Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/8VT8Fo3P5TNZ-vroEO27eP29hXg.roa
File: 8VT8Fo3P5TNZ-vroEO27eP29hXg.roa (raw, json)
Hash identifier: pcmpK1WbqeqIW7/hwNEA1uEbwJv8DkJTR4wXodN3kk4=
Subject key identifier: F1:54:FC:16:8D:CF:E5:33:59:FA:FA:E8:10:ED:BB:78:FD:BD:85:78
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0195D2DFB00E8D07109FEB2552AEE814D767
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/8VT8Fo3P5TNZ-vroEO27eP29hXg.roa
Signing time: Wed 26 Mar 2025 14:33:49 +0000
ROA not before: Wed 26 Mar 2025 14:33:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3319
IP address blocks: 77.47.142.0/24 maxlen: 24
185.143.56.0/22 maxlen: 24
195.178.132.0/24 maxlen: 24
195.178.133.0/24 maxlen: 24
195.178.134.0/24 maxlen: 24
195.178.135.0/24 maxlen: 24
195.178.144.0/23 maxlen: 23
195.178.147.0/24 maxlen: 24
195.178.148.0/23 maxlen: 24
195.178.152.0/22 maxlen: 22
195.178.156.0/24 maxlen: 24
212.111.207.0/24 maxlen: 24
212.111.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 08:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d2:df:b0:0e:8d:07:10:9f:eb:25:52:ae:e8:14:d7:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Mar 26 14:33:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f154fc168dcfe53359fafae810edbb78fdbd8578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:4d:bd:41:03:16:f7:ce:72:f8:54:1d:a0:23:
d0:6c:6c:6d:fe:d1:0f:8e:56:f9:0e:15:42:58:7f:
a7:3d:5a:24:b1:be:21:ab:79:fd:fc:4b:a4:46:28:
06:ae:b5:2b:f4:40:45:48:4c:01:c5:b9:13:18:d6:
1f:69:db:93:77:85:54:40:fa:3a:77:57:cd:fe:c3:
fe:1f:d2:d4:0c:70:2b:bf:a7:ac:e6:d9:c6:39:86:
d6:27:36:00:cc:16:50:62:1b:03:9a:28:56:1f:d1:
35:5b:54:41:16:28:13:5a:a7:20:3c:36:a9:9f:f9:
f3:b7:db:23:42:a7:7e:9d:c7:da:da:ec:64:ce:46:
28:c3:47:85:d2:9d:fe:a2:fc:07:73:53:3c:b3:36:
6b:c4:b1:65:fb:06:4b:ec:24:78:09:1c:b7:f6:0d:
fb:95:1e:bc:72:cd:f9:d0:b3:97:b7:bd:08:90:32:
fd:2d:79:ed:a6:af:89:af:7e:29:34:7a:02:a9:fc:
46:6e:86:72:bd:61:36:06:a6:33:72:bd:8d:44:0a:
b1:97:6f:49:aa:ec:04:77:4d:e4:61:06:62:ce:3d:
00:ea:ef:3b:08:ee:85:a8:96:12:f1:4b:87:d7:05:
24:4d:11:3c:18:93:d9:8b:e7:e1:7b:89:cd:7b:37:
bc:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:54:FC:16:8D:CF:E5:33:59:FA:FA:E8:10:ED:BB:78:FD:BD:85:78
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/8VT8Fo3P5TNZ-vroEO27eP29hXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.142.0/24
185.143.56.0/22
195.178.132.0/22
195.178.144.0/23
195.178.147.0-195.178.149.255
195.178.152.0-195.178.156.255
212.111.207.0/24
212.111.216.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:32:66:e6:ba:54:2c:15:b9:8f:0c:97:14:da:7a:0f:86:b7:
5e:ff:dc:82:6f:9d:ab:a9:51:d0:73:9c:e6:b1:8a:97:ff:0a:
2c:f2:c3:a6:7e:df:15:71:15:b8:eb:1c:47:f7:01:1e:c9:a2:
f0:a7:34:38:9e:08:43:fc:30:4e:04:26:cb:ae:94:0f:a3:80:
be:1a:cf:2c:87:4f:4f:be:04:84:e4:69:e1:b3:2a:17:25:6e:
bc:7e:23:b2:50:c1:3e:d5:56:d3:8c:86:5f:ae:ff:8d:92:79:
d8:85:0d:86:94:a0:d4:0f:73:b9:f9:47:76:92:ee:4e:a7:b6:
3e:d4:21:72:f4:c3:4b:cf:fc:63:05:2d:b4:f7:0a:ac:7e:cf:
49:2f:cc:68:e0:13:4f:54:75:65:23:a2:3b:96:37:ea:69:00:
1c:4f:c7:06:a4:49:61:09:80:5c:19:fa:42:a5:a4:4f:01:c4:
d1:1c:04:d9:96:70:3d:bf:47:c4:c2:31:b8:89:88:ea:b9:87:
32:fa:62:55:4a:72:78:8d:e4:39:bd:8c:17:1b:8d:9c:be:4e:
88:aa:79:3a:c3:0a:ef:e0:9f:9b:d4:d2:2a:3a:8f:93:6c:d7:
76:8b:17:a5:32:3d:67:7c:a2:09:b7:05:c4:a9:ed:7e:66:3e:
57:6e:58:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:05:40 2025 by rpki-client