Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/vLw_9uPb3Irigwnvf70YcfYSc4I.roa
File: vLw_9uPb3Irigwnvf70YcfYSc4I.roa (raw, json)
Hash identifier: FMmqrUGJnKtzvJZcwgN7Qfl5fWAjm916Dx0Zjbp3RSM=
Subject key identifier: BC:BC:3F:F6:E3:DB:DC:8A:E2:83:09:EF:7F:BD:18:71:F6:12:73:82
Certificate issuer: /CN=35cecbf8651a5624f2281dc356a77cd34bd5ba96
Certificate serial: 01973BB181CD2339C45A3266C2102654387A
Authority key identifier: 35:CE:CB:F8:65:1A:56:24:F2:28:1D:C3:56:A7:7C:D3:4B:D5:BA:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/vLw_9uPb3Irigwnvf70YcfYSc4I.roa
Signing time: Wed 04 Jun 2025 16:06:18 +0000
ROA not before: Wed 04 Jun 2025 16:06:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207416
IP address blocks: 195.62.48.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3b:b1:81:cd:23:39:c4:5a:32:66:c2:10:26:54:38:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35cecbf8651a5624f2281dc356a77cd34bd5ba96
Validity
Not Before: Jun 4 16:06:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bcbc3ff6e3dbdc8ae28309ef7fbd1871f6127382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d4:b5:06:e4:f8:35:3b:26:7c:4e:0f:4c:5b:
f6:e7:7a:e2:69:ac:5d:9b:8f:79:06:45:1c:65:f7:
09:00:19:0c:fc:97:95:03:9a:56:da:a4:aa:7d:9f:
ec:94:aa:40:ee:6e:44:2a:93:90:29:c0:83:6c:a8:
a5:a6:70:2c:ec:d7:c2:7a:74:7d:e1:db:6c:3a:47:
89:33:c1:8f:4f:5d:b5:f9:f9:f9:7b:22:5d:9c:dd:
99:6e:dd:ae:58:3a:eb:5a:ca:61:d7:d1:d4:fb:e7:
c2:cb:5e:13:b5:70:3b:7a:82:94:c0:52:d5:3c:b8:
f6:02:da:67:92:69:20:9e:95:dd:12:76:57:b9:41:
2f:3c:64:54:b4:6b:4b:20:b1:c6:e3:b6:c2:0c:a0:
9b:0d:ec:26:73:54:65:6d:9a:fd:41:f7:11:0f:3b:
88:bb:3c:89:c1:27:77:92:e5:7e:08:be:19:37:ce:
f7:96:ae:09:2f:af:fe:c0:0e:a7:d8:4e:18:75:2e:
a7:29:4f:82:15:a6:6b:7e:82:44:c8:43:87:69:c1:
58:1b:2a:9a:4f:2e:73:af:58:23:d2:16:a0:10:87:
a2:07:34:5f:97:28:a2:fd:0b:45:92:db:08:f7:1b:
43:99:c8:1b:10:5a:a3:17:55:d2:7f:7c:e4:15:87:
8a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:BC:3F:F6:E3:DB:DC:8A:E2:83:09:EF:7F:BD:18:71:F6:12:73:82
X509v3 Authority Key Identifier:
keyid:35:CE:CB:F8:65:1A:56:24:F2:28:1D:C3:56:A7:7C:D3:4B:D5:BA:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/vLw_9uPb3Irigwnvf70YcfYSc4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.62.48.0/23
Signature Algorithm: sha256WithRSAEncryption
74:8d:cd:8b:6b:1c:e0:4d:f2:94:bb:1d:7e:a5:e0:f0:4c:0b:
24:3e:f4:ba:e6:50:23:a8:a7:e1:4d:66:1d:e9:a0:08:6a:59:
9f:b8:8f:3a:89:e5:27:cb:31:35:be:59:dc:bf:2c:7a:fb:9c:
31:b3:e6:29:4a:ec:9a:be:05:28:5c:5c:7f:84:98:93:38:93:
64:63:de:09:df:99:71:03:a8:44:8c:d7:62:77:c4:55:9f:8d:
04:42:3f:2b:fe:68:c2:2f:f6:dc:07:ed:73:cf:1a:46:b4:76:
df:6e:1a:22:1b:e3:95:c4:04:f7:ad:51:89:df:72:39:a5:b0:
c0:b4:78:5e:0b:35:5b:b7:c3:2a:d5:24:0f:25:b0:11:7b:11:
f0:db:30:8c:11:24:6f:65:d7:cb:71:a8:16:48:40:fc:2b:a0:
f3:fa:4e:88:91:af:e9:57:3b:db:e1:35:76:52:8f:c0:5d:30:
4b:89:62:bb:24:19:3d:94:29:a1:1b:0c:08:c9:46:38:88:97:
ac:3d:bc:1a:b7:11:0c:df:82:5d:a7:dd:c6:cc:9a:f9:0f:82:
7e:34:cf:13:67:67:aa:d1:2d:ae:36:b6:12:3e:2c:c1:07:92:
c6:20:96:a1:aa:c4:68:4b:8f:88:7c:1c:d9:19:f4:67:e5:9a:
52:c6:38:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:03:01 2025 by rpki-client