Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/D8TVIpbhKokDS9trBBqJHsFT1UQ.roa
File: D8TVIpbhKokDS9trBBqJHsFT1UQ.roa (raw, json)
Hash identifier: buVD8eTr7vS6C640rVcFTDAjpCVFYAxsjVTpolrqfNA=
Subject key identifier: 0F:C4:D5:22:96:E1:2A:89:03:4B:DB:6B:04:1A:89:1E:C1:53:D5:44
Certificate issuer: /CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Certificate serial: 0196A68A7126BE4151477B15169A0F2B1EDE
Authority key identifier: 5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/D8TVIpbhKokDS9trBBqJHsFT1UQ.roa
Signing time: Tue 06 May 2025 17:00:12 +0000
ROA not before: Tue 06 May 2025 17:00:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25780
IP address blocks: 185.206.168.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:8a:71:26:be:41:51:47:7b:15:16:9a:0f:2b:1e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Validity
Not Before: May 6 17:00:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0fc4d52296e12a89034bdb6b041a891ec153d544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:47:0b:5a:f7:ae:07:9d:43:44:29:2d:a9:2b:
39:5d:13:22:4a:2b:09:a0:51:a9:cc:b2:b2:90:d0:
11:11:75:e4:c5:08:b3:c2:a9:83:43:0c:0c:a5:69:
6c:8f:10:41:b2:e5:0b:95:53:5b:17:5b:bc:8c:85:
8d:4a:6f:ce:2b:5b:15:b1:d3:c6:d6:14:9a:ec:ce:
da:c6:e0:9b:f9:63:b2:87:8d:03:6a:50:49:b6:90:
a0:45:55:f0:88:2f:86:eb:d7:ff:34:79:7c:c0:ba:
51:d2:70:09:ca:8f:25:0a:b2:8f:9a:a7:15:cf:79:
01:bb:01:d4:c0:3f:4e:fb:ec:22:c9:be:41:3b:60:
6d:7e:d6:8b:27:0c:20:69:10:e9:51:4e:7c:87:f9:
4c:b2:2d:49:59:8a:cd:ce:3f:fc:ed:fa:68:b9:1a:
bb:de:d2:a2:7b:7d:6d:06:2b:1b:b4:c0:dc:67:32:
c9:9b:0a:91:ba:06:6e:4f:18:45:6c:80:8d:09:29:
58:36:52:66:85:2f:fd:8c:a3:d1:35:18:1e:5b:fb:
9e:27:27:5e:eb:20:da:89:97:aa:2a:63:6b:a0:2e:
5a:d5:eb:89:75:58:49:8e:30:ef:ce:02:f1:06:b0:
62:1a:1f:09:36:d5:a0:0d:be:84:7f:d5:86:e8:eb:
54:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C4:D5:22:96:E1:2A:89:03:4B:DB:6B:04:1A:89:1E:C1:53:D5:44
X509v3 Authority Key Identifier:
keyid:5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/D8TVIpbhKokDS9trBBqJHsFT1UQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.168.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:74:be:a6:70:f8:b4:43:da:17:a3:26:eb:89:d8:00:a3:8f:
88:7d:82:d4:f0:f4:22:67:95:ea:50:93:7b:7e:9a:ae:8a:76:
2a:74:12:4c:34:5d:c3:02:9b:3b:1e:01:38:4b:27:21:61:de:
34:45:1f:1a:ff:95:36:d4:b4:cf:0b:99:d1:10:f9:87:a3:2a:
22:8e:ec:98:71:47:0d:1c:83:40:92:7a:ef:e2:68:2e:a9:b0:
97:96:2a:97:4d:1e:6e:40:7a:23:55:31:84:14:26:eb:a6:3b:
7d:fe:5f:e5:28:17:b5:c6:28:62:19:34:b4:f5:ff:68:f5:57:
91:86:e1:25:4b:d4:14:a7:b0:f6:41:99:e8:60:d7:13:c8:60:
29:e0:c8:0b:f1:9e:9a:24:97:eb:69:d1:37:e8:21:41:f2:e4:
b6:27:84:11:d3:fb:91:71:e6:49:bb:33:2b:0b:e2:9a:50:f6:
f7:3f:65:47:36:08:17:a9:bb:38:5f:5a:65:2f:a0:70:70:07:
a0:b3:ed:ab:02:e8:37:f4:fb:6d:7e:ee:14:79:ca:0d:df:f5:
7a:59:99:0c:49:7d:e5:0b:e4:b8:51:0f:ac:81:3e:9d:48:4e:
c8:83:88:aa:4b:9e:c6:4a:d8:56:04:ad:54:2e:01:8d:0a:e5:
da:a7:11:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:10:58 2025 by rpki-client