Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/8fjGJEbNOKgjtgGvG0x5bdVrRFo.roa
File: 8fjGJEbNOKgjtgGvG0x5bdVrRFo.roa (raw, json)
Hash identifier: 6ZZJ4QGkpbcq3hIOVhgvm79JeONPbl5ojVu1zQKUgnU=
Subject key identifier: F1:F8:C6:24:46:CD:38:A8:23:B6:01:AF:1B:4C:79:6D:D5:6B:44:5A
Certificate issuer: /CN=38506d80ab592de7be0a331bbf4fa0068d41408a
Certificate serial: 0196C41FA4EBA7B9E635F94530A5EF712FB2
Authority key identifier: 38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/8fjGJEbNOKgjtgGvG0x5bdVrRFo.roa
Signing time: Mon 12 May 2025 10:52:10 +0000
ROA not before: Mon 12 May 2025 10:52:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57136
IP address blocks: 91.230.248.0/24 maxlen: 24
194.102.117.0/24 maxlen: 24
194.105.143.0/24 maxlen: 24
194.126.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:1f:a4:eb:a7:b9:e6:35:f9:45:30:a5:ef:71:2f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38506d80ab592de7be0a331bbf4fa0068d41408a
Validity
Not Before: May 12 10:52:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1f8c62446cd38a823b601af1b4c796dd56b445a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c4:78:ac:d1:18:a2:54:25:17:3d:22:bc:4e:
3e:bf:eb:14:10:31:49:8c:1b:24:dd:3c:c4:c5:b4:
ec:5c:01:b3:e1:5f:78:f3:de:c6:5b:4d:e2:ea:02:
d0:64:94:24:72:31:48:33:89:4c:f0:19:4f:56:04:
6e:84:ae:1d:fa:cd:27:d9:35:93:dc:72:27:f9:db:
f6:c4:4e:6f:1e:2c:56:2a:99:16:cf:d8:e9:fc:be:
6f:dd:47:91:f0:92:80:d7:d1:4e:a6:41:c0:9f:21:
7c:3f:12:b7:cb:e8:e2:97:b3:41:13:23:1b:50:ab:
8d:19:2a:e3:bd:fd:d3:f2:1e:aa:a9:2d:af:6d:e7:
59:04:65:7d:0f:2d:57:1e:71:9a:76:cf:b6:cd:e8:
b4:57:43:49:90:3f:b5:b0:c1:35:1e:73:df:be:e0:
b9:6b:67:f9:c7:4a:bb:57:e2:9f:f8:18:e0:ad:ed:
33:7c:b0:10:0f:6b:12:ef:6b:ba:a6:a0:0a:17:9f:
ce:6b:9f:47:74:29:f2:f0:53:eb:01:69:61:4c:9a:
90:70:6e:4b:e1:69:19:b4:a4:19:6c:da:a3:f4:5a:
a2:a6:7a:f8:9f:8e:03:1b:a6:ee:9f:ec:ff:38:f3:
70:b6:7a:de:7b:04:ba:68:58:7d:79:a5:fa:c0:75:
d6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F8:C6:24:46:CD:38:A8:23:B6:01:AF:1B:4C:79:6D:D5:6B:44:5A
X509v3 Authority Key Identifier:
keyid:38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/8fjGJEbNOKgjtgGvG0x5bdVrRFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.248.0/24
194.102.117.0/24
194.105.143.0/24
194.126.205.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:6f:08:a8:de:23:d5:01:1a:b3:02:25:5b:f3:21:ce:f8:43:
18:8c:85:49:a7:ee:77:12:73:7f:3c:f8:b9:ec:36:62:cc:bd:
67:9d:6a:49:1c:03:85:15:4f:44:64:8a:b0:1d:10:0c:86:0e:
e5:0a:7a:19:1e:cc:fe:d8:67:a7:8d:be:87:8b:5c:82:98:b0:
e6:e6:dc:d9:1d:45:80:41:d3:40:53:2c:bc:22:2b:1a:fd:a8:
8d:d6:1b:37:17:a9:8a:92:f8:b0:0f:9f:0a:47:6c:8d:6e:8d:
a0:99:cc:27:22:f3:6f:77:e0:90:e1:91:15:71:98:3b:39:5b:
46:12:60:b8:5e:2a:0b:d2:21:e2:68:c6:46:e3:3f:07:69:43:
d1:2f:5d:d2:3f:d0:90:6d:d0:f7:17:c2:76:76:5d:8e:15:64:
04:7f:53:09:f9:a6:b0:12:2a:35:3b:71:dc:6f:47:4e:ce:c8:
88:f0:5b:ae:c8:c5:69:14:1e:fb:72:4c:cb:ee:d2:8c:cc:2d:
5a:94:58:a1:7e:d7:2b:b9:4c:b3:ef:d5:b4:8b:ac:7c:de:75:
1a:5b:ac:3d:a9:e0:a4:4a:3d:0f:de:8b:d6:e6:8b:9e:9a:4a:
b2:44:b9:f4:e6:69:49:c7:a6:5f:5c:f3:ae:7b:53:32:3e:1d:
6a:34:9d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:44:54 2025 by rpki-client