Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/iCu55oauLu6lO0Wv5qzTCisTT5Y.roa
File: iCu55oauLu6lO0Wv5qzTCisTT5Y.roa (raw, json)
Hash identifier: c74oiSFQaZun4Ni6pdtSbN0qLyH+G/P27H3ZjiDzjOM=
Subject key identifier: 88:2B:B9:E6:86:AE:2E:EE:A5:3B:45:AF:E6:AC:D3:0A:2B:13:4F:96
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019807A23A9393758A0C759AC18A184AFB58
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/iCu55oauLu6lO0Wv5qzTCisTT5Y.roa
Signing time: Mon 14 Jul 2025 06:32:08 +0000
ROA not before: Mon 14 Jul 2025 06:32:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200950
IP address blocks: 194.231.218.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 05:10:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:07:a2:3a:93:93:75:8a:0c:75:9a:c1:8a:18:4a:fb:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 14 06:32:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=882bb9e686ae2eeea53b45afe6acd30a2b134f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5b:63:73:8c:95:73:15:21:9e:a8:24:4d:10:
15:ee:83:6b:48:83:e6:c2:07:8f:d8:89:d6:30:48:
b5:7d:0e:36:4d:ae:bd:b8:df:f0:0e:37:03:7d:66:
db:42:5a:52:5b:89:bf:a8:d0:16:da:5d:42:83:76:
ce:96:ba:2a:d6:44:e7:6b:b8:a9:ea:0d:4a:37:b8:
12:37:36:e8:7e:65:23:bb:59:59:30:4e:c6:85:40:
8e:6c:62:30:88:a3:be:8f:5d:52:0b:e8:a9:fc:a3:
99:64:c2:1e:86:22:c6:6c:f2:bd:76:f5:2f:6c:e5:
7f:e8:d6:32:13:6f:1e:d8:de:08:09:22:9f:f3:f3:
d4:a8:33:15:68:3b:ca:a6:2a:3f:c0:80:7a:02:f5:
59:8b:c6:39:7e:de:7b:7d:aa:49:07:2b:48:8a:21:
46:7d:03:51:b7:83:29:15:f4:05:1c:03:ca:a8:c0:
95:92:33:8f:12:6c:e7:5b:56:f0:e8:6a:73:20:47:
5b:53:41:f1:9f:07:40:b5:83:46:12:bb:f9:be:4b:
68:f2:eb:36:90:59:31:b6:59:8c:2b:67:db:13:a2:
5f:a0:96:a1:a5:1a:a0:15:7d:34:d9:cd:24:6e:d0:
21:ad:e2:be:af:e6:48:50:c9:f4:eb:a5:2b:20:1d:
0d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:2B:B9:E6:86:AE:2E:EE:A5:3B:45:AF:E6:AC:D3:0A:2B:13:4F:96
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/iCu55oauLu6lO0Wv5qzTCisTT5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.218.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:54:38:8c:9a:bd:4c:c3:ff:ad:ba:02:d0:1a:e9:08:b2:23:
58:20:2c:48:bb:7a:5c:c5:2f:ca:36:97:23:d0:a5:f3:de:d4:
97:18:6e:09:50:16:17:2a:6d:9c:2f:91:a6:c9:90:e8:ff:a4:
7a:6f:f5:6d:1b:07:fc:72:7a:bb:bc:f0:4a:ec:24:b1:a4:f1:
79:8a:0c:e9:51:64:77:63:b9:80:49:f0:ed:89:28:76:73:a4:
bc:95:76:7b:68:36:86:01:7f:2a:9f:c2:32:d8:17:3f:47:2f:
cc:c8:14:35:18:04:26:32:94:8f:82:94:4c:10:23:c2:56:d4:
98:56:57:27:a4:c5:80:b1:46:66:76:9f:1a:dc:98:1e:e7:6a:
c1:9a:f2:5f:38:59:1f:56:b6:e0:37:1d:2a:14:34:82:73:5f:
47:69:7f:58:b2:40:72:75:76:68:e5:8c:ed:42:c6:a2:5a:d1:
1f:c2:d0:21:52:b0:73:d9:78:4b:a2:2c:b5:41:ea:1d:99:ce:
76:78:80:eb:bd:e2:6a:b4:b7:8b:48:c0:02:10:33:50:53:4a:
55:33:c0:b0:ed:d5:ff:74:47:44:c5:c4:b9:b8:0e:02:2c:b4:
98:ae:6a:43:f1:38:b3:b4:be:0e:4e:a2:6e:86:ae:b7:f3:d3:
a6:3b:12:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:50:53 2025 by rpki-client