Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/8kMlSokjtzUhg5ho8SuMCt3kdcs.roa
File: 8kMlSokjtzUhg5ho8SuMCt3kdcs.roa (raw, json)
Hash identifier: FaFEsnoRs/gK3SdNOUGIzilEsj7AGsIZYLLiLCoYi48=
Subject key identifier: F2:43:25:4A:89:23:B7:35:21:83:98:68:F1:2B:8C:0A:DD:E4:75:CB
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 0196CDCB3B4C068B5F0B8D5ADEE1BC2E5510
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/8kMlSokjtzUhg5ho8SuMCt3kdcs.roa
Signing time: Wed 14 May 2025 07:56:10 +0000
ROA not before: Wed 14 May 2025 07:56:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49392
IP address blocks: 5.42.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:cb:3b:4c:06:8b:5f:0b:8d:5a:de:e1:bc:2e:55:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: May 14 07:56:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f243254a8923b73521839868f12b8c0adde475cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:68:00:08:82:91:d7:dc:e6:8d:76:22:3e:3e:
06:34:62:21:55:c9:8f:c3:a6:70:c3:eb:57:82:fb:
ed:94:df:dc:d5:59:e4:52:b7:53:df:b4:b0:65:1f:
17:69:61:06:b1:6c:0e:9e:9e:1c:e1:b7:5c:2f:02:
79:12:67:e6:e0:20:d0:9c:5c:cb:bd:76:4a:a6:b4:
79:cb:38:a5:58:98:cb:fc:18:c8:1c:fa:f1:86:30:
70:d2:e9:35:24:fe:d3:de:06:db:82:2d:5a:fc:51:
3f:5b:e7:da:8d:ba:b5:29:b4:b3:9a:87:ca:34:b5:
86:94:fb:00:97:f6:4b:69:25:72:cc:fa:c2:97:0f:
31:01:2f:ea:7d:46:68:ed:b7:74:7e:64:66:ef:74:
bd:f1:70:2b:f1:70:59:42:1c:4e:41:2d:1b:99:83:
e0:d1:3e:e1:12:92:d3:9b:61:3c:df:a2:cd:f6:c7:
3d:aa:54:8a:76:64:a3:fb:2a:8a:35:17:b5:bd:3d:
f3:9d:f5:66:12:f4:be:83:7d:95:48:6d:55:0c:a8:
c5:4a:dc:10:6d:58:ae:73:62:ce:f7:d3:56:c6:e3:
49:e3:f5:ac:3d:d0:fe:4f:30:f2:b9:21:71:c6:7e:
36:56:a3:83:a0:25:24:4d:69:24:43:dc:4c:90:9b:
22:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:43:25:4A:89:23:B7:35:21:83:98:68:F1:2B:8C:0A:DD:E4:75:CB
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/8kMlSokjtzUhg5ho8SuMCt3kdcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.212.0/24
Signature Algorithm: sha256WithRSAEncryption
37:11:eb:81:ad:e7:1d:36:14:72:1d:7a:35:fc:2c:65:8e:62:
eb:ce:1b:07:43:75:20:54:b6:9e:a1:eb:33:ca:9e:fb:a6:59:
fa:cc:90:44:58:7b:e8:c3:e8:a4:7f:86:f3:4c:d1:ec:1f:b8:
15:3c:5c:37:3a:fc:cd:39:6a:0c:9a:63:d2:ff:c7:ff:b7:7b:
7c:fa:fc:e9:a6:c8:7b:9a:92:7e:c4:f6:e2:11:c9:c7:9d:2c:
c1:b5:cd:e4:fa:37:7e:0c:75:52:b2:3e:2e:50:a1:cf:55:69:
76:67:ca:83:0b:de:54:c2:7f:79:77:25:8a:fb:60:05:82:ff:
a5:60:0f:e0:fe:23:de:47:81:b1:8a:ac:1f:9d:25:22:3f:e9:
9f:c9:88:5c:f9:44:8e:95:ee:1c:89:ac:d2:3b:96:4b:37:43:
44:56:87:48:94:e5:b4:66:4f:f2:6e:cb:6e:79:4e:43:23:c3:
9b:91:89:55:74:76:7c:12:eb:5e:a6:dc:d6:b4:67:2b:63:92:
9f:95:3d:60:00:64:1a:19:dd:8e:a9:e9:81:83:ef:6e:aa:f4:
20:c7:6c:a3:67:fe:27:7b:89:de:84:b4:24:1f:75:a7:79:30:
03:47:b9:d2:60:43:07:2c:31:97:af:88:df:df:5f:45:ce:a2:
53:5e:8b:97
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZbNyztMBotfC41a3uG8LlUQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjUwNTE0MDc1NjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMjQzMjU0YTg5MjNiNzM1MjE4Mzk4NjhmMTJiOGMwYWRkZTQ3NWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumgACIKR19zmjXYiPj4GNGIhVcmP
w6Zww+tXgvvtlN/c1VnkUrdT37SwZR8XaWEGsWwOnp4c4bdcLwJ5Emfm4CDQnFzL
vXZKprR5yzilWJjL/BjIHPrxhjBw0uk1JP7T3gbbgi1a/FE/W+fajbq1KbSzmofK
NLWGlPsAl/ZLaSVyzPrClw8xAS/qfUZo7bd0fmRm73S98XAr8XBZQhxOQS0bmYPg
0T7hEpLTm2E836LN9sc9qlSKdmSj+yqKNRe1vT3znfVmEvS+g32VSG1VDKjFStwQ
bViuc2LO99NWxuNJ4/WsPdD+TzDyuSFxxn42VqODoCUkTWkkQ9xMkJsiBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPJDJUqJI7c1IYOYaPErjArd5HXLMB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEvOGtNbFNva2p0elVoZzVobzhTdU1DdDNrZGNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx
LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABSrUMA0G
CSqGSIb3DQEBCwUAA4IBAQA3EeuBrecdNhRyHXo1/CxljmLrzhsHQ3UgVLaeoesz
yp77pln6zJBEWHvow+ikf4bzTNHsH7gVPFw3OvzNOWoMmmPS/8f/t3t8+vzppsh7
mpJ+xPbiEcnHnSzBtc3k+jd+DHVSsj4uUKHPVWl2Z8qDC95Uwn95dyWK+2AFgv+l
YA/g/iPeR4GxiqwfnSUiP+mfyYhc+USOle4ciazSO5ZLN0NEVodIlOW0Zk/ybstu
eU5DI8ObkYlVdHZ8EuteptzWtGcrY5KflT1gAGQaGd2OqemBg+9uqvQgx2yjZ/4n
e4nehLQkH3WneTADR7nSYEMHLDGXr4jf319FzqJTXouX
-----END CERTIFICATE-----
Generated at Fri Jun 6 13:55:56 2025 by rpki-client