Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/sj0nsJoMof67zEn80EUzSqtcieM.roa
File: sj0nsJoMof67zEn80EUzSqtcieM.roa (raw, json)
Hash identifier: fbtbJQoFIq0SnSVrbhaTwAxIK1OzQTDUwDpnwEeInrc=
Subject key identifier: B2:3D:27:B0:9A:0C:A1:FE:BB:CC:49:FC:D0:45:33:4A:AB:5C:89:E3
Certificate issuer: /CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Certificate serial: 019731EFF0D8FD778F3E6FD0D85296A2C204
Authority key identifier: FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/sj0nsJoMof67zEn80EUzSqtcieM.roa
Signing time: Mon 02 Jun 2025 18:38:17 +0000
ROA not before: Mon 02 Jun 2025 18:38:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 195.210.116.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 07:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:31:ef:f0:d8:fd:77:8f:3e:6f:d0:d8:52:96:a2:c2:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Validity
Not Before: Jun 2 18:38:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b23d27b09a0ca1febbcc49fcd045334aab5c89e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:60:9b:0b:52:74:64:09:d2:27:77:b3:c0:1f:
59:9b:f9:39:33:f1:b9:ed:f1:d5:7a:0d:b8:43:89:
35:7a:ee:2e:f5:56:2f:c5:cd:b3:4e:ee:52:dd:31:
63:61:a9:a5:44:a0:ff:e9:69:9c:1f:23:b4:5d:52:
45:63:3e:8f:80:a6:c8:97:32:87:93:f5:6a:ef:3b:
ca:41:37:b2:d9:1a:c1:44:ef:3a:ff:e7:82:de:a4:
ea:7b:ba:26:16:07:82:22:b1:6b:cb:73:40:ba:fc:
bb:4e:04:e1:07:4f:f9:1a:2b:fe:c0:1e:54:47:23:
12:34:43:9f:a8:8c:8a:24:8f:54:0e:1f:ec:a8:6a:
b1:e6:ac:a3:33:e1:0a:93:c6:42:c9:dd:8d:b6:2a:
33:81:c6:91:6f:5c:da:d7:2e:44:cf:dc:20:58:bc:
cd:32:28:26:0d:8b:f1:7f:6e:54:9c:8c:5b:4b:cd:
ef:aa:66:3b:b9:6e:6b:75:af:a9:ab:7f:5f:ca:ff:
7a:ef:8a:61:ec:21:03:c3:20:2b:35:e0:60:60:d3:
f0:1d:9c:6f:68:a9:9d:ab:bb:5d:83:aa:2b:9b:cd:
01:6d:2f:b1:4d:bc:df:d9:2e:a2:c9:77:91:6a:5e:
39:cb:ca:96:ea:94:26:17:81:7b:5a:36:dc:81:41:
54:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:3D:27:B0:9A:0C:A1:FE:BB:CC:49:FC:D0:45:33:4A:AB:5C:89:E3
X509v3 Authority Key Identifier:
keyid:FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/sj0nsJoMof67zEn80EUzSqtcieM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.210.116.0/22
Signature Algorithm: sha256WithRSAEncryption
27:0f:f7:8a:be:a7:bf:bd:99:8a:cc:2e:84:e1:86:13:99:14:
b3:9e:2e:d8:b7:f1:27:10:f6:6a:9e:64:b9:d2:37:a8:ab:f4:
30:a4:0b:01:ab:f2:40:ca:ab:7e:43:fb:66:e6:fe:34:4f:46:
df:40:50:17:a5:ab:e7:02:6c:53:2c:9b:43:bd:c5:38:fe:94:
08:d2:77:ac:10:1e:e0:33:a3:56:7c:3e:a7:92:c0:06:de:72:
f4:35:8e:0a:13:4d:9e:55:69:1f:e6:fa:49:04:45:cd:95:a3:
e2:12:a0:2c:b7:ba:d7:b7:b7:e8:f3:61:47:27:29:44:eb:2c:
0a:fd:3f:84:c4:ea:1d:3c:6b:76:92:63:0d:49:45:57:d5:71:
9a:3e:65:f5:c3:66:b8:aa:6d:4a:b7:85:6a:17:1b:c8:d6:60:
5c:4c:e2:01:08:92:87:67:95:4e:20:c7:08:9e:0d:3d:a4:55:
a4:90:5b:5f:44:0e:43:22:2c:12:a0:a6:08:1c:3a:ff:de:26:
ea:79:39:b4:ad:91:e3:b2:2b:f0:7d:ea:58:fe:f0:80:fd:1b:
3c:66:3c:ea:2c:e4:fb:a9:f0:8f:6b:12:40:2c:ed:6d:c7:c3:
64:1a:f7:fc:76:f6:25:48:a3:40:8c:1f:87:87:af:57:af:bb:
ba:82:3f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 17:17:09 2025 by rpki-client