Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/CrnwsA95yJmVEXlbmftIErRDbX8.roa
File: CrnwsA95yJmVEXlbmftIErRDbX8.roa (raw, json)
Hash identifier: 26F3HVvHxyFlycTNtQI23gW/r6OOmym9z31epdFUdl0=
Subject key identifier: 0A:B9:F0:B0:0F:79:C8:99:95:11:79:5B:99:FB:48:12:B4:43:6D:7F
Certificate issuer: /CN=a19521c7352d1cac3f98c756fc7a6b4b3ae9753d
Certificate serial: 019768FDCEC37449CFD6A0F98ADFDDD03DD9
Authority key identifier: A1:95:21:C7:35:2D:1C:AC:3F:98:C7:56:FC:7A:6B:4B:3A:E9:75:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZUhxzUtHKw_mMdW_HprSzrpdT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/CrnwsA95yJmVEXlbmftIErRDbX8.roa
Signing time: Fri 13 Jun 2025 11:12:33 +0000
ROA not before: Fri 13 Jun 2025 11:12:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211597
IP address blocks: 188.74.96.0/19 maxlen: 24
2a10:bcc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oZUhxzUtHKw_mMdW_HprSzrpdT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:fd:ce:c3:74:49:cf:d6:a0:f9:8a:df:dd:d0:3d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19521c7352d1cac3f98c756fc7a6b4b3ae9753d
Validity
Not Before: Jun 13 11:12:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ab9f0b00f79c8999511795b99fb4812b4436d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:dc:05:67:af:27:9b:b9:b9:b2:88:fe:85:84:
3b:01:2a:1b:9a:1f:e9:36:4b:22:c0:4b:e1:08:d7:
b1:30:9c:81:21:dc:48:c5:4c:3c:6f:bd:e7:b1:f6:
40:db:94:90:7d:2f:66:39:b5:fc:d6:ff:fc:44:ba:
5d:1f:40:df:03:ae:a9:30:04:91:b0:ab:56:7d:ed:
ba:4c:f6:69:36:44:c8:f2:e4:a9:38:c8:8f:82:f4:
c4:48:10:b7:ce:4c:36:8b:bc:b4:59:0a:b1:6a:94:
a6:d2:da:33:0c:6a:56:3b:d4:11:67:98:c9:94:d7:
06:5a:9d:de:6e:4e:47:4f:33:27:ab:7b:f3:99:8f:
e4:5e:91:d9:4d:72:43:86:10:7e:d4:3b:67:85:62:
37:35:5a:15:48:af:74:3a:0f:db:92:7f:31:45:85:
bd:93:0c:bd:80:e4:6a:8f:cb:41:e2:ff:ef:8f:b0:
43:86:28:9b:fd:96:c9:31:16:0b:57:ba:bc:52:59:
18:43:cf:c9:95:8c:55:26:ea:11:3f:d3:53:db:54:
8d:50:e3:12:34:9c:cf:d3:51:25:48:f6:f3:cd:ee:
3c:0b:ac:29:20:b1:87:19:b0:b2:e7:d6:1e:e8:7f:
f3:58:b1:ed:e3:77:29:ce:90:23:c6:ce:db:08:5c:
df:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B9:F0:B0:0F:79:C8:99:95:11:79:5B:99:FB:48:12:B4:43:6D:7F
X509v3 Authority Key Identifier:
keyid:A1:95:21:C7:35:2D:1C:AC:3F:98:C7:56:FC:7A:6B:4B:3A:E9:75:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZUhxzUtHKw_mMdW_HprSzrpdT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/CrnwsA95yJmVEXlbmftIErRDbX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.74.96.0/19
IPv6:
2a10:bcc0::/29
Signature Algorithm: sha256WithRSAEncryption
3e:a0:5f:94:e9:dc:68:b6:85:3f:55:a6:ac:5a:50:7a:0a:d6:
ec:73:bb:75:4f:bf:d4:c1:80:95:47:41:73:54:ff:91:47:76:
13:9b:6e:fd:df:4d:b3:55:12:ac:5c:0d:b0:7a:c5:b2:4a:c6:
e4:26:9a:a2:44:e5:ce:73:11:43:da:29:52:a0:c6:b2:ec:94:
63:54:70:d9:58:ab:25:f6:89:b6:97:2f:e7:91:80:59:e0:9a:
d3:4f:fc:90:07:d8:ff:2e:93:44:ea:fe:ce:7a:99:3a:7d:52:
f3:cd:cb:e2:cf:07:8e:e4:e5:13:ea:5e:76:a0:af:54:f5:41:
7f:3b:5d:5e:b9:60:92:82:30:42:a7:f7:eb:eb:cb:af:e6:cc:
57:00:b4:15:72:31:dc:e4:c8:e6:c3:62:96:0a:09:ae:af:cf:
e1:cf:e2:b0:7a:e2:1a:c8:7b:82:29:b6:e6:06:c7:40:6e:37:
ec:c4:13:c4:e1:c4:97:44:81:56:53:c7:23:89:8a:38:ab:c1:
f1:09:c0:9a:a1:e3:c8:5d:9d:3f:91:07:f6:63:dc:f2:c9:79:
d4:c7:44:26:05:2b:40:84:41:26:77:02:ef:e8:b0:23:4b:28:
84:87:9e:20:8a:e0:af:35:03:aa:ff:80:00:1f:0b:5f:29:3e:
9c:02:cf:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:02:41 2025 by rpki-client