Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/9Bu5AeHVju_wmYRkinISjJCoHko.roa
File: 9Bu5AeHVju_wmYRkinISjJCoHko.roa (raw, json)
Hash identifier: 7WEPMOQ4DXoiRUiaJKbBPpQnxOkhh3m6eWGCmCtQyfU=
Subject key identifier: F4:1B:B9:01:E1:D5:8E:EF:F0:99:84:64:8A:72:12:8C:90:A8:1E:4A
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 0197596F064187258C008311B460400BE8B4
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/9Bu5AeHVju_wmYRkinISjJCoHko.roa
Signing time: Tue 10 Jun 2025 10:42:17 +0000
ROA not before: Tue 10 Jun 2025 10:42:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14163
IP address blocks: 213.152.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:6f:06:41:87:25:8c:00:83:11:b4:60:40:0b:e8:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Jun 10 10:42:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f41bb901e1d58eeff09984648a72128c90a81e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:52:bf:aa:51:39:32:63:d1:9c:d1:70:5f:34:
38:2e:66:5d:5d:36:9c:cc:42:16:ff:f5:2c:1c:22:
cf:78:4c:19:96:da:bf:33:c0:2b:33:47:cc:27:18:
51:24:4e:18:e1:0f:a4:e5:f7:42:66:65:a7:b5:56:
ad:1f:19:21:a2:79:17:8f:27:b5:ea:75:2b:c0:77:
b5:e0:e0:3f:49:fe:e0:04:e2:e6:f1:11:0e:aa:1d:
0d:52:f0:af:5a:53:c5:5a:da:6e:0e:0b:39:20:4f:
0e:14:73:10:e9:bb:21:12:64:5e:12:42:90:ed:12:
34:6d:d4:e7:3a:4b:9f:b7:23:da:02:76:cc:e0:53:
d6:80:b6:ab:4e:92:bc:14:90:fa:0a:31:a9:4c:a6:
b2:f7:94:ba:63:72:64:31:9a:59:6d:da:40:3f:55:
ad:76:6d:83:0c:80:f9:e6:8d:a9:07:4d:9c:9f:82:
ac:71:35:e0:fb:5d:29:64:f5:b7:41:1a:cc:4a:b9:
de:1a:ad:b4:49:49:51:f9:51:06:a5:58:14:1a:4f:
b0:06:67:ee:3e:aa:8c:85:81:b8:31:af:cf:04:16:
31:25:6c:5b:9d:75:6b:42:e4:5f:28:de:a0:1e:98:
ef:32:79:ee:a7:b5:f9:d9:22:27:be:05:3d:ac:7b:
70:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1B:B9:01:E1:D5:8E:EF:F0:99:84:64:8A:72:12:8C:90:A8:1E:4A
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/9Bu5AeHVju_wmYRkinISjJCoHko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.152.229.0/24
Signature Algorithm: sha256WithRSAEncryption
80:55:74:e4:78:5e:26:0f:e5:be:6a:27:b1:26:15:84:c1:7d:
de:a1:af:f2:c5:f9:6d:20:49:fa:c4:41:78:41:e0:ca:52:c2:
85:57:ea:01:10:d1:16:75:c6:7e:ab:a6:e7:4f:6c:fc:04:e3:
e4:fe:83:59:e3:04:e2:64:17:37:c4:00:4d:0c:a8:38:34:46:
22:b0:98:a8:9a:f9:93:b9:49:ca:32:b4:cb:97:7f:5e:e3:2d:
de:cd:13:ba:88:2a:e5:66:f7:e8:78:63:86:4f:93:08:1e:0f:
d0:a5:5d:2a:f1:41:b5:4d:ed:f1:31:88:48:41:51:81:fc:a1:
0e:6b:4c:04:4f:96:a7:90:59:9c:23:02:fc:58:e0:32:52:b9:
50:2f:ec:40:6e:06:1b:cb:26:59:de:1d:3a:04:17:3a:fb:97:
86:67:f2:d8:24:89:fc:bd:1c:37:bf:4f:b0:c7:89:24:cb:2d:
26:89:53:02:28:00:4d:45:69:dc:4a:92:c5:c2:13:79:09:89:
75:3b:81:d6:67:f1:dd:f6:bc:ad:ae:90:98:8f:22:f0:1f:5e:
38:49:06:d9:81:47:d0:ba:d3:e8:f9:6b:a0:ba:95:a8:db:97:
ed:30:37:5f:1d:12:be:24:b8:93:a7:71:95:73:9a:20:c4:23:
6b:57:9f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:12:05 2025 by rpki-client