Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/pBOV7_scguiJteXj3vNSqNhNc5U.roa
File: pBOV7_scguiJteXj3vNSqNhNc5U.roa (raw, json)
Hash identifier: vCrIj0wpM69dzNSkAC34US2sC7UYedyyZzr33rt/1E0=
Subject key identifier: A4:13:95:EF:FB:1C:82:E8:89:B5:E5:E3:DE:F3:52:A8:D8:4D:73:95
Certificate issuer: /CN=886faf1820074b79b6025ddffab25cb3f774424e
Certificate serial: 01961FE26179F9970E2463051BFD35EE3D85
Authority key identifier: 88:6F:AF:18:20:07:4B:79:B6:02:5D:DF:FA:B2:5C:B3:F7:74:42:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/pBOV7_scguiJteXj3vNSqNhNc5U.roa
Signing time: Thu 10 Apr 2025 13:27:31 +0000
ROA not before: Thu 10 Apr 2025 13:27:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211924
IP address blocks: 89.36.21.0/24 maxlen: 24
195.138.53.0/24 maxlen: 24
2a14:8c80::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1f:e2:61:79:f9:97:0e:24:63:05:1b:fd:35:ee:3d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=886faf1820074b79b6025ddffab25cb3f774424e
Validity
Not Before: Apr 10 13:27:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a41395effb1c82e889b5e5e3def352a8d84d7395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8f:c4:c4:e8:ad:f3:e2:33:b5:6c:79:8a:0a:
1e:6f:4b:81:a3:40:4a:4c:e3:39:0e:17:67:3a:26:
20:0c:3a:19:ae:88:72:a6:d3:c6:9e:c5:29:f4:a3:
5d:a5:db:6c:2f:1c:bf:8d:10:35:74:42:06:48:46:
72:e8:c3:0d:e8:43:6d:79:d6:ab:73:09:bc:d1:b9:
7b:e1:f6:9f:e1:fc:35:07:b7:10:07:5e:7b:e8:a9:
08:dd:d2:63:06:7b:74:2b:65:05:c8:61:cc:07:3d:
71:a0:88:1e:d0:09:84:f7:fa:45:30:34:4c:1e:86:
a0:1a:46:f7:bf:7f:de:e3:65:e9:58:0d:84:36:7a:
f9:71:b2:7f:40:ef:a8:4b:8c:44:c6:9d:1a:38:d7:
c4:9a:16:4e:fb:31:f9:21:7f:fb:36:1d:0d:2f:ec:
5b:ce:2e:4a:37:ac:bb:1b:9f:f4:24:89:a9:a1:c6:
bf:fa:7c:d5:ef:dd:b4:68:97:e7:cc:d4:f4:66:8c:
bd:be:53:63:6b:e4:ea:cd:a3:cc:b1:98:72:22:ce:
c2:cf:26:38:69:a4:16:7c:7f:2f:e5:9c:f7:76:c7:
b3:66:e4:2c:09:11:5b:df:bd:4d:54:22:cb:86:73:
3d:10:bc:ae:7f:05:b6:3e:a9:0b:ba:33:b6:9b:c2:
45:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:13:95:EF:FB:1C:82:E8:89:B5:E5:E3:DE:F3:52:A8:D8:4D:73:95
X509v3 Authority Key Identifier:
keyid:88:6F:AF:18:20:07:4B:79:B6:02:5D:DF:FA:B2:5C:B3:F7:74:42:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/pBOV7_scguiJteXj3vNSqNhNc5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.36.21.0/24
195.138.53.0/24
IPv6:
2a14:8c80::/32
Signature Algorithm: sha256WithRSAEncryption
01:46:f7:a4:e4:af:46:0a:13:58:d0:5f:08:95:50:43:c6:76:
