Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/SOJJoBTyyJua9tdu4tZ2B31g56k.roa
File: SOJJoBTyyJua9tdu4tZ2B31g56k.roa (raw, json)
Hash identifier: YMViz3GkzFQZUT08/Yf5mLb5Z5Bzg+msMTH8wr8BZ0I=
Subject key identifier: 48:E2:49:A0:14:F2:C8:9B:9A:F6:D7:6E:E2:D6:76:07:7D:60:E7:A9
Certificate issuer: /CN=3ff587e4e07acdfb389e259161da186b386b4f63
Certificate serial: 0196FB5ACFB8784F33AC5FAC3B3BFE17569A
Authority key identifier: 3F:F5:87:E4:E0:7A:CD:FB:38:9E:25:91:61:DA:18:6B:38:6B:4F:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_WH5OB6zfs4niWRYdoYazhrT2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/SOJJoBTyyJua9tdu4tZ2B31g56k.roa
Signing time: Fri 23 May 2025 04:15:54 +0000
ROA not before: Fri 23 May 2025 04:15:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213528
IP address blocks: 185.72.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_WH5OB6zfs4niWRYdoYazhrT2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fb:5a:cf:b8:78:4f:33:ac:5f:ac:3b:3b:fe:17:56:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ff587e4e07acdfb389e259161da186b386b4f63
Validity
Not Before: May 23 04:15:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48e249a014f2c89b9af6d76ee2d676077d60e7a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e9:e4:91:9e:fa:d2:f8:6b:de:25:2a:80:bf:
99:35:6b:3a:f7:b2:e0:d7:18:e2:6e:fb:35:71:83:
6f:e3:47:5c:4b:7f:16:af:4c:4b:63:08:2d:ce:07:
88:54:82:78:b8:9d:05:42:cd:1a:1f:61:9b:a7:ea:
0a:01:f4:bf:4e:6b:2a:17:ce:a5:4e:7d:ce:be:27:
df:ff:a7:b6:08:cb:aa:33:5b:0f:6b:f1:91:b2:32:
eb:9b:a2:7b:e7:10:be:51:7f:62:19:58:94:cc:fc:
b2:35:90:9b:dc:80:c3:ee:51:ce:30:9f:ab:c9:ca:
e6:7f:68:c6:22:c9:14:66:c3:20:c6:de:96:a5:96:
4e:f6:20:35:a0:55:c0:90:41:6c:32:0f:7d:6a:a4:
ce:0a:bb:b8:d7:b9:4c:bf:8a:40:03:50:a7:19:29:
30:8d:35:a5:c3:b1:d3:62:54:08:63:fb:6d:4e:92:
2f:9b:60:00:b0:07:3c:42:8e:93:43:7d:9a:65:71:
4d:9d:c1:d2:da:3d:06:b1:92:75:a6:38:e3:c9:8d:
a9:62:58:cd:d5:12:be:20:98:94:18:d0:46:71:84:
49:e7:a8:dd:1c:9f:ae:74:a9:e8:c2:2c:57:35:40:
64:10:69:45:bf:25:05:a8:63:64:be:18:10:6e:2a:
7f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E2:49:A0:14:F2:C8:9B:9A:F6:D7:6E:E2:D6:76:07:7D:60:E7:A9
X509v3 Authority Key Identifier:
keyid:3F:F5:87:E4:E0:7A:CD:FB:38:9E:25:91:61:DA:18:6B:38:6B:4F:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_WH5OB6zfs4niWRYdoYazhrT2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/SOJJoBTyyJua9tdu4tZ2B31g56k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.100.0/24
Signature Algorithm: sha256WithRSAEncryption
52:35:ba:9b:73:68:a3:1e:e5:d9:45:23:b6:27:a2:73:73:92:
ae:f1:d5:76:24:eb:1b:ac:16:22:0c:e4:52:3b:72:1a:1c:2a:
39:3b:42:1f:fc:6c:56:e1:30:25:e3:8d:ff:6b:55:e9:fd:59:
d9:b9:7b:4d:a6:35:64:5e:30:2e:a7:a4:9d:71:ff:e5:8a:bb:
0c:cb:0a:ee:80:d4:1b:0f:54:b9:db:c7:cf:3d:66:6b:db:06:
70:08:4c:e1:ba:c8:c6:06:b9:73:b6:33:36:f2:4a:37:cd:9d:
45:80:11:03:3b:62:88:99:3d:23:59:86:77:8f:7a:df:12:47:
8d:83:84:61:1b:c0:e6:86:07:5f:0b:77:68:cd:eb:3a:a0:aa:
02:ba:dd:b3:78:19:ed:53:58:f6:fb:ef:bf:a0:94:ec:f6:94:
a5:63:51:e9:64:25:d8:21:7e:94:fa:3f:6a:ae:2c:fd:51:83:
f6:60:6f:c6:94:46:34:5e:31:f8:80:06:16:8d:7a:ae:47:20:
c2:fb:75:b6:f4:a9:37:33:10:5a:82:b1:22:ad:3c:9f:ec:59:
93:04:34:8d:fe:f3:fd:f4:e8:23:0a:4b:7f:7c:f5:c9:62:a2:
58:b2:0e:ec:5c:6c:ef:e9:91:07:cb:72:53:cd:99:d5:40:d5:
51:e8:dd:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:54:40 2025 by rpki-client