Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/oASSpW3DbHAVm3j51eaZaxJHZhI.roa
File: oASSpW3DbHAVm3j51eaZaxJHZhI.roa (raw, json)
Hash identifier: yrEWLwCdNgFCB4MeKY8zqq0fw2GLTP+HZekfTPCwc/g=
Subject key identifier: A0:04:92:A5:6D:C3:6C:70:15:9B:78:F9:D5:E6:99:6B:12:47:66:12
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 01976469B21BE8F01EA65433CCD455EDF5F9
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/oASSpW3DbHAVm3j51eaZaxJHZhI.roa
Signing time: Thu 12 Jun 2025 13:52:17 +0000
ROA not before: Thu 12 Jun 2025 13:52:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208433
IP address blocks: 185.181.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:69:b2:1b:e8:f0:1e:a6:54:33:cc:d4:55:ed:f5:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Jun 12 13:52:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a00492a56dc36c70159b78f9d5e6996b12476612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:33:e3:09:e4:63:da:13:0a:65:fe:2a:c6:cb:
3c:92:28:50:ae:7b:47:73:d3:12:32:0f:df:a4:61:
cd:a7:95:fe:70:e2:f4:6a:75:ca:f5:5c:80:0f:a2:
66:32:22:4b:6f:c9:ce:5a:29:e5:3d:41:d2:46:68:
6f:d7:ed:a7:45:cf:ce:ec:92:e3:06:f8:76:e6:bb:
36:83:d9:03:f8:55:13:c2:ef:83:e6:92:56:70:79:
ef:01:f9:8d:25:e1:0c:42:56:91:d9:5a:aa:54:f4:
93:51:3d:b5:c9:b1:17:23:96:e3:b9:0d:e7:a5:10:
07:eb:e0:2d:bd:57:59:f4:db:2a:cf:38:10:26:02:
13:76:30:a4:5a:54:c9:22:68:e9:90:5d:a9:3a:f6:
4b:b2:f9:17:5d:2b:cc:99:e9:0f:65:f4:b3:16:3c:
9c:40:19:09:4e:11:84:2b:a2:d0:42:44:6d:c9:d2:
22:68:b9:14:14:d7:ca:20:d8:23:c1:fa:ac:37:88:
a5:ee:09:91:48:dd:73:b0:30:2d:92:73:2c:95:ff:
b5:2f:65:6d:84:ed:ed:f7:b4:df:c4:f2:f1:0e:63:
f7:a7:eb:3d:11:42:3a:d9:0d:a9:da:53:3c:4f:21:
3d:4d:e6:c5:99:45:dd:d3:c2:99:7c:1d:cc:76:67:
08:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:04:92:A5:6D:C3:6C:70:15:9B:78:F9:D5:E6:99:6B:12:47:66:12
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/oASSpW3DbHAVm3j51eaZaxJHZhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.167.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:e7:f5:9b:cb:6f:30:15:c2:4b:97:e5:5d:39:dc:a6:18:25:
2f:f9:6d:0e:e2:70:6b:a5:0d:43:20:d7:8d:01:f1:63:1d:b2:
f3:d5:03:63:6a:2f:f4:6a:ca:33:79:4f:8e:15:90:a0:94:69:
b9:23:be:3f:d0:0d:bb:11:7c:60:60:3c:28:e5:ad:7a:5d:70:
00:a3:bd:30:2d:e1:e2:d0:49:49:df:ea:29:58:a0:02:49:d2:
db:4b:f6:82:74:8c:e9:51:3e:b5:36:88:bd:eb:03:21:f5:e7:
b7:62:35:f9:7b:83:51:85:a4:e9:b4:ee:5d:dd:f4:95:a7:8e:
59:f9:88:fb:a9:f4:d9:01:b0:f7:f2:02:55:0e:74:51:99:fc:
ca:ef:ba:8f:62:4c:4e:de:05:bb:f1:14:ab:76:78:2f:40:48:
e0:d9:c7:e3:7d:ac:2a:af:6f:21:0b:6e:d1:d5:e4:14:07:47:
53:d5:ae:3b:63:60:7f:76:a3:e0:ad:3b:9a:75:2a:3e:c3:eb:
58:80:8b:ff:bb:4b:f9:35:b7:93:1c:13:64:79:1a:93:d6:d4:
f9:04:47:f4:0d:f5:68:a6:6a:11:0a:e5:fc:4a:9d:00:ec:11:
77:61:cb:27:ee:58:24:a9:21:d7:be:e4:bf:3b:2e:6d:44:2d:
8d:7f:b2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:46:20 2025 by rpki-client