Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/o5IYc5BzpYk0uftpHyAzAqZDYfU.roa
File: o5IYc5BzpYk0uftpHyAzAqZDYfU.roa (raw, json)
Hash identifier: IIEjnjJa8C0c0pDcwTstaLEjk8XmgTEl+LukqKQZpGo=
Subject key identifier: A3:92:18:73:90:73:A5:89:34:B9:FB:69:1F:20:33:02:A6:43:61:F5
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0195CCF689D798472C7D3D74CA8121E43480
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/o5IYc5BzpYk0uftpHyAzAqZDYfU.roa
Signing time: Tue 25 Mar 2025 11:01:04 +0000
ROA not before: Tue 25 Mar 2025 11:01:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 81.168.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cc:f6:89:d7:98:47:2c:7d:3d:74:ca:81:21:e4:34:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 25 11:01:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a39218739073a58934b9fb691f203302a64361f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:77:41:c6:d6:9e:72:2e:c3:14:b2:9c:8f:9b:
6a:df:22:8e:d0:e8:c5:4c:a4:f6:24:31:a5:c1:40:
53:97:c2:aa:49:8a:45:a7:43:5f:86:62:75:2c:db:
50:f4:7c:aa:97:34:3c:8c:a7:2a:f0:24:81:b1:a5:
e5:c9:d9:d2:48:21:9b:80:6e:84:dc:fe:1c:1c:f6:
9b:7d:9b:f1:2e:4d:18:03:d3:67:3b:22:cc:81:2c:
b6:d7:80:27:3a:94:53:86:df:42:a8:88:0f:2a:9d:
12:20:ba:bc:47:45:cc:43:10:c0:ad:7c:c5:aa:73:
1a:59:20:2b:04:6e:4d:cf:d1:66:e1:8c:9d:99:ce:
1f:d9:64:13:95:7a:7e:81:10:a6:d6:4b:1d:e0:99:
d3:f9:39:f8:43:3d:50:4b:0b:fb:40:2d:f1:89:d4:
f0:bb:05:94:07:15:92:44:f2:c7:9b:ac:ca:31:c3:
e4:bd:26:db:18:a6:f3:df:37:ed:5d:78:f4:9d:75:
af:38:be:1f:6e:23:a1:c1:2f:e0:a4:bb:35:c7:bf:
46:32:ce:7b:e5:57:ca:27:ff:03:9a:6b:b0:83:a8:
11:5f:89:7a:62:7d:18:d7:96:c2:e7:0b:91:71:1a:
f6:56:76:0c:f1:db:18:20:8d:90:84:fe:f9:f7:fd:
16:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:92:18:73:90:73:A5:89:34:B9:FB:69:1F:20:33:02:A6:43:61:F5
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/o5IYc5BzpYk0uftpHyAzAqZDYfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.116.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:a9:fd:7c:c3:80:68:a6:f3:25:27:37:88:0b:a4:4a:d0:89:
44:ee:99:d3:bd:e5:27:99:3e:fe:42:10:59:2b:fb:eb:fa:3a:
2d:73:c0:8a:4b:7d:f8:24:e0:f6:84:5b:fa:71:98:78:40:73:
e0:55:ca:d9:b3:a7:ba:10:3d:83:f2:b0:d5:98:98:11:10:7c:
17:d4:9a:7b:4a:a7:8d:d4:94:b5:81:7e:1e:2a:98:c4:8f:54:
59:67:14:e8:f9:be:ee:01:6a:41:f8:ff:64:48:17:58:98:c2:
77:49:7c:0b:3a:80:9a:00:95:e7:ef:3a:cf:42:a5:ac:93:91:
88:78:42:6b:7c:95:d7:29:91:75:42:16:7a:18:86:f2:ce:5f:
b9:a7:ef:68:13:3b:28:26:40:a9:c5:d1:55:e2:e7:a4:b4:31:
fb:31:21:bf:71:b2:d6:4a:2b:e4:10:a6:69:2c:c4:62:bc:1f:
fb:45:10:7c:4f:17:e6:06:99:10:35:29:0a:68:f1:fb:e1:fe:
28:1f:1c:b8:28:79:4f:d3:8a:fd:d8:15:e4:aa:fb:18:60:1b:
1a:41:f3:89:e3:74:5b:54:ed:e5:c9:55:95:38:33:de:33:c6:
bc:ac:11:46:d8:b4:6d:32:4d:5a:35:12:ce:9b:15:35:16:b6:
bd:7b:23:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:50:59 2025 by rpki-client