Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/o8np3zJ4cKbrdrT19ZQDltXihvY.roa
File: o8np3zJ4cKbrdrT19ZQDltXihvY.roa (raw, json)
Hash identifier: i1EUazPