Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/oqY4Gym8_h13774JyFMlQaF9lRg.roa
File: oqY4Gym8_h13774JyFMlQaF9lRg.roa (raw, json)
Hash identifier: 060jlGNpGYOeBQdil1XQ3Sjt/o9OO3rEoRQAZoP6M5g=
Subject key identifier: A2:A6:38:1B:29:BC:FE:1D:77:EF:BE:09:C8:53:25:41:A1:7D:95:18
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 0196E98292B36AA5A2455A45EAE3B159E6C2
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/oqY4Gym8_h13774JyFMlQaF9lRg.roa
Signing time: Mon 19 May 2025 17:06:10 +0000
ROA not before: Mon 19 May 2025 17:06:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208261
IP address blocks: 188.130.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 20:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e9:82:92:b3:6a:a5:a2:45:5a:45:ea:e3:b1:59:e6:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: May 19 17:06:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2a6381b29bcfe1d77efbe09c8532541a17d9518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:33:de:98:2d:3e:6b:6d:77:a5:8e:b9:df:ee:
c9:56:d4:37:70:d3:bb:3b:e7:f2:93:69:ef:06:a2:
37:2e:2a:e2:66:47:02:f9:0c:f9:5b:5e:4b:48:ff:
1c:58:d8:86:a5:67:11:c7:7f:88:a3:b5:26:b3:5c:
d5:e7:1f:6f:71:37:df:80:ff:24:e5:ac:a0:70:35:
a8:bf:37:e4:bd:d3:0d:7b:46:0c:42:c1:9f:e2:5e:
d9:cc:87:80:16:13:e1:51:b4:59:fd:80:cf:d5:d8:
46:2f:66:c0:2b:3b:44:9c:20:48:a4:11:bb:de:82:
c0:a9:7c:e8:cc:15:7a:5f:db:94:d6:db:2f:a6:63:
96:cc:4e:bf:64:06:41:36:eb:fe:86:eb:a4:62:fa:
07:c8:6a:62:43:dd:c6:d1:6e:83:bc:76:3e:c8:e6:
75:9d:ca:eb:c0:5d:d2:3f:5f:0d:16:f6:61:21:66:
e4:b5:6a:c0:4a:2c:cd:d4:93:32:80:20:03:ef:c4:
13:ac:93:4a:6d:70:6f:b0:1f:c2:73:f7:d3:36:6d:
b4:b5:64:65:37:d0:27:cd:4f:4e:cc:09:56:ce:9e:
d4:eb:8d:52:66:62:f2:20:12:56:f3:fe:50:c8:17:
cc:9d:46:20:0c:1b:48:ca:e6:2a:d6:e2:e2:a8:f9:
da:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A6:38:1B:29:BC:FE:1D:77:EF:BE:09:C8:53:25:41:A1:7D:95:18
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/oqY4Gym8_h13774JyFMlQaF9lRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.130.146.0/24
Signature Algorithm: sha256WithRSAEncryption
90:dc:5c:d4:60:f7:95:fd:36:8b:ee:7e:c0:91:9e:e1:6d:cd:
45:3d:3c:bd:cf:f3:3a:60:13:75:33:60:52:68:f3:f6:cb:d2:
60:c6:b7:3c:e6:5e:3e:ba:ae:c0:44:af:3b:a3:62:d0:dd:d5:
8a:09:b5:5c:79:59:7b:9a:7a:93:81:13:d7:99:d3:54:9c:76:
16:db:5d:3a:47:4c:e5:42:fb:c7:2d:38:85:34:9c:01:33:8e:
b1:06:da:ea:ec:f5:07:5f:eb:5d:a7:b0:4e:69:e4:e1:7d:c6:
2e:43:ef:84:95:1e:2b:9b:dc:a4:a1:02:c4:27:d4:ce:ab:47:
68:92:ea:2b:8b:af:2b:99:22:f5:d9:94:e3:b8:5b:18:98:04:
d3:29:3b:a4:f9:df:40:9a:95:ea:06:64:48:d7:6a:c9:62:20:
f1:b1:61:c9:10:22:1b:58:b7:e0:e3:a8:a8:33:9c:31:a4:02:
75:51:da:95:a7:b5:32:50:2a:50:61:9b:0b:d7:cb:5c:8f:58:
49:c3:04:58:b4:92:f9:61:b4:94:72:06:be:8e:46:fa:0a:37:
26:55:d7:4c:59:60:a4:79:50:dc:b0:09:32:c7:91:55:df:eb:
e7:77:65:cf:f2:44:f6:69:3c:11:2a:94:2c:9b:07:e5:8c:00:
82:8b:ab:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:40:36 2025 by rpki-client