Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/8J2x4vo5iqf1YO8Yjh9Q9fbsa1M.roa
File: 8J2x4vo5iqf1YO8Yjh9Q9fbsa1M.roa (raw, json)
Hash identifier: e13kSkxfq6F8HgarW6Z5ZhoBlPx+9OindbCN0l0XbQ0=
Subject key identifier: F0:9D:B1:E2:FA:39:8A:A7:F5:60:EF:18:8E:1F:50:F5:F6:EC:6B:53
Certificate issuer: /CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Certificate serial: 0196155DD106C6871EF18B1AC70C4535FD9B
Authority key identifier: 0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/8J2x4vo5iqf1YO8Yjh9Q9fbsa1M.roa
Signing time: Tue 08 Apr 2025 12:26:31 +0000
ROA not before: Tue 08 Apr 2025 12:26:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210732
IP address blocks: 188.94.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 15:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:15:5d:d1:06:c6:87:1e:f1:8b:1a:c7:0c:45:35:fd:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Validity
Not Before: Apr 8 12:26:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f09db1e2fa398aa7f560ef188e1f50f5f6ec6b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:30:ac:c0:4b:7e:34:5c:3c:64:12:5b:d4:2e:
db:81:06:f2:f6:b4:23:c9:0e:6a:3c:13:99:45:a1:
ca:4f:63:90:cd:99:ac:94:7d:c4:53:be:df:f0:e2:
79:69:60:a0:fd:99:0f:44:38:d7:48:a4:c7:82:ae:
ad:4c:e8:53:b8:a8:57:45:53:ae:41:1d:07:bf:49:
5d:2f:76:14:eb:52:ba:11:7e:df:01:a7:4a:e7:e3:
4d:fa:81:57:eb:8d:ad:a2:8a:a5:b4:34:10:f8:c2:
f3:88:73:05:4a:53:c0:aa:c1:6f:5a:58:70:e4:4e:
20:40:d0:9b:2d:1c:88:24:62:a7:a6:2d:3a:e0:90:
0d:62:43:40:2f:ac:24:6d:bf:aa:9e:b3:82:df:84:
60:75:46:65:af:1e:2d:03:40:59:3e:af:d9:2c:42:
99:f9:79:a7:03:17:c0:a8:b7:06:1e:96:d7:f0:1f:
9f:ca:9f:00:d1:da:d4:b2:be:97:42:14:4a:2d:13:
08:34:b5:c0:95:8d:e3:d2:e2:3a:f6:49:ed:b4:8c:
57:23:29:42:1d:2e:5d:69:13:25:65:7e:71:f6:40:
1d:48:8e:04:8a:d5:03:ac:be:84:34:d1:31:c3:7d:
ec:33:92:d8:2c:06:98:e6:25:48:b6:a3:b4:7e:03:
9a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:9D:B1:E2:FA:39:8A:A7:F5:60:EF:18:8E:1F:50:F5:F6:EC:6B:53
X509v3 Authority Key Identifier:
keyid:0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/8J2x4vo5iqf1YO8Yjh9Q9fbsa1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.94.191.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:3a:f1:72:e3:37:37:0c:1e:b0:a3:24:76:cf:22:34:36:35:
71:23:32:77:2d:14:e7:cd:69:c6:f2:bc:69:7f:82:d7:30:fe:
60:d8:d3:8c:1a:04:a4:c0:02:a3:e0:37:7e:d1:e9:14:6a:a5:
e7:2d:88:fd:8c:05:ba:0b:67:fa:46:28:40:4b:4d:e6:f1:2b:
fd:a1:a3:51:f6:93:5c:24:f9:d9:f5:e6:c0:4a:71:a0:a3:e1:
be:10:2f:78:1a:bf:98:98:3a:71:87:6e:ba:52:84:c2:97:0e:
49:2c:a7:98:36:15:5d:12:80:8d:5f:6f:b8:28:75:ed:bf:6a:
a2:fb:2a:9a:08:32:d4:71:dc:e6:46:a5:0c:d2:c6:13:2e:fe:
8e:42:52:78:b6:b3:cf:53:db:fe:31:23:7b:ad:37:68:12:d5:
a0:55:e3:d5:8c:26:b2:0d:98:38:73:f7:07:65:24:17:15:f0:
3b:67:2e:1a:6b:e8:c9:7b:35:01:85:5c:1b:a9:3a:85:b0:a9:
05:d5:38:a1:6b:b9:a3:7b:00:97:d8:f6:e4:a9:f1:13:f4:4e:
31:ec:ba:14:e3:13:15:11:89:7c:9a:52:98:c1:ec:11:fb:d3:
93:5a:1c:ee:1b:84:49:84:61:b9:61:c8:a7:79:d9:7d:9b:34:
10:7a:ae:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 00:35:18 2025 by rpki-client