Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/NOVPbDKVr5wjUcGbKvJrJzmVhnw.roa
File: NOVPbDKVr5wjUcGbKvJrJzmVhnw.roa (raw, json)
Hash identifier: wYz2fmfXZeLSC/FkxxCfmscRdqW9p4YQgw0dEkDtFvo=
Subject key identifier: 34:E5:4F:6C:32:95:AF:9C:23:51:C1:9B:2A:F2:6B:27:39:95:86:7C
Certificate issuer: /CN=1c0a6f6f3a9ae1da5e5be8752fab18deb28ba614
Certificate serial: 0196EC95032923089A658D83F99943F582B9
Authority key identifier: 1C:0A:6F:6F:3A:9A:E1:DA:5E:5B:E8:75:2F:AB:18:DE:B2:8B:A6:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/NOVPbDKVr5wjUcGbKvJrJzmVhnw.roa
Signing time: Tue 20 May 2025 07:25:10 +0000
ROA not before: Tue 20 May 2025 07:25:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50673
IP address blocks: 91.205.192.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ec:95:03:29:23:08:9a:65:8d:83:f9:99:43:f5:82:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c0a6f6f3a9ae1da5e5be8752fab18deb28ba614
Validity
Not Before: May 20 07:25:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34e54f6c3295af9c2351c19b2af26b273995867c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dc:d3:1d:37:16:2c:fd:4a:25:ed:8d:dd:ee:
33:69:6d:e4:16:8d:0f:a0:e0:ff:22:dc:10:31:b2:
6f:cc:ab:f0:59:5e:d7:33:64:11:a8:26:4e:fe:95:
55:5b:ff:a9:af:75:25:1d:5e:10:20:e6:7e:d8:d2:
82:92:35:0d:4c:f1:c1:38:f9:fa:46:ee:b2:16:d7:
f9:60:97:3e:0b:7b:fd:9a:32:d6:78:39:0f:ec:88:
56:11:c2:c5:c8:79:5e:ea:43:d0:bf:9d:f0:35:1f:
68:54:14:09:07:03:03:30:c2:29:53:23:54:47:f3:
c4:4c:69:7d:fd:1a:12:e7:d7:54:d3:61:76:3d:64:
ee:bf:e5:e0:5f:01:04:c9:4c:12:c3:f0:3c:b5:9d:
c4:97:dd:a5:0a:6a:ab:e8:95:0c:4f:ab:51:6c:16:
6d:92:8d:ac:7d:cf:ce:21:32:3f:31:22:23:5a:6c:
94:13:f1:31:c3:00:12:5a:50:f6:9e:9f:ad:ac:34:
6f:21:f5:ea:e9:b4:32:3d:96:b7:1b:fd:d3:6d:ee:
7c:37:36:5c:91:4a:4e:0e:20:b9:b3:12:5c:15:86:
e9:39:a5:3f:47:3d:b3:c0:a6:c8:ec:b6:55:85:50:
a4:06:dc:40:3a:29:2f:df:54:2e:61:29:60:89:95:
f6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E5:4F:6C:32:95:AF:9C:23:51:C1:9B:2A:F2:6B:27:39:95:86:7C
X509v3 Authority Key Identifier:
keyid:1C:0A:6F:6F:3A:9A:E1:DA:5E:5B:E8:75:2F:AB:18:DE:B2:8B:A6:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/NOVPbDKVr5wjUcGbKvJrJzmVhnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.192.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:4e:95:31:6a:4d:b9:15:ce:76:b1:49:f3:82:da:57:94:f0:
6f:ea:ed:0b:d7:07:97:1e:78:1b:f3:2c:51:0f:01:c6:06:55:
f0:30:24:05:c5:ea:5b:86:63:73:79:03:0b:52:27:f6:fd:06:
64:b9:2f:f7:ed:bf:4c:0d:e6:0d:5d:f0:b5:61:38:72:d3:b2:
5d:c5:69:b1:52:42:ae:88:bb:50:69:03:31:0f:0a:31:1c:be:
a2:60:5c:1a:06:59:4d:f0:fb:65:b1:1d:bf:99:6c:09:53:1e:
54:02:01:38:0d:81:4e:ba:a4:04:79:3d:3c:75:53:b6:32:43:
0f:b6:67:79:56:66:f6:f9:8d:ae:1c:34:49:54:b8:4f:3b:f4:
bb:6f:ab:37:39:32:0e:95:e5:c7:e1:01:bc:c7:c7:d9:02:1b:
dd:89:3b:13:2e:bf:03:35:39:dc:8b:24:de:a1:d6:31:67:bf:
ab:b9:64:de:27:13:c3:a2:e9:c0:5f:54:d2:eb:80:c2:58:9b:
87:59:54:23:d7:0a:b4:c8:2a:14:6b:1a:81:82:c4:20:68:3e:
a2:3b:11:78:d9:b3:1b:77:2d:2b:b1:a4:7e:11:0c:dc:52:aa:
25:50:83:8b:c7:6f:04:6a:f0:ea:f1:ca:ea:9f:30:f6:d1:7d:
ba:48:66:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:05:18 2025 by rpki-client