Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/OZiwI2QkuuLbAOllr-XJlZEbneE.roa
File: OZiwI2QkuuLbAOllr-XJlZEbneE.roa (raw, json)
Hash identifier: mXAIyClIU1Z4vpuyMsGiBBynCYmQ4v0FodyB8WIXhxk=
Subject key identifier: 39:98:B0:23:64:24:BA:E2:DB:00:E9:65:AF:E5:C9:95:91:1B:9D:E1
Certificate issuer: /CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
Certificate serial: 0197D0C4BCDEB7CB51BC96E0998A58A65AEF
Authority key identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/OZiwI2QkuuLbAOllr-XJlZEbneE.roa
Signing time: Thu 03 Jul 2025 14:50:43 +0000
ROA not before: Thu 03 Jul 2025 14:50:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200746
IP address blocks: 185.109.220.0/24 maxlen: 24
2a0b:8f80:1::/48 maxlen: 48
2a0b:8f80:200::/48 maxlen: 48
2a0b:8f80:300::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d0:c4:bc:de:b7:cb:51:bc:96:e0:99:8a:58:a6:5a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
Validity
Not Before: Jul 3 14:50:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3998b0236424bae2db00e965afe5c995911b9de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:40:cf:6b:10:8d:a3:09:c8:e6:c3:59:83:37:
1a:59:ea:c2:ed:ad:ab:fa:ab:51:fc:9a:18:4f:32:
7e:b6:56:4b:a9:de:3a:39:b1:cf:5e:93:b4:9f:25:
b9:18:19:12:27:11:fb:56:10:19:cc:46:80:9b:35:
c2:60:8a:ac:69:cb:e2:15:b7:e8:f9:49:3d:77:66:
f8:69:d8:82:52:8a:64:d7:b5:c1:f5:53:a9:93:f5:
00:70:a6:05:cb:1b:bb:6f:65:91:58:2e:2d:23:56:
71:52:87:a6:55:cd:66:d8:11:9b:00:f3:9c:64:a0:
52:55:78:53:44:19:50:95:81:cf:3f:af:c9:66:e2:
62:b2:a5:35:0c:2e:98:62:3a:72:3e:ec:9d:27:07:
c3:58:58:29:a7:44:da:e1:97:b3:97:15:95:fd:d6:
a3:78:b1:7e:0d:56:02:df:a3:4a:60:35:94:e8:d0:
d2:06:ea:44:d0:cf:c1:88:ae:56:3b:57:e4:2d:3a:
d5:ef:d3:94:af:17:7f:90:37:5a:3e:b1:9b:fa:56:
e6:6a:f4:0f:0b:2b:fd:9a:61:47:87:22:ce:98:7e:
71:91:3b:c2:dc:2e:d9:dc:cf:d8:2d:58:57:7b:fe:
d2:b4:5a:7c:20:a6:9a:94:67:97:c3:c1:e8:ba:48:
71:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:98:B0:23:64:24:BA:E2:DB:00:E9:65:AF:E5:C9:95:91:1B:9D:E1
X509v3 Authority Key Identifier:
keyid:48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/OZiwI2QkuuLbAOllr-XJlZEbneE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.109.220.0/24
IPv6:
2a0b:8f80:1::/48
2a0b:8f80:200::/48
2a0b:8f80:300::/48
Signature Algorithm: sha256WithRSAEncryption
3c:03:ef:e2:9c:f0:03:c5:21:ad:ac:b8:90:4a:79:de:be:6e:
df:88:35:84:f5:73:42:ea:78:48:b1:cb:b9:7c:d3:61:d4:1a:
c0:65:d2:2e:fb:9e:67:97:70:e7:14:84:4d:35:4c:55:6b:d7:
10:e0:a3:7a:8b:a6:3b:db:d4:42:27:3b:19:b3:58:2c:6e:66:
5e:bc:92:c8:52:8f:b2:e8:f7:35:9a:7f:ce:34:5d:03:2d:8d:
ee:28:f9:e1:06:aa:5a:1b:36:ed:65:4a:c2:69:4a:f2:39:86:
65:d1:4a:17:6d:7d:44:f7:e3:2a:27:3d:bb:75:9b:bf:3f:97:
80:7b:6c:7d:86:da:49:8d:a1:ed:d3:e4:1d:b4:78:03:91:97:
18:e8:ed:69:6f:3e:56:f3:f7:27:8a:0e:18:c5:a6:2a:20:25:
13:c1:e4:41:78:f5:9f:ff:b2:1d:7a:83:ac:f7:c3:51:91:75:
20:63:4a:55:0b:53:14:83:50:f0:c0:2c:a0:9b:97:e7:2c:a0:
b8:97:29:34:fb:89:65:0c:df:a8:d5:ce:11:83:98:db:f7:c2:
43:d9:72:79:80:5d:c0:37:f8:a7:1f:45:5b:0f:81:b3:a6:39:
17:36:19:9d:24:9a:eb:1c:09:26:79:2c:dd:af:4e:68:23:0d:
53:a2:01:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 05:48:17 2025 by rpki-client