Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/vr8PSoYUsiYv3lzOM7DV52gwBTQ.roa
File: vr8PSoYUsiYv3lzOM7DV52gwBTQ.roa (raw, json)
Hash identifier: wWu5MXViYu7yWcCK2uXJUijAu3pVXDb40Jk1HrXAApY=
Subject key identifier: BE:BF:0F:4A:86:14:B2:26:2F:DE:5C:CE:33:B0:D5:E7:68:30:05:34
Certificate issuer: /CN=c0aab396d650826027c2bd8a0620721092109e29
Certificate serial: 0196ED993B6458197A608307441F60C9940F
Authority key identifier: C0:AA:B3:96:D6:50:82:60:27:C2:BD:8A:06:20:72:10:92:10:9E:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKqzltZQgmAnwr2KBiByEJIQnik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/vr8PSoYUsiYv3lzOM7DV52gwBTQ.roa
Signing time: Tue 20 May 2025 12:09:24 +0000
ROA not before: Tue 20 May 2025 12:09:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59782
IP address blocks: 81.163.200.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.mft
rsync://rpki.ripe.net/repository/DEFAULT/wKqzltZQgmAnwr2KBiByEJIQnik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ed:99:3b:64:58:19:7a:60:83:07:44:1f:60:c9:94:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0aab396d650826027c2bd8a0620721092109e29
Validity
Not Before: May 20 12:09:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bebf0f4a8614b2262fde5cce33b0d5e768300534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:27:75:c3:0d:e7:53:a2:f3:a7:5b:20:8e:a7:
f7:d0:e4:61:5f:b2:85:a2:9e:e8:b6:ec:af:da:11:
0e:1f:4a:7e:c8:3b:d0:c8:ac:9b:fb:1b:d0:dc:ea:
c9:0c:e0:ed:d4:a8:17:9c:4f:39:55:f0:71:af:dd:
69:37:12:12:5b:bb:f8:91:c8:54:d9:73:3b:5b:56:
58:b8:49:2b:7b:dd:92:ed:73:f4:52:3f:9e:79:05:
07:1d:8d:21:b3:12:22:e8:1b:78:d5:68:1f:b7:1f:
f4:c5:ac:5b:67:3a:89:62:de:a4:73:12:18:cd:a6:
08:76:9c:d6:63:34:2b:ff:af:c2:e7:46:dc:1a:f3:
6a:24:7b:5d:e5:15:eb:d1:1a:c0:fe:c7:bf:41:7b:
bd:d4:b6:20:9a:d3:52:e1:e8:45:84:1d:8a:ec:d9:
a7:4d:d7:5d:1c:47:1a:80:d0:14:42:14:4d:40:c0:
0b:ce:07:c2:14:05:aa:ae:a0:6a:d9:26:77:71:a0:
82:9d:7c:80:ed:05:7d:92:a1:fa:e0:c8:37:73:20:
d8:78:19:6d:82:9f:e5:96:01:a8:7b:83:ea:b8:fa:
58:32:10:8f:83:d0:00:d3:7f:eb:72:5a:b0:f9:22:
80:e8:9e:ce:2c:08:cb:40:0a:10:df:b5:ed:26:67:
8e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BF:0F:4A:86:14:B2:26:2F:DE:5C:CE:33:B0:D5:E7:68:30:05:34
X509v3 Authority Key Identifier:
keyid:C0:AA:B3:96:D6:50:82:60:27:C2:BD:8A:06:20:72:10:92:10:9E:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKqzltZQgmAnwr2KBiByEJIQnik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/vr8PSoYUsiYv3lzOM7DV52gwBTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.163.200.0/21
Signature Algorithm: sha256WithRSAEncryption
0c:f8:f4:78:d5:c8:6f:82:92:80:57:7c:17:64:2f:d4:23:76:
4d:10:d1:76:22:d9:7e:3e:67:52:89:76:9d:9f:0e:ec:9c:8b:
16:6e:0d:f8:92:c1:b6:cf:ac:46:a3:95:79:90:63:f7:e8:cc:
aa:8c:21:63:e8:a2:0f:d7:c8:ee:25:70:3f:c5:d5:1d:03:3e:
07:17:55:76:65:71:85:f1:8c:c2:9b:e0:51:8d:e1:2c:ac:74:
53:18:5f:37:32:d5:64:0a:dd:8c:23:60:ad:ed:b6:a8:76:d6:
87:25:99:ef:56:44:6d:5a:2a:2b:cf:44:cf:72:bc:ca:78:65:
ed:0d:17:2b:e8:3b:7c:d9:a0:04:7f:25:02:41:39:eb:06:df:
40:f9:30:fb:78:eb:91:10:56:4e:af:a1:4b:0f:cc:02:69:8e:
1a:1d:d8:d7:8e:14:4d:b7:81:7b:a4:d4:78:e6:e8:f7:db:12:
75:3e:ba:f5:52:af:c8:c1:e5:53:85:28:4e:ee:0e:ad:74:31:
4d:ed:b3:20:85:25:29:5f:0c:8e:e0:4d:02:7a:50:0f:bc:54:
1b:57:eb:9e:45:00:e7:80:6b:8f:94:7a:ed:25:d2:e6:56:64:
73:46:4e:a8:f6:0c:9b:16:ce:fc:75:76:59:c1:2f:c0:7d:3f:
d2:13:74:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 08:05:18 2025 by rpki-client