Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/vO-r3cE0zdrtLbEsm52PSRKqFco.roa
File: vO-r3cE0zdrtLbEsm52PSRKqFco.roa (raw, json)
Hash identifier: 15iVDjzeNCscoLPDAZq2DwjBAG23ZIkYcGJ5YBE2kw4=
Subject key identifier: BC:EF:AB:DD:C1:34:CD:DA:ED:2D:B1:2C:9B:9D:8F:49:12:AA:15:CA
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0198090489056B4406113440B0ECB672BDA1
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/vO-r3cE0zdrtLbEsm52PSRKqFco.roa
Signing time: Mon 14 Jul 2025 12:59:08 +0000
ROA not before: Mon 14 Jul 2025 12:59:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13335
IP address blocks: 194.124.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:09:04:89:05:6b:44:06:11:34:40:b0:ec:b6:72:bd:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jul 14 12:59:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bcefabddc134cddaed2db12c9b9d8f4912aa15ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fe:f2:01:98:63:c3:dd:40:03:d1:a1:ec:a9:
b7:bc:ba:e8:40:cd:f6:ae:ed:0e:3b:99:90:d5:28:
86:4e:7c:3b:1d:ba:4b:e4:e0:4f:76:b1:c2:90:0d:
c4:ac:84:11:45:c9:cb:e4:a8:25:4a:15:ad:7b:94:
a1:ac:2a:a6:b7:98:be:ba:9f:05:ab:8c:70:0a:a2:
88:36:8e:bc:53:03:64:f9:bc:27:99:09:8d:71:cb:
dd:9b:5a:d9:53:41:31:f8:b7:40:3e:50:dc:58:bf:
53:36:ac:90:3e:99:7d:5a:72:27:b7:30:15:b4:28:
b7:ad:e7:78:0b:f1:0c:1b:96:17:51:00:83:7c:54:
16:4f:4b:2d:d6:51:0e:ed:88:75:c5:5b:df:03:49:
92:91:dc:fe:f0:bb:88:c7:98:f0:b9:5e:d2:59:4c:
b2:95:c8:16:4b:e1:a3:0d:f1:82:b6:11:44:2d:df:
ec:ee:94:80:d2:d2:84:49:fb:45:98:37:9e:5f:08:
22:5e:e2:8e:a4:d2:ac:3f:07:e5:20:d9:c8:f9:f8:
8a:ff:88:7b:6a:2a:8b:73:09:af:df:33:9a:1e:62:
aa:8f:14:d6:cb:99:f1:49:08:ea:a0:43:1e:ba:82:
bd:a6:9b:7d:d0:e0:87:d9:83:56:4d:f7:f4:1b:d4:
90:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:EF:AB:DD:C1:34:CD:DA:ED:2D:B1:2C:9B:9D:8F:49:12:AA:15:CA
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/vO-r3cE0zdrtLbEsm52PSRKqFco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.124.69.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:47:02:d1:d1:63:c6:c0:46:64:f9:35:83:50:52:6a:ca:e9:
66:1e:63:ef:83:3d:40:e3:b9:53:8a:fa:08:3c:b9:12:60:1a:
7c:05:d2:cb:69:63:15:95:86:6e:41:d1:48:39:56:24:00:2c:
5c:c8:4a:a1:4b:29:2d:d4:ff:6e:cb:1e:5a:56:4d:8c:8b:06:
ba:55:c0:6b:b6:8c:d1:6b:1b:10:2f:22:17:13:1c:6e:a9:94:
df:9b:b4:2b:90:10:3c:8c:d8:d0:f9:3e:75:16:55:12:94:23:
2b:fe:c1:2a:50:91:8a:01:0a:47:d7:e4:48:69:e3:fa:61:a7:
c8:72:38:79:3d:49:46:f4:2e:36:a9:9d:13:86:c2:fc:7d:b2:
76:10:ed:3e:19:8b:e1:d0:e2:1a:0b:00:45:7d:76:d1:7b:ab:
22:87:9f:35:bc:a2:db:ed:bd:2e:6c:fc:e0:db:4f:2f:ac:c4:
84:98:17:24:c6:04:4a:d3:86:01:24:cf:59:23:56:da:f6:13:
6f:88:8c:a4:68:f6:ee:11:6d:eb:34:83:42:c7:15:05:ef:f4:
56:6b:3c:74:42:76:fb:08:52:f2:6c:90:45:de:a8:ed:97:e1:
2f:28:3f:1d:74:45:fe:b9:af:34:73:a8:65:74:04:5a:97:35:
0f:6e:14:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:30:18 2025 by rpki-client