Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/8X1AAWv5potLtJ4cDHAtFN78OuU.roa
File: 8X1AAWv5potLtJ4cDHAtFN78OuU.roa (raw, json)
Hash identifier: fnF7WvbPBcYYZyEZilnnSQmk3qWakl2qKO0bPf7iS24=
Subject key identifier: F1:7D:40:01:6B:F9:A6:8B:4B:B4:9E:1C:0C:70:2D:14:DE:FC:3A:E5
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 0196A7C9ED179123377114B71A0E61D3FD71
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/8X1AAWv5potLtJ4cDHAtFN78OuU.roa
Signing time: Tue 06 May 2025 22:49:10 +0000
ROA not before: Tue 06 May 2025 22:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42831
IP address blocks: 86.110.48.0/24 maxlen: 24
86.110.50.0/24 maxlen: 24
86.110.51.0/24 maxlen: 24
86.110.54.0/24 maxlen: 24
86.110.55.0/24 maxlen: 24
86.110.59.0/24 maxlen: 24
86.110.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a7:c9:ed:17:91:23:37:71:14:b7:1a:0e:61:d3:fd:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: May 6 22:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f17d40016bf9a68b4bb49e1c0c702d14defc3ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bb:78:44:88:44:55:95:f3:90:8a:45:3a:04:
a2:63:5b:9c:50:1d:b5:a7:4a:a6:94:03:69:15:80:
0c:54:c3:da:2f:3e:e0:5f:d1:c4:ee:a8:e0:d4:25:
bb:dd:db:66:b9:d0:26:5b:59:d6:94:95:7a:61:be:
9b:c4:e5:3b:9e:ed:ca:be:c9:ef:d5:e3:6b:df:73:
f1:ca:0d:67:48:9a:e7:57:ec:fb:e7:13:98:9d:85:
c9:5b:ee:17:2a:75:e3:e5:39:da:b8:63:2d:96:6d:
da:0e:bd:7d:c7:2d:64:9d:60:27:00:f0:51:41:31:
27:4f:d8:07:5d:8a:fb:69:4b:cb:e7:57:8b:61:88:
89:64:6b:51:10:f8:eb:a4:49:1c:cf:95:bf:a1:50:
02:a6:ee:c5:d1:78:91:76:2b:c4:65:e5:d1:24:fd:
de:a0:c3:73:b9:07:82:af:7e:2d:b0:ff:7b:d1:95:
47:40:de:72:05:72:92:c9:5f:61:46:e2:9d:ef:af:
14:b0:21:fa:8d:c4:32:ec:91:ba:88:27:1e:45:a9:
fd:3e:f1:d6:9a:b4:25:11:82:78:3c:8d:02:70:6c:
1b:2a:ca:26:1d:7e:70:38:d1:3d:93:bf:ef:04:92:
ab:24:54:f0:9d:44:ec:78:5d:32:0b:f6:00:4e:74:
dd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7D:40:01:6B:F9:A6:8B:4B:B4:9E:1C:0C:70:2D:14:DE:FC:3A:E5
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/8X1AAWv5potLtJ4cDHAtFN78OuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.48.0/24
86.110.50.0/23
86.110.54.0/23
86.110.59.0/24
86.110.61.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:ca:52:82:68:b5:f1:45:47:3e:5f:90:32:83:44:e7:0e:d5:
fc:2b:1b:46:a9:54:c1:28:5e:23:6e:ff:cd:28:3f:09:a4:72:
99:80:13:24:cc:11:fd:ef:62:40:9c:02:61:9c:6a:76:f6:7e:
33:98:7e:1f:15:74:02:35:6a:1f:a6:40:56:4b:5e:fc:d0:b5:
7c:c9:cb:43:84:23:f2:08:41:bf:be:d2:07:59:13:71:f7:2d:
bc:38:60:7d:1d:3a:2a:27:00:4b:a5:f7:d0:e4:d9:1b:86:59:
4f:9a:55:fa:cd:96:12:e2:db:d4:20:64:69:e0:09:35:5e:d5:
d9:d3:70:72:02:bc:09:21:66:bb:ec:e7:55:43:f4:a9:cc:5b:
a6:d8:01:b9:1d:80:55:b5:7e:6a:9c:b0:22:1f:4f:b5:08:f7:
a8:d2:9d:17:25:88:1c:e3:85:97:b7:ad:c1:53:c4:36:7e:bb:
1e:7e:a9:b9:1d:2d:a6:e1:cb:bf:6d:41:0d:4b:aa:70:63:f9:
b3:d5:4c:d9:cb:08:11:c0:bb:4c:28:42:e5:a7:25:f5:cd:93:
15:b6:91:0e:b6:eb:5f:5a:b6:bf:15:e6:8a:f0:16:5a:a1:d0:
07:07:6c:83:7a:ee:c3:a9:79:87:ab:32:47:e8:f2:5e:55:c4:
2f:0e:df:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:58:11 2025 by rpki-client