Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/F-mOL_vvtaH8j4HozgTvwJ1ADv0.roa
File: F-mOL_vvtaH8j4HozgTvwJ1ADv0.roa (raw, json)
Hash identifier: dR6lpfQoc94mbznYYoddiYKpR7CQD6t8Gifp28SY3LU=
Subject key identifier: 17:E9:8E:2F:FB:EF:B5:A1:FC:8F:81:E8:CE:04:EF:C0:9D:40:0E:FD
Certificate issuer: /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Certificate serial: 01978305B192C6EBD0566F46A13EA5682FCD
Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/F-mOL_vvtaH8j4HozgTvwJ1ADv0.roa
Signing time: Wed 18 Jun 2025 12:31:17 +0000
ROA not before: Wed 18 Jun 2025 12:31:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205426
IP address blocks: 155.56.192.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:83:05:b1:92:c6:eb:d0:56:6f:46:a1:3e:a5:68:2f:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Validity
Not Before: Jun 18 12:31:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17e98e2ffbefb5a1fc8f81e8ce04efc09d400efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6b:7b:07:c5:d2:49:10:65:5d:b6:08:a9:1a:
fc:97:0e:66:10:e9:61:ad:10:ec:04:2b:c3:db:d8:
cc:0c:27:1b:e7:3a:b0:09:29:49:58:53:6b:06:1c:
7a:5f:14:e3:ac:fc:0e:4c:11:ac:4a:16:e9:58:20:
cf:d4:5e:ca:24:82:3a:57:78:b6:aa:56:fc:13:c1:
26:19:0c:ae:d5:bc:53:4c:00:b9:ef:70:31:0d:95:
8a:ea:29:d8:f3:a8:e3:63:6b:95:c9:17:34:29:74:
57:20:3a:61:0a:a6:94:9a:08:71:74:86:14:97:f1:
99:ea:15:19:f2:b4:a2:ad:4f:12:de:0c:0a:9e:08:
9f:9f:57:f3:98:3c:20:3e:08:8e:ce:b6:fd:ea:44:
63:6b:c9:17:76:c4:e8:e8:61:b4:02:c0:55:3a:b8:
62:eb:bc:89:44:6c:20:4c:07:58:b0:77:d4:b9:a9:
c5:c8:d4:1a:e0:22:b9:54:4b:98:2d:c5:99:28:6c:
95:48:85:4d:34:44:0a:3f:ca:57:43:eb:4c:2d:9d:
04:c3:49:41:8a:6e:b7:dd:ea:4a:72:ff:35:35:f5:
42:78:f7:71:25:0f:64:3a:40:00:63:2d:05:9f:c0:
94:4e:40:ef:59:7b:06:56:6f:2e:32:eb:eb:95:89:
67:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E9:8E:2F:FB:EF:B5:A1:FC:8F:81:E8:CE:04:EF:C0:9D:40:0E:FD
X509v3 Authority Key Identifier:
keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/F-mOL_vvtaH8j4HozgTvwJ1ADv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.56.192.0/18
Signature Algorithm: sha256WithRSAEncryption
9b:12:b7:52:6f:f5:a6:1e:bc:ed:e3:5b:94:69:c2:1f:7a:8d:
19:2e:f0:25:30:87:6f:92:7e:68:da:44:8f:43:c2:14:de:7a:
c9:1e:3f:d6:be:57:23:a7:1b:ad:0b:98:7a:8e:e3:09:48:cf:
3f:1a:4c:31:28:4b:13:e9:88:ed:fc:f6:f1:86:98:1e:85:95:
47:44:d1:25:94:ba:90:8f:1b:c9:ca:ba:45:89:7d:0f:36:84:
ee:1d:2b:aa:45:af:1e:c9:1b:76:4e:db:5b:d3:44:d6:91:81:
31:d9:72:50:a0:c1:3c:97:38:23:6e:b8:57:4e:b5:f6:24:29:
98:4e:47:7e:64:a7:d2:5f:5c:fb:2e:6f:75:54:78:f2:e7:dc:
49:ea:ac:45:40:34:b8:13:2f:93:31:c3:ff:9f:5e:7e:2d:fd:
51:80:67:81:f3:12:8d:03:cc:4c:e6:ee:ff:a5:f9:06:cb:39:
9c:e5:c6:c2:bc:2f:ca:14:ab:0f:6a:39:99:51:d7:54:84:ac:
c3:3f:53:5f:cc:7a:f7:e7:70:13:6c:37:e0:88:a0:c0:85:f4:
d4:06:6e:48:49:b2:30:70:66:1f:6f:f5:b7:76:89:0b:1d:f6:
e0:de:5b:7e:57:ad:7c:1e:bb:be:cd:04:53:f8:98:2d:51:d7:
ca:2f:70:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 08:13:44 2025 by rpki-client