Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/koKSsh0-VJlmkHnyY2l_458AY1Y.roa
File: koKSsh0-VJlmkHnyY2l_458AY1Y.roa (raw, json)
Hash identifier: wTDfdV34gD9aFGM5sgCKWF1UFQUQvF6lhIIkmPFqzYk=
Subject key identifier: 92:82:92:B2:1D:3E:54:99:66:90:79:F2:63:69:7F:E3:9F:00:63:56
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 019793DBC72D6BC67288F6FDAAC99451C2F2
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/koKSsh0-VJlmkHnyY2l_458AY1Y.roa
Signing time: Sat 21 Jun 2025 18:59:03 +0000
ROA not before: Sat 21 Jun 2025 18:59:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202984
IP address blocks: 83.142.209.0/24 maxlen: 24
83.142.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 02:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:93:db:c7:2d:6b:c6:72:88:f6:fd:aa:c9:94:51:c2:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Jun 21 18:59:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=928292b21d3e5499669079f263697fe39f006356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2f:dc:01:49:4e:e8:ff:8c:5e:a8:24:c6:77:
d5:81:b6:ea:80:8d:e2:f6:72:cd:e7:0c:06:3f:82:
65:55:16:ad:dc:7e:aa:e9:69:2b:02:6c:7b:43:de:
9b:b2:65:13:08:ed:84:80:2b:cc:eb:8e:7e:5b:fb:
21:1e:58:c5:cc:f4:c3:c5:85:a9:a7:65:a8:87:54:
f3:b4:38:f6:8a:da:ab:66:b3:b9:9a:86:2f:3a:bc:
a0:59:c0:5d:22:9a:85:be:37:e2:d0:32:ca:b5:f9:
5d:16:6b:03:c3:05:f9:28:f1:fb:95:47:83:04:f3:
76:64:71:4a:d6:f6:1b:d4:77:bc:4e:96:3c:18:b8:
ae:0a:04:b9:70:eb:b0:0d:72:ef:4a:97:4b:7e:dc:
20:51:46:91:92:38:0e:86:66:be:ea:ab:94:81:c7:
94:cf:61:cc:6c:37:42:b0:fb:e2:ac:0f:b5:e5:aa:
b1:a9:fe:16:f3:5b:2f:9a:ff:1b:db:c0:c0:64:e8:
48:69:61:fc:55:8d:fb:9b:d4:47:a4:df:d8:3f:37:
b9:a6:30:e3:75:51:f9:6a:d4:5d:83:ba:e8:53:19:
a9:ea:4e:db:2d:75:93:d6:a0:7c:f7:6d:76:27:bb:
2f:c9:14:d7:cb:f0:ad:4d:15:59:44:d7:ab:ec:ed:
49:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:82:92:B2:1D:3E:54:99:66:90:79:F2:63:69:7F:E3:9F:00:63:56
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/koKSsh0-VJlmkHnyY2l_458AY1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.142.209.0/24
83.142.214.0/24
Signature Algorithm: sha256WithRSAEncryption
73:87:86:5f:7a:7a:06:d2:93:0a:7c:46:f3:a3:39:b2:71:b9:
a0:9f:84:8a:7b:e5:d7:a6:c2:e4:98:7d:7a:f2:d6:a7:31:d9:
ad:cd:39:64:bc:ca:c7:2f:9c:94:f7:86:3b:17:8d:08:be:cf:
f2:b7:ae:05:18:ef:ee:50:94:d4:3c:22:31:f2:d9:9f:4d:d0:
78:6e:e4:b6:9f:f5:5e:37:60:64:fa:80:91:ce:81:e4:68:d1:
64:47:1d:d5:25:d2:9c:42:cf:46:f8:59:c6:16:54:bd:9f:14:
87:13:76:8e:43:e4:12:db:8f:6e:78:16:81:de:11:0c:95:3f:
fc:b7:af:78:5e:74:e7:b1:30:d7:cd:21:39:9b:9c:7c:5e:c6:
87:4f:7d:64:a2:9e:6b:2d:cc:8c:8b:a9:4f:a3:6f:44:ca:71:
8e:3d:ed:c9:49:cc:6b:7b:21:de:b1:4e:00:8b:36:6c:ab:fe:
19:6c:a0:b0:28:06:80:ac:a5:49:c6:7e:50:b8:55:f4:2f:c2:
5b:68:54:a3:e1:a4:b0:31:97:77:5c:64:b8:ed:24:8c:04:ce:
29:10:e8:0f:a9:6c:2d:58:19:3d:58:14:b4:44:c5:54:1b:28:
6f:5a:16:dc:2e:aa:92:d3:8f:db:bf:c4:20:a1:a7:55:51:1b:
e4:d8:d2:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 11:23:09 2025 by rpki-client