Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/o1oWSbF99ChHezdi7-NEtS6WqIQ.roa
File: o1oWSbF99ChHezdi7-NEtS6WqIQ.roa (raw, json)
Hash identifier: ssh+w8HWpTpbSb7HfHBqwKGeOCK5JvaJKAWgtYiNFsU=
Subject key identifier: A3:5A:16:49:B1:7D:F4:28:47:7B:37:62:EF:E3:44:B5:2E:96:A8:84
Certificate issuer: /CN=85d0e763f935c171694f172056eb44209db2e2cd
Certificate serial: 01990A2A1ECDAC8CEDFDC77067EEDDAB06C3
Authority key identifier: 85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/o1oWSbF99ChHezdi7-NEtS6WqIQ.roa
Signing time: Tue 02 Sep 2025 11:22:36 +0000
ROA not before: Tue 02 Sep 2025 11:22:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43747
IP address blocks: 212.230.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0a:2a:1e:cd:ac:8c:ed:fd:c7:70:67:ee:dd:ab:06:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85d0e763f935c171694f172056eb44209db2e2cd
Validity
Not Before: Sep 2 11:22:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a35a1649b17df428477b3762efe344b52e96a884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e8:80:9a:2f:1c:c5:6b:91:03:30:3e:c6:6b:
75:a0:ba:7d:bc:ac:d5:dc:42:75:86:86:1c:93:6f:
93:74:c0:3f:c2:84:f3:92:fe:78:9c:88:7e:af:bd:
49:c3:ce:38:c1:be:cd:6c:0b:82:e4:69:04:09:62:
12:21:c1:00:7a:10:f7:bf:63:82:87:85:f9:23:81:
d5:4c:54:8f:aa:5c:bf:d4:7c:0e:5c:f5:4d:51:22:
fe:a1:39:18:8b:5e:f9:83:e1:b6:fc:b1:ab:bd:9c:
94:89:40:9c:8d:45:1e:c8:05:7e:2d:3a:dd:3c:50:
1c:d6:a8:c4:ff:bd:92:99:54:af:b1:14:2a:c1:44:
4d:7c:23:0b:fe:07:7f:99:bd:73:82:7d:43:1c:35:
bb:07:c0:d0:84:a3:43:b4:42:20:a7:d5:5e:b4:31:
95:e5:d8:70:24:c8:ec:a8:ce:2f:63:27:fa:58:d6:
2b:c1:73:52:97:7a:a5:bb:5c:85:17:32:79:67:bb:
d1:b6:d8:8d:d3:41:40:8b:51:5e:71:70:e4:08:5c:
29:0d:de:8f:cb:02:15:78:08:70:06:ba:b2:06:3b:
74:05:67:41:29:de:d4:1f:e9:d0:0a:c3:2e:5e:25:
0a:ac:1b:3f:73:e0:eb:45:87:6d:da:6b:dd:42:ea:
ce:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:5A:16:49:B1:7D:F4:28:47:7B:37:62:EF:E3:44:B5:2E:96:A8:84
X509v3 Authority Key Identifier:
keyid:85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/o1oWSbF99ChHezdi7-NEtS6WqIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.230.163.0/24
Signature Algorithm: sha256WithRSAEncryption
60:4c:ef:96:10:6f:2b:d5:3f:e8:37:a7:49:10:d5:8b:2b:4e:
d1:55:98:d8:0a:c2:84:c8:7a:e4:03:36:9b:77:14:64:f4:97:
e5:cf:63:95:bc:aa:e9:95:97:31:7b:c4:0a:9e:98:d7:ff:6d:
7b:5c:7c:e1:09:c7:7b:9e:1e:12:9a:41:07:cf:67:45:6d:3b:
3f:d5:06:47:33:11:f8:e3:86:77:22:86:29:ad:26:cc:76:30:
90:b3:e6:0f:18:40:e2:fc:06:fc:59:e4:eb:a8:b1:30:e0:7f:
b6:f1:52:7d:ca:72:b3:10:d7:14:55:c6:c5:43:04:41:38:a3:
c9:5d:f4:02:b8:25:8b:0c:f7:e4:38:34:ef:be:e9:33:98:7a:
50:b8:02:36:38:25:5c:5f:d8:92:81:af:c5:b9:b3:39:5c:5d:
fd:89:67:11:6b:6d:d1:f7:a0:55:b7:ef:bd:88:b4:fa:9a:08:
67:4f:09:70:74:34:b1:e2:70:75:de:69:05:31:06:54:6a:a5:
28:a6:2c:9c:5a:13:5c:e9:db:bc:bd:a7:7e:f5:e8:20:90:89:
c6:e3:9a:68:1c:3b:5a:70:d2:89:40:f3:3f:06:08:90:08:89:
a7:54:7c:c0:62:87:06:70:c8:77:13:3e:ea:8b:90:9a:ce:35:
c7:8e:8f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 14:06:38 2025 by rpki-client