Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/M08pG0WnhIQX2KOfjmHJXSyaCoc.roa
File: M08pG0WnhIQX2KOfjmHJXSyaCoc.roa (raw, json)
Hash identifier: 7/2skEcs3WncoMu7ukPnikjrb0ygdobEezSJD1ACHfA=
Subject key identifier: 33:4F:29:1B:45:A7:84:84:17:D8:A3:9F:8E:61:C9:5D:2C:9A:0A:87
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 019779F12DA399010C28BEA4968FED3052A2
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/M08pG0WnhIQX2KOfjmHJXSyaCoc.roa
Signing time: Mon 16 Jun 2025 18:12:18 +0000
ROA not before: Mon 16 Jun 2025 18:12:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214774
IP address blocks: 109.107.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:f1:2d:a3:99:01:0c:28:be:a4:96:8f:ed:30:52:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jun 16 18:12:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=334f291b45a7848417d8a39f8e61c95d2c9a0a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:35:29:75:56:ca:13:d6:47:12:eb:3e:c0:60:
9d:f1:a4:7e:52:ed:0d:0b:a7:0d:13:28:b7:82:d5:
a2:00:8c:c8:d4:73:fe:cd:64:04:66:62:b9:5d:04:
44:65:9c:71:ea:6c:81:38:da:9f:0e:23:c8:3f:f8:
e8:45:dd:52:1d:7c:e6:f1:84:e5:26:25:ed:43:7f:
fc:e3:79:a2:56:17:23:70:62:f0:77:05:a0:b1:72:
2e:0c:40:57:e0:0c:30:44:93:46:d6:7f:f4:a0:14:
e0:15:be:d0:78:8f:72:12:fe:b7:09:82:85:73:72:
dd:c3:8f:66:bb:55:68:3f:c2:a6:c3:b4:63:0b:09:
0d:7b:18:4f:70:80:90:26:c6:50:70:c6:db:59:04:
f7:b7:b0:3c:8f:37:15:26:7d:63:d8:11:52:d9:52:
7b:12:b7:8e:60:c3:3a:07:82:8b:e4:8b:74:0e:56:
12:67:a6:72:10:23:4f:3b:eb:92:ef:26:95:05:67:
3d:cb:64:d8:68:d9:fa:c1:3c:a6:5b:f9:4b:9d:df:
7d:bd:33:37:d4:b2:88:9b:e9:a1:ad:2a:cb:23:a7:
b3:fd:1e:8f:40:87:43:da:1f:31:d4:18:ca:58:8c:
f1:8a:61:ef:1f:5f:92:0b:0b:10:f7:cb:2b:7a:d9:
fc:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:4F:29:1B:45:A7:84:84:17:D8:A3:9F:8E:61:C9:5D:2C:9A:0A:87
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/M08pG0WnhIQX2KOfjmHJXSyaCoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.155.0/24
Signature Algorithm: sha256WithRSAEncryption
53:46:f3:b2:f0:0f:4c:be:ee:7c:a9:8d:32:b8:0d:17:28:3f:
96:1b:94:dc:84:32:7c:2b:d2:de:33:26:4c:11:bd:f4:83:28:
5b:50:1f:e1:ca:2d:64:03:c4:43:2a:dc:65:28:c8:a7:b2:e9:
59:b5:88:d2:04:1a:ac:e3:89:21:06:22:f5:d6:9f:45:15:06:
4c:d7:8a:eb:bb:8e:5a:d1:16:87:6a:58:eb:8b:91:6a:8a:e9:
43:62:a5:ee:6f:10:23:4d:c2:cb:5a:ba:6e:8e:6b:8a:bd:97:
68:68:a5:b5:58:6f:93:7e:d7:6c:3c:9f:80:fa:32:01:be:1f:
a8:b0:a0:78:1c:70:ee:a9:3a:70:7f:68:27:d1:9b:aa:27:9f:
84:15:76:5c:53:ba:a7:5d:50:d8:48:6b:cb:2e:8c:53:c4:62:
ac:3e:e0:9e:00:9c:24:ce:35:b0:02:cd:59:56:57:49:1f:14:
59:8e:8c:01:a8:50:73:b3:64:ff:38:2b:38:58:08:07:99:5c:
ba:ad:5d:44:9a:58:49:6d:ce:e5:f8:61:28:5c:10:1a:a4:c6:
3d:19:b3:6e:03:95:fe:fc:9d:ef:fe:91:4d:fa:44:6a:10:46:
d7:08:a7:4c:f7:a3:0f:c6:5c:49:65:5a:cc:54:42:11:bc:8b:
fa:2d:22:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:06:04 2025 by rpki-client