:4E:D7:6D:29:04:D7:35:5F:EF:09:CF:69:45:07
X509v3 Authority Key Identifier:
keyid:20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/54YZLFfQTtdtKQTXNV_vCc9pRQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.97.16.0/22
91.240.224.0/24
185.17.196.0/22
185.175.90.0/24
188.64.34.0-188.64.39.255
193.35.56.0/22
193.105.188.0/24
194.69.165.0/24
195.74.52.0/22
195.144.8.0/24
195.191.218.0/23
IPv6:
2a03:ee40::/32
2a07:240::/29
2a10:4740::/29
2a11:2640::/31
2a11:2647::/32
Signature Algorithm: sha256WithRSAEncryption
2c:60:6b:e1:04:00:eb:f4:38:09:12:2e:55:a6:bc:39:50:e6:
40:bf:59:72:05:8b:93:86:7e:de:3c:61:de:b0:91:68:d9:02:
b2:2b:7f:e4:03:fb:82:79:8e:f0:df:1d:6e:6e:d2:4f:9c:da:
0d:58:3e:0c:48:f4:6c:c9:04:fc:80:4c:a9:02:43:b7:d0:4d:
81:39:8f:a2:81:77:c2:b2:71:1b:e5:d6:69:27:46:cb:b4:b0:
f1:e7:51:db:62:b2:f6:c5:50:bf:62:37:f7:34:9c:0d:5f:b7:
38:b7:51:a8:d6:2d:2f:bb:cd:b7:6a:ba:bb:b3:01:69:73:58:
82:a9:6a:10:22:b1:99:c9:4e:64:37:b2:80:5c:b5:91:82:19:
70:48:e0:90:92:42:91:c0:79:85:37:e0:68:cc:32:3c:4e:8c:
89:8c:9d:d1:1f:08:79:10:e9:83:fa:34:56:3e:ec:b1:06:d6:
bb:f6:c8:e5:1a:b1:43:b5:07:c0:cd:cf:87:00:9c:6f:d9:2a:
b2:e5:cf:03:72:55:39:d6:c7:89:e8:31:be:29:23:fb:4a:39:
bc:e8:ad:36:4d:07:8c:1d:09:9a:62:45:f5:5d:49:e4:ea:cc:
96:8f:cf:e1:6b:57:6f:85:8c:98:0b:ef:c7:da:ee:bc:74:6e:
f6:d7:d9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:00:33 2025 by rpki-client