Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/VAImUOtIDMTUQI76JnLfRrvllyo.roa
File: VAImUOtIDMTUQI76JnLfRrvllyo.roa (raw, json)
Hash identifier: 4SRj/s3ojBfQysGt03CIZScJZWxzkyEXZbgo7Y3hEkk=
Subject key identifier: 54:02:26:50:EB:48:0C:C4:D4:40:8E:FA:26:72:DF:46:BB:E5:97:2A
Certificate issuer: /CN=abbad3de831da94222c1add104caf4c3247689ac
Certificate serial: 0196C5CD088C143D54B302E69321E5F751A8
Authority key identifier: AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/VAImUOtIDMTUQI76JnLfRrvllyo.roa
Signing time: Mon 12 May 2025 18:41:10 +0000
ROA not before: Mon 12 May 2025 18:41:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137409
IP address blocks: 212.68.180.0/22 maxlen: 22
212.68.180.0/24 maxlen: 24
212.68.181.0/24 maxlen: 24
212.68.182.0/24 maxlen: 24
212.68.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:cd:08:8c:14:3d:54:b3:02:e6:93:21:e5:f7:51:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abbad3de831da94222c1add104caf4c3247689ac
Validity
Not Before: May 12 18:41:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54022650eb480cc4d4408efa2672df46bbe5972a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e7:48:c0:05:88:63:66:1f:6c:dc:ac:33:c3:
76:10:c5:4d:a9:1b:9f:5b:ff:a8:69:b7:ae:cf:a8:
50:d8:76:88:a2:4e:eb:84:0e:7f:2d:2b:9e:df:f4:
3f:97:4b:9f:c9:5e:fe:17:3f:f7:49:90:6f:4b:9e:
94:37:bb:dc:1b:72:f2:6d:1c:15:7d:51:41:7c:f4:
9d:43:42:f7:0b:d9:1f:82:9a:0c:2a:8a:2e:b3:aa:
94:2c:6a:08:d8:b3:e8:48:1b:87:b8:d2:e8:10:d1:
c3:4a:27:f4:82:c1:b8:ce:54:95:53:c2:61:04:e5:
56:30:e5:6e:e4:d0:d5:00:5d:2c:54:9e:e9:d4:ed:
e6:a9:f6:7a:63:3b:59:e6:a4:ca:0a:ff:b9:3b:6c:
c8:ff:66:95:61:fb:23:af:54:0d:c3:b5:b2:0d:54:
f4:a5:4b:db:52:0d:61:05:c8:56:04:96:78:61:17:
b4:be:ae:b3:c1:1c:ed:c3:b6:c6:43:d2:41:70:e4:
7e:38:22:45:4f:67:00:01:13:dd:7b:46:30:26:4f:
7d:c0:29:21:b9:65:e3:2d:ad:fc:c3:67:ee:b4:10:
a8:75:4f:f8:3e:cf:c3:b6:df:63:04:0b:eb:4a:eb:
49:13:cf:3d:ad:a7:d9:67:23:94:cc:d1:e7:ff:c8:
0a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:02:26:50:EB:48:0C:C4:D4:40:8E:FA:26:72:DF:46:BB:E5:97:2A
X509v3 Authority Key Identifier:
keyid:AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/VAImUOtIDMTUQI76JnLfRrvllyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.68.180.0/22
Signature Algorithm: sha256WithRSAEncryption
29:1d:5c:60:24:d3:2f:bd:86:21:60:8c:9a:5d:d9:29:24:6e:
9f:ca:7b:c0:59:c7:72:cf:10:70:5f:4c:5f:6c:a1:30:8c:4b:
e2:61:1f:82:9c:c0:3e:99:ab:e7:62:85:56:99:d6:2e:ae:21:
27:a7:46:0e:0f:df:38:ac:d2:32:41:26:05:d0:a8:30:e7:aa:
af:07:bb:1d:a3:30:e8:af:de:82:43:56:54:f5:ff:5e:ee:de:
cd:c3:d2:04:47:3d:f0:59:6c:36:d7:0e:67:f0:f4:b1:ea:29:
06:86:b2:b2:9a:55:b7:c1:48:8b:b7:63:01:be:cc:03:52:86:
8a:5c:95:7d:c4:13:18:82:c3:c7:4c:7a:a8:1f:4e:59:bf:ae:
56:e0:e1:a5:db:45:d9:77:5c:26:54:ac:88:3c:23:5c:3e:32:
be:ee:9d:40:d0:be:59:c8:ef:85:27:83:2e:fd:bd:96:30:77:
f0:1b:74:45:a7:76:25:8e:40:ae:14:56:35:00:df:0c:db:94:
2e:c0:c3:0e:65:4a:81:11:92:69:84:07:9e:8e:e9:4b:63:96:
de:33:18:6c:23:61:05:1e:b6:3b:f2:91:92:19:7b:c2:9e:78:
d6:04:2b:81:81:65:e8:74:c3:b4:2d:37:e9:1b:38:a0:a0:60:
a4:a5:34:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:45:50 2025 by rpki-client