Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/bO1VBPqpSOaGTv0D3U1J8a3Ogsk.roa
File: bO1VBPqpSOaGTv0D3U1J8a3Ogsk.roa (raw, json)
Hash identifier: YtTxtq7GNbE/i9Tq037SwqJYKg04qn/GGhCrb6d2v/w=
Subject key identifier: 6C:ED:55:04:FA:A9:48:E6:86:4E:FD:03:DD:4D:49:F1:AD:CE:82:C9
Certificate issuer: /CN=8abdc26cddc0bbcfa354f11a01e6ff01296b3c7b
Certificate serial: 0194258F9B3FEC8DF4D387B1690861B5F8B6
Authority key identifier: 8A:BD:C2:6C:DD:C0:BB:CF:A3:54:F1:1A:01:E6:FF:01:29:6B:3C:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ir3CbN3Au8-jVPEaAeb_ASlrPHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/bO1VBPqpSOaGTv0D3U1J8a3Ogsk.roa
Signing time: Thu 02 Jan 2025 05:49:15 +0000
ROA not before: Thu 02 Jan 2025 05:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50304
IP address blocks: 86.111.48.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ir3CbN3Au8-jVPEaAeb_ASlrPHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:9b:3f:ec:8d:f4:d3:87:b1:69:08:61:b5:f8:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8abdc26cddc0bbcfa354f11a01e6ff01296b3c7b
Validity
Not Before: Jan 2 05:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ced5504faa948e6864efd03dd4d49f1adce82c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b4:71:7f:e9:df:41:cc:8a:47:b6:66:85:dd:
da:46:15:e3:2b:93:05:ae:e4:1e:9c:f9:57:8a:52:
84:62:60:b8:e8:57:04:38:b6:82:1f:33:54:94:65:
b3:b0:16:e6:ae:0c:c2:60:98:9f:fd:d9:75:1a:53:
3f:55:13:f6:54:1c:bc:7c:1c:f2:67:d2:1a:07:e1:
c4:42:f4:d2:6d:1f:8e:c9:bf:54:17:e7:34:1d:5f:
4c:e0:fc:01:9a:d8:2e:52:20:a6:51:d3:92:cf:1f:
c7:d2:65:23:e1:6e:fa:39:de:b7:f7:b9:d0:3c:74:
b5:9b:06:ad:fd:7d:ea:65:6c:ce:f0:f9:e3:db:dc:
ae:05:17:7d:05:3f:80:6d:f7:2e:26:d0:08:a3:be:
46:53:60:5e:50:ab:89:ea:3d:69:5f:61:34:84:dd:
72:13:1f:e4:49:2d:ce:af:eb:92:d2:3b:56:8c:ff:
60:01:d9:2f:f3:00:b2:32:34:53:72:70:46:ef:61:
36:2c:a1:b6:1d:a8:b5:c4:c8:a0:82:65:f5:f8:11:
47:7b:48:af:f6:68:47:d4:92:fc:75:82:d1:7a:91:
3c:b5:c2:70:ed:c8:ef:33:29:8a:26:12:ff:1f:be:
3e:52:ba:15:82:8d:42:59:be:5b:4b:85:90:07:cb:
34:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:ED:55:04:FA:A9:48:E6:86:4E:FD:03:DD:4D:49:F1:AD:CE:82:C9
X509v3 Authority Key Identifier:
keyid:8A:BD:C2:6C:DD:C0:BB:CF:A3:54:F1:1A:01:E6:FF:01:29:6B:3C:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ir3CbN3Au8-jVPEaAeb_ASlrPHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/bO1VBPqpSOaGTv0D3U1J8a3Ogsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.111.48.0/23
Signature Algorithm: sha256WithRSAEncryption
17:1a:bf:f6:af:03:e6:24:4c:42:23:cc:78:1c:eb:bf:65:83:
4f:2e:21:b6:93:09:39:34:53:40:c1:6c:e8:f4:c3:5e:c9:f3:
96:7c:69:25:82:9a:48:8f:e9:7f:d0:0c:58:8c:16:61:b6:42:
4b:b5:a0:f5:0d:93:76:87:8e:f2:d6:36:cb:18:ac:25:a2:78:
69:36:1f:02:a7:5f:dd:4f:d9:52:10:cd:f8:4b:76:be:93:c6:
e0:2a:ae:c6:e4:1f:c3:7a:00:ac:17:ff:1b:71:0d:b7:79:1e:
1a:a2:4a:89:e2:be:bc:92:59:3b:56:cb:b5:1a:0e:0d:f1:e8:
67:33:48:7e:8c:6b:c0:e9:ae:b9:8e:e1:45:6d:29:64:43:4d:
1f:f9:25:e4:b7:03:5a:2f:3b:87:d7:54:fc:da:c0:17:21:40:
3b:d8:e0:77:f7:0c:f7:bb:21:66:f9:16:45:e8:76:ec:33:c0:
f9:41:d0:82:1f:9f:46:a7:e6:34:d1:7d:07:ef:6f:b0:04:7c:
72:e7:33:62:d6:ec:05:60:77:55:b1:d9:42:a4:21:e0:c5:c6:
e1:47:c5:ea:4b:b4:21:d9:2d:27:41:1e:ec:52:0e:b7:76:9b:
76:68:bf:d7:7a:2c:78:50:63:7d:db:95:84:fa:e4:54:95:7b:
db:75:36:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:34:06 2025 by rpki-client