Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/O8pEm_-zc4a3l2oOmaPytNy4TWg.roa
File: O8pEm_-zc4a3l2oOmaPytNy4TWg.roa (raw, json)
Hash identifier: 3g6cRnV9tCnYa+2wT7Y16qVT2YK1kvB1yvGTbTRzptI=
Subject key identifier: 3B:CA:44:9B:FF:B3:73:86:B7:97:6A:0E:99:A3:F2:B4:DC:B8:4D:68
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0196BAA4964D07A1030817820017F90D4F6F
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/O8pEm_-zc4a3l2oOmaPytNy4TWg.roa
Signing time: Sat 10 May 2025 14:41:10 +0000
ROA not before: Sat 10 May 2025 14:41:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212219
IP address blocks: 193.35.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 11:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:a4:96:4d:07:a1:03:08:17:82:00:17:f9:0d:4f:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: May 10 14:41:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3bca449bffb37386b7976a0e99a3f2b4dcb84d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6e:28:80:7d:5c:ad:3f:f7:b1:84:f6:4c:f7:
be:75:25:e9:b0:38:44:2f:02:86:65:20:af:e0:0b:
cc:08:0d:41:62:80:ca:0f:35:7c:c5:9e:cc:60:9a:
3d:c0:a9:a3:12:ce:9e:ef:5b:44:19:1f:69:28:94:
97:5d:37:e8:33:4a:85:d3:d9:bf:71:26:1d:67:8f:
69:eb:96:8e:a6:24:78:91:d7:2e:a9:21:06:9e:5b:
34:90:11:6c:15:65:f6:50:26:cc:87:a1:57:42:cf:
00:ef:b4:f8:31:45:56:da:6d:cf:c7:b9:ba:8f:18:
ff:52:44:b3:e2:e4:e3:bf:87:56:9f:2c:83:26:f5:
22:2b:5a:fe:6a:c7:d4:25:8b:0f:9f:fd:82:b9:48:
a3:72:92:5b:33:39:76:b6:e2:f0:da:87:ca:1d:a7:
6a:46:03:b2:d0:8a:99:7a:76:e2:c8:93:2e:c7:e8:
81:2d:39:a2:0f:5d:0c:30:3d:00:21:df:a9:2c:40:
7a:cf:de:4a:74:38:4a:1d:b5:af:5c:7c:0c:ba:29:
5c:aa:91:4b:38:63:3a:4c:75:1e:32:b1:4b:06:50:
78:2e:29:fd:7e:84:57:ac:6c:ee:3d:99:90:18:35:
86:37:85:89:4f:6f:d6:6a:14:61:91:7d:0a:55:d4:
2a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CA:44:9B:FF:B3:73:86:B7:97:6A:0E:99:A3:F2:B4:DC:B8:4D:68
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/O8pEm_-zc4a3l2oOmaPytNy4TWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.154.0/24
Signature Algorithm: sha256WithRSAEncryption
38:8d:41:42:4b:af:ce:96:f3:4a:a8:d0:44:b0:86:1c:d5:6a:
2e:00:60:54:4c:21:fe:6a:83:9a:12:9f:e8:83:27:20:66:0a:
70:a6:f9:a1:cc:f2:9e:98:fe:78:66:42:90:18:8b:ba:7e:4d:
b5:3a:f9:73:99:7f:ea:80:28:8c:71:1c:83:94:c9:44:2f:13:
1f:13:83:f2:c2:2f:14:a0:65:58:0a:fd:e4:ef:d1:23:a9:98:
ae:ee:7f:e6:a8:36:3e:c5:16:d0:0d:a3:6d:eb:0d:77:f3:21:
7e:4d:f6:eb:9d:d1:58:9f:2c:79:bd:98:9d:09:c3:e6:95:d7:
33:99:6d:f9:97:fa:41:41:9a:ca:83:62:49:2d:54:05:ce:82:
11:c0:51:55:27:b1:64:61:ed:b9:af:80:1f:eb:57:cc:3a:15:
a5:f1:a4:7c:fa:76:51:b2:6d:4a:6c:3e:f6:b9:4c:2d:ca:d6:
81:d5:4f:6c:b5:55:78:5f:15:2d:3a:87:77:3f:f6:53:f5:48:
99:44:be:60:41:c7:0b:04:d8:a9:d5:31:ac:35:2d:36:38:16:
32:ac:1f:df:9f:0d:7c:ab:7f:60:7a:a0:09:8b:f2:83:ee:ac:
59:30:04:dc:64:c8:5f:7f:25:5e:1b:10:5c:75:6b:0a:6c:7e:
a2:ad:d2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:53:57 2025 by rpki-client