Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/8oVnFmnZQ6g3DgOCU4fa-xXKM0M.roa
File: 8oVnFmnZQ6g3DgOCU4fa-xXKM0M.roa (raw, json)
Hash identifier: WAgABCVYzqzdS7ih7BzGE2XubSeh6oG7CHudT5s6okI=
Subject key identifier: F2:85:67:16:69:D9:43:A8:37:0E:03:82:53:87:DA:FB:15:CA:33:43
Certificate issuer: /CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Certificate serial: 019706A4376E3E2A168825D53B643D4EC972
Authority key identifier: D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/8oVnFmnZQ6g3DgOCU4fa-xXKM0M.roa
Signing time: Sun 25 May 2025 08:51:54 +0000
ROA not before: Sun 25 May 2025 08:51:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 91.246.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:06:a4:37:6e:3e:2a:16:88:25:d5:3b:64:3d:4e:c9:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Validity
Not Before: May 25 08:51:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f285671669d943a8370e03825387dafb15ca3343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:20:50:0c:45:a4:e9:c8:0c:7b:c2:88:2c:7a:
31:62:c9:4a:e4:6d:cf:d8:39:19:fa:8e:df:64:a3:
dc:7f:77:de:2e:88:c3:ad:d2:99:54:8e:2c:2d:e8:
34:1e:ba:34:7c:f9:33:1f:6a:fd:1a:94:1b:54:15:
34:55:1d:0d:da:e8:6a:4b:38:dd:fa:e0:ff:d3:24:
54:27:8f:89:fe:8c:85:c6:0c:71:0b:d7:c7:87:93:
13:3d:79:b2:00:de:bd:a9:3f:6b:4d:da:b7:be:2e:
ee:40:b0:99:f8:b6:74:dc:fa:f4:02:34:29:1f:44:
c5:c8:db:a3:d4:74:9e:f8:b0:5e:f4:c3:a1:41:1c:
e0:84:e2:9c:a0:97:ce:c8:bc:a0:29:ca:09:60:9a:
58:75:3b:51:69:d9:6e:d0:69:b8:de:4d:eb:a7:4f:
ea:b3:90:bd:a3:e7:7c:6b:b8:fb:d8:2b:1e:57:b3:
52:33:1c:41:c1:54:20:f7:79:1f:11:1a:0c:f1:d9:
b4:ee:09:ff:8d:5a:ff:59:e0:c6:10:b4:53:80:9c:
57:07:5a:1a:de:a1:ad:c1:0f:0c:84:e9:f2:c7:02:
c4:a7:b9:5d:33:e3:12:74:5e:f3:dd:21:2a:8d:b6:
7d:6a:86:93:b9:66:b0:e7:9a:07:8d:61:bf:9f:db:
01:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:85:67:16:69:D9:43:A8:37:0E:03:82:53:87:DA:FB:15:CA:33:43
X509v3 Authority Key Identifier:
keyid:D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/8oVnFmnZQ6g3DgOCU4fa-xXKM0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.55.0/24
Signature Algorithm: sha256WithRSAEncryption
08:b5:b6:bd:27:c7:c4:fb:2c:5b:8a:89:53:56:58:94:ac:25:
74:54:81:02:f8:9d:da:86:82:be:93:f3:f1:d2:57:37:4b:c3:
c7:80:a5:bb:bf:82:1e:db:10:5d:74:5b:b0:24:a8:a9:94:85:
f0:92:8d:09:5a:8a:47:17:95:bb:9c:aa:3c:f6:ed:80:74:c9:
b4:ad:d5:b2:ac:6a:7b:29:3c:41:58:ef:7d:f0:99:31:82:14:
fa:9d:7f:e6:6d:ac:9c:d6:d0:2a:7c:ac:c0:cb:b8:84:e2:4a:
8e:bd:fd:5d:f1:b5:07:c3:6a:85:40:5f:6b:17:32:b4:a9:09:
32:9c:f5:cd:3f:3c:f9:1f:34:3b:9f:25:4a:67:26:03:78:f9:
6c:0e:33:bd:c7:4c:d1:48:02:d9:c4:3b:65:b3:b7:d2:ea:c1:
82:a1:ba:52:5e:4c:16:1c:11:28:1b:1a:b3:dc:7e:e6:e0:e5:
15:4f:8b:bd:e6:46:cb:1f:ae:bc:e8:4c:37:e0:fd:dc:87:ee:
7e:ee:cb:cd:f0:8c:39:4b:59:92:2b:8b:06:c7:ff:7d:e6:5e:
67:53:e0:63:67:ce:c5:ec:bc:4d:e8:6d:a5:52:97:74:ba:16:
ec:1b:da:ef:5d:65:2a:be:8a:35:0e:8a:06:00:35:b9:59:0e:
8e:35:04:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:43:25 2025 by rpki-client