Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0jOEL70ZN_Qx9Ce2sv0aqTp_th4.roa
File: 0jOEL70ZN_Qx9Ce2sv0aqTp_th4.roa (raw, json)
Hash identifier: q1+riSMwVsNvpe5Dl4Op0tJCm3RoNaPFktd2VWpruRI=
Subject key identifier: D2:33:84:2F:BD:19:37:F4:31:F4:27:B6:B2:FD:1A:A9:3A:7F:B6:1E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0198A7162F905130BC2EB0D0E04A1D4A3C74
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0jOEL70ZN_Qx9Ce2sv0aqTp_th4.roa
Signing time: Thu 14 Aug 2025 05:38:25 +0000
ROA not before: Thu 14 Aug 2025 05:38:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205533
IP address blocks: 194.48.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a7:16:2f:90:51:30:bc:2e:b0:d0:e0:4a:1d:4a:3c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 14 05:38:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d233842fbd1937f431f427b6b2fd1aa93a7fb61e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7f:f7:97:8a:d1:30:db:69:80:22:e8:33:c1:
7b:fc:6e:43:cd:5a:41:fb:73:db:f3:af:78:a8:67:
3b:17:c5:81:3a:50:2e:1a:67:19:cf:51:77:50:1c:
cf:da:cd:58:41:f2:2f:14:ca:af:21:85:fa:ca:9f:
30:cb:1e:89:49:87:47:0d:27:91:6f:28:fd:e4:83:
0f:20:ea:02:ed:55:00:57:7d:0f:95:4e:11:0c:53:
7a:0b:51:00:6f:b9:62:5d:cc:95:88:dd:d8:bc:3c:
36:6d:b2:60:54:94:81:09:cf:84:ad:37:6a:aa:3d:
ca:4b:0d:0c:6f:42:9d:a1:b1:e5:ba:53:b2:10:11:
08:2b:34:e3:de:85:b2:13:77:5f:17:6d:c2:42:88:
4a:60:c6:a2:8d:32:3a:3b:1d:b9:25:fb:19:00:8c:
73:1c:b8:7b:93:c7:74:bf:be:f6:99:dc:24:dd:38:
f1:95:25:92:81:cf:eb:1e:0a:f2:8a:c0:f7:09:5b:
e1:bd:55:f9:23:34:95:27:75:92:98:cc:d4:0b:f6:
27:c9:6d:ca:67:c5:1a:2f:06:b1:a9:ab:fd:9e:55:
21:89:5a:6c:c8:c7:dc:83:72:a0:4a:5c:f8:2c:d8:
e8:2b:de:c2:4e:87:29:71:83:75:b0:64:80:ba:07:
27:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:33:84:2F:BD:19:37:F4:31:F4:27:B6:B2:FD:1A:A9:3A:7F:B6:1E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0jOEL70ZN_Qx9Ce2sv0aqTp_th4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.251.0/24
Signature Algorithm: sha256WithRSAEncryption
04:16:95:6f:6c:0a:bf:e5:ac:3e:48:ae:ca:c3:8e:91:e8:11:
0e:9c:b8:7a:6a:50:e4:96:70:da:92:55:7d:94:8d:95:29:78:
10:5b:b6:08:8d:00:98:c6:89:18:8b:e6:61:cf:46:86:15:ab:
c1:2a:36:b4:97:1a:24:94:de:6e:79:ca:92:37:f4:3f:13:84:
24:be:39:94:cb:7f:5a:10:67:e7:13:85:b8:1d:07:75:46:c7:
96:79:8f:ec:6c:69:54:15:c2:b9:f0:eb:bd:37:41:83:d8:73:
d3:30:74:37:34:81:f6:23:b3:0a:d7:ef:22:e1:e7:a1:28:a3:
94:f2:b3:b1:47:43:22:11:76:d4:7f:57:27:e0:7c:6f:54:89:
31:e4:09:d5:17:91:28:5a:8c:6c:39:ec:a4:0d:7b:a7:26:2d:
51:4f:53:d3:d9:93:9c:f8:2f:3e:ce:fc:16:05:be:68:ba:b7:
4a:e7:4e:05:ec:c8:39:8f:c7:fb:20:f8:86:9b:0b:e2:89:47:
19:cd:56:37:4f:77:4c:6a:ad:05:6f:50:55:82:c7:7e:25:fc:
2c:b5:3d:b6:03:e3:b5:a1:dd:03:bf:a1:96:02:ca:cd:4e:7c:
d8:1c:4b:dd:81:f7:06:f8:ca:12:02:02:7c:05:c8:c6:7c:15:
6a:2d:13:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:01:16 2025 by rpki-client