20:1f:ba:c0:90:bc:eb:46:d2:77:91:01:e5:41:41:bc:aa:9d:
ba:61:c7:0d:40:52:02:30:45:ac:71:8a:4f:81:aa:a7:dd:62:
4f:00:62:0a:10:1e:9f:ef:d4:f4:15:81:d4:7b:d6:15:87:80:
bd:9c:55:42:19:eb:b2:db:08:ea:42:25:35:9b:0d:6f:c5:4c:
59:de:ad:2a:40:8a:e3:ec:ee:52:33:2f:77:d4:b2:50:ee:53:
09:e7:a3:37:a2:8d:5e:df:6e:47:0e:c8:d8:cf:9b:81:31:3a:
4a:ee:e7:4f:6a:35:6d:07:1a:ad:d6:88:b9:21:d1:64:98:30:
c0:0c:a0:a5:16:54:bc:70:35:c4:80:f5:a0:87:a4:86:4d:c6:
17:d8:b8:22:9d:eb:56:21:9d:7c:b0:d5:1b:fe:ea:3f:ae:35:
d9:9b:51:28:3b:be:09:cf:12:a0:06:25:35:e5:3f:69:70:d4:
b1:e4:b0:28:20:ae:21:03:c8:56:3b:94:50:e3:8b:a9:0e:15:
85:b8:bf:0a:71:48:33:d0:f2:2e:3c:1b:ff:60:cb:2d:8e:65:
87:8f:f2:10:a7:c7:3c:cc:69:39:e6:43:bf:34:9d:2f:85:62:
ab:ed:f0:27
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZYf4mF5+ZcOJGMFG/017j2FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NmZhZjE4MjAwNzRiNzliNjAyNWRkZmZhYjI1Y2IzZjc3
NDQyNGUwHhcNMjUwNDEwMTMyNzMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDEzOTVlZmZiMWM4MmU4ODliNWU1ZTNkZWYzNTJhOGQ4NGQ3Mzk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkI/ExOit8+IztWx5igoeb0uBo0BK
TOM5DhdnOiYgDDoZrohyptPGnsUp9KNdpdtsLxy/jRA1dEIGSEZy6MMN6ENtedar
cwm80bl74faf4fw1B7cQB1576KkI3dJjBnt0K2UFyGHMBz1xoIge0AmE9/pFMDRM
HoagGkb3v3/e42XpWA2ENnr5cbJ/QO+oS4xExp0aONfEmhZO+zH5IX/7Nh0NL+xb
zi5KN6y7G5/0JImpoca/+nzV7920aJfnzNT0Zoy9vlNja+TqzaPMsZhyIs7CzyY4
aaQWfH8v5Zz3dsezZuQsCRFb371NVCLLhnM9ELyufwW2PqkLujO2m8JFpwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFKQTle/7HILoibXl497zUqjYTXOVMB8GA1UdIwQY
MBaAFIhvrxggB0t5tgJd3/qyXLP3dEJOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUctdkdDQUhTM20yQWwzZi1ySmNzX2QwUWs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8wNmQwZWEtMTk2Ny00Y2ZmLTkzYjct
YTU4ZjhjZWM0YjUxLzEvcEJPVjdfc2NndWlKdGVYajN2TlNxTmhOYzVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8wNmQwZWEtMTk2Ny00Y2ZmLTkzYjctYTU4ZjhjZWM0YjUx
LzEvaUctdkdDQUhTM20yQWwzZi1ySmNzX2QwUWs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAWSQVAwQA
w4o1MA0EAgACMAcDBQAqFIyAMA0GCSqGSIb3DQEBCwUAA4IBAQABRvek5K9GChNY
0F8IlVBDxnYgH7rAkLzrRtJ3kQHlQUG8qp26YccNQFICMEWscYpPgaqn3WJPAGIK
EB6f79T0FYHUe9YVh4C9nFVCGeuy2wjqQiU1mw1vxUxZ3q0qQIrj7O5SMy931LJQ
7lMJ56M3oo1e325HDsjYz5uBMTpK7udPajVtBxqt1oi5IdFkmDDADKClFlS8cDXE
gPWgh6SGTcYX2LginetWIZ18sNUb/uo/rjXZm1EoO74JzxKgBiU15T9pcNSx5LAo
IK4hA8hWO5RQ44upDhWFuL8KcUgz0PIuPBv/YMstjmWHj/IQp8c8zGk55kO/NJ0v
hWKr7fAn
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:14:41 2025 by rpki-client