Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/X8OOCxFmHvFVmgVaORuTFl7bqwA.roa
File: X8OOCxFmHvFVmgVaORuTFl7bqwA.roa (raw, json)
Hash identifier: 8QmTqC1KGhreGJsiTB4YVXTsChzMFM1fgstpYcqi2wU=
Subject key identifier: 5F:C3:8E:0B:11:66:1E:F1:55:9A:05:5A:39:1B:93:16:5E:DB:AB:00
Certificate issuer: /CN=55fad96dd05af8c2d26192c841131f2f97459fed
Certificate serial: 0194266A2C6135FD0127238059FD5956B315
Authority key identifier: 55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/X8OOCxFmHvFVmgVaORuTFl7bqwA.roa
Signing time: Thu 02 Jan 2025 09:47:59 +0000
ROA not before: Thu 02 Jan 2025 09:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203008
IP address blocks: 2a0e:3302::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:2c:61:35:fd:01:27:23:80:59:fd:59:56:b3:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55fad96dd05af8c2d26192c841131f2f97459fed
Validity
Not Before: Jan 2 09:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5fc38e0b11661ef1559a055a391b93165edbab00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fe:43:c4:1b:d6:18:3d:a2:09:a1:90:3c:2c:
8e:56:1c:60:0e:a0:1e:31:2a:3a:c4:cc:1e:11:22:
59:f7:49:97:f9:41:cb:b5:06:54:e7:d4:30:2b:5d:
30:ac:13:81:3d:86:23:f9:05:b9:b4:7e:72:b0:07:
e5:a3:37:40:c2:af:b5:fe:e6:6c:42:5c:16:ec:13:
70:06:a9:08:b6:92:00:21:ec:2c:b3:d5:44:21:b8:
96:8a:bc:6d:ad:c2:56:48:77:59:c6:22:5d:60:86:
4f:54:72:c0:50:c2:dd:b5:73:82:e4:ca:b7:aa:24:
09:a8:26:6f:0b:40:e8:79:9c:1e:54:45:22:a5:f3:
a6:e5:d7:37:ed:95:78:c4:55:5a:5c:c1:53:3d:54:
d9:55:41:4d:d3:0e:bb:62:9c:03:ba:b2:04:5b:f4:
08:c1:37:75:17:c8:f4:91:07:c4:16:07:e2:2b:40:
3a:19:1f:20:5c:6f:7f:17:a7:fb:62:90:0d:cb:35:
57:54:aa:34:47:62:7e:03:84:a4:93:d1:a9:c2:1a:
96:ac:71:04:02:42:69:40:7a:60:c2:5c:0b:7a:0b:
be:4f:32:07:ec:cd:72:7f:38:62:0d:e6:09:02:f7:
96:5d:41:33:07:54:5b:80:d7:2d:b3:09:21:25:5c:
81:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C3:8E:0B:11:66:1E:F1:55:9A:05:5A:39:1B:93:16:5E:DB:AB:00
X509v3 Authority Key Identifier:
keyid:55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/X8OOCxFmHvFVmgVaORuTFl7bqwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:3302::/32
Signature Algorithm: sha256WithRSAEncryption
4f:f4:70:3e:a7:a8:0c:70:ca:a1:0a:50:97:40:79:4b:d8:c1:
37:f6:c5:cd:63:17:d9:b7:c2:0b:9d:80:fd:5b:8d:9b:9a:02:
60:a1:e6:82:3a:c3:8e:14:43:97:71:92:1b:7c:c0:38:d8:e4:
67:08:7c:8c:06:77:e4:e7:8d:35:8f:10:ac:f7:8c:e7:65:ac:
eb:fc:3f:c5:4c:89:6d:c4:b8:ca:62:5e:b5:23:8b:fe:6f:8a:
5c:3e:91:44:bd:04:54:d7:5c:cc:ff:9c:16:58:6e:b5:a6:00:
3b:29:4a:34:d0:e2:e1:4b:32:c5:95:6d:f9:33:23:8d:77:63:
22:95:a3:1d:16:ce:ba:52:7e:79:68:72:37:5b:5e:37:56:6c:
a3:f2:2a:fa:35:29:d5:82:f0:9a:3f:6c:fa:b1:37:c5:c0:28:
bb:66:eb:89:44:91:ad:6f:37:a1:a2:a6:e3:be:3e:48:71:4d:
36:9f:67:6a:9f:05:51:49:a6:76:a1:e4:d0:67:aa:6a:77:38:
f0:f4:ef:51:ea:27:cd:ae:06:15:a5:cb:c9:b8:28:5c:10:f1:
4c:55:29:4c:ad:d5:3e:e1:30:3f:69:3c:9c:dc:86:66:47:1a:
e2:59:44:c3:f5:dd:93:98:75:cf:6a:4a:44:21:56:6f:fb:7f:
a5:62:8d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 08:29:35 2025 by rpki-client