Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/WoH6vxMYL_jg-8p0odkeEMIsBSQ.roa
File: WoH6vxMYL_jg-8p0odkeEMIsBSQ.roa (raw, json)
Hash identifier: PFYSfjk/TZH+dWHYEI4offRLqaiLkmGHGOmnG5awXXk=
Subject key identifier: 5A:81:FA:BF:13:18:2F:F8:E0:FB:CA:74:A1:D9:1E:10:C2:2C:05:24
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0197A635E956012CB1CDDEE1DBE3D005F91E
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/WoH6vxMYL_jg-8p0odkeEMIsBSQ.roa
Signing time: Wed 25 Jun 2025 08:30:40 +0000
ROA not before: Wed 25 Jun 2025 08:30:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8881
IP address blocks: 208.123.188.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a6:35:e9:56:01:2c:b1:cd:de:e1:db:e3:d0:05:f9:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 25 08:30:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a81fabf13182ff8e0fbca74a1d91e10c22c0524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b7:76:a3:cc:a6:c8:cd:b5:4a:9d:f0:e4:af:
55:07:26:e4:f4:83:49:b4:a6:78:b0:08:b2:ec:1b:
a8:80:8d:54:2e:4e:7d:b5:fa:d9:fb:dd:5f:39:89:
69:0e:0a:39:36:32:e1:01:3d:a7:79:fc:f8:94:69:
a3:62:b1:ea:67:ae:c0:5e:7e:a2:c7:11:9e:00:8c:
27:ac:3d:99:ed:96:b4:aa:e1:8d:8d:de:41:56:a5:
10:0a:44:9e:03:d0:ec:f0:9d:27:d8:e3:ed:a7:31:
0e:f8:a2:c9:36:ce:00:07:36:fc:bc:54:1b:f8:5f:
c2:ec:8b:35:e1:ce:f1:03:55:27:a2:29:53:3f:f6:
73:3f:4c:6b:9e:c3:c8:a0:53:b8:92:6a:dc:21:34:
ab:93:76:66:35:3a:b9:c7:4b:32:77:af:46:af:33:
0a:74:7f:7c:16:1a:7c:d8:92:8f:65:ec:c3:81:9c:
bd:f6:0b:2e:be:2d:81:42:50:af:f2:f9:da:60:3d:
86:bc:93:a4:4e:c0:97:91:4f:ce:c1:bc:84:c8:3b:
a1:89:08:5f:16:43:62:6f:39:94:7c:53:cf:c3:5b:
c6:41:81:16:75:f8:a1:a0:1b:a6:8c:1d:f1:6a:16:
e8:0c:ac:1a:88:47:34:f0:0f:f1:76:78:b2:bd:37:
b4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:81:FA:BF:13:18:2F:F8:E0:FB:CA:74:A1:D9:1E:10:C2:2C:05:24
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/WoH6vxMYL_jg-8p0odkeEMIsBSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
208.123.188.0/23
Signature Algorithm: sha256WithRSAEncryption
47:86:92:3f:db:fa:8a:bc:00:eb:b5:d4:a5:c4:27:77:1f:3b:
b0:5d:76:79:e1:92:9d:18:34:f4:3a:28:54:bc:4c:10:80:2e:
ce:73:de:c5:bc:a4:26:a6:70:e1:76:f7:4d:f9:2e:da:36:c9:
2d:31:42:e6:87:08:32:eb:a3:02:eb:5b:24:04:46:0c:21:54:
c1:da:dd:7e:61:9d:19:44:67:13:a3:13:b7:0d:07:e6:5b:1d:
3c:90:09:70:a2:b0:06:05:c2:eb:bc:b2:94:d3:fc:9e:04:21:
2b:88:7a:4d:7a:ca:b8:2b:d2:17:e6:20:31:df:94:b5:a5:bd:
23:5b:17:9f:5b:c6:5d:08:75:3f:be:dc:b7:9b:ee:b5:ac:de:
87:48:05:28:42:fc:31:22:ec:e8:37:b1:e4:a9:35:c2:9d:89:
de:21:23:c9:bc:5a:6c:08:03:75:0e:93:5e:e4:b3:96:72:dc:
e9:a2:76:8f:09:2b:13:5b:a0:d5:a9:3d:48:dc:45:f1:91:0d:
7d:1e:e2:10:26:52:14:1d:95:a9:6d:6c:fa:16:d4:9b:b9:b4:
e2:f1:4f:df:2f:c4:ae:47:1d:07:2a:32:62:82:9e:b4:36:7b:
fe:fd:ec:75:de:13:a5:b3:a7:b9:51:6b:44:a0:1f:81:b9:52:
c2:85:4b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:04:49 2025 by rpki-client