Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/j_mFq3QK4QqZbbodnTQ5nIT-9ac.roa
File: j_mFq3QK4QqZbbodnTQ5nIT-9ac.roa (raw, json)
Hash identifier: rRqtBNYdInBy2d8I/r07qFTsAT4SGvJJfcwdQn7ahF0=
Subject key identifier: 8F:F9:85:AB:74:0A:E1:0A:99:6D:BA:1D:9D:34:39:9C:84:FE:F5:A7
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0196A1B49E96BE52898A9B71F7E2B0B4CBE2
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/j_mFq3QK4QqZbbodnTQ5nIT-9ac.roa
Signing time: Mon 05 May 2025 18:28:10 +0000
ROA not before: Mon 05 May 2025 18:28:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137235
IP address blocks: 82.163.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:b4:9e:96:be:52:89:8a:9b:71:f7:e2:b0:b4:cb:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 5 18:28:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ff985ab740ae10a996dba1d9d34399c84fef5a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:99:f6:f7:0e:2c:03:9b:12:d4:ab:e8:0c:81:
e2:1d:20:6b:1d:07:88:45:2c:39:1e:1e:fc:a4:68:
48:82:82:6e:f1:d9:12:2b:ff:90:16:38:32:b5:db:
d3:87:15:dd:dd:a1:7e:a3:1a:8d:bf:79:a0:3d:36:
38:26:57:7e:ef:86:87:7b:11:6a:97:37:cf:af:0d:
33:c1:2c:7f:30:0c:24:79:e9:b5:77:ab:d9:30:6e:
4d:e6:9c:98:c9:fc:a6:c2:50:d0:64:cb:d2:0e:10:
59:ee:ab:fc:e2:f9:90:b0:ad:d5:e4:94:5d:86:60:
bf:60:96:c1:02:bc:05:fb:e6:69:f7:d9:32:52:4c:
9c:e2:7c:5f:7a:10:57:f7:8e:ba:fe:da:95:81:dd:
1a:ab:45:4b:21:a5:66:e5:69:9e:c2:19:6d:3a:b6:
78:b8:45:26:66:21:a6:5b:2a:3f:cf:d2:60:3d:10:
be:c4:32:ea:f5:28:97:73:1d:39:b4:e2:ae:e0:b4:
fa:9a:60:a3:65:e9:b1:41:22:24:e4:d0:2f:33:68:
c1:3a:7c:93:b9:5c:2c:eb:d1:ab:84:bb:d9:cc:3b:
bb:1a:3b:3f:d2:d8:f0:2d:7f:57:a5:1b:e2:fb:a1:
90:e7:ae:00:79:7c:46:b6:87:8a:76:03:8c:1b:bc:
6e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F9:85:AB:74:0A:E1:0A:99:6D:BA:1D:9D:34:39:9C:84:FE:F5:A7
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/j_mFq3QK4QqZbbodnTQ5nIT-9ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.23.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:30:0a:ea:62:51:86:3a:08:42:95:e4:4a:96:47:b3:a0:16:
f0:d2:40:94:da:c6:7e:4d:dd:c9:63:a4:9d:27:85:02:da:15:
aa:b7:eb:0d:aa:cf:d8:61:c5:23:3e:5c:00:0c:a5:bb:8a:12:
2f:94:49:42:15:a7:e8:ed:b1:0f:a1:83:91:0f:1d:2b:61:d4:
bf:66:7f:18:68:e4:8b:e9:6a:e2:3b:4c:a6:1b:66:01:d6:4c:
a0:fa:31:13:e6:35:08:83:68:b4:95:92:db:5f:ae:74:3c:13:
a4:08:3c:c6:93:49:1e:b8:21:1f:38:b8:da:52:36:8e:7d:55:
ff:68:af:6c:c0:bf:20:b8:33:4c:74:24:04:7e:9c:f4:b6:9d:
0e:cc:9e:6b:96:a4:3f:6e:61:89:ef:1c:6a:d5:64:ad:81:bf:
de:92:aa:cc:1a:60:57:88:7a:d2:97:f7:1b:00:ac:1f:da:55:
d2:84:4d:1a:12:a7:0c:0c:b8:f9:ed:56:47:6a:d5:ca:b4:51:
24:96:da:86:39:4e:89:c5:4d:f8:98:80:f0:d9:e3:1f:d1:c5:
2f:cf:4d:e2:d8:f9:34:d7:2b:38:5c:31:96:40:c3:ea:92:86:
65:fe:6d:92:a4:96:cb:28:09:06:f1:87:89:a2:d7:a4:32:a5:
be:07:f6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:13:50 2025 by rpki-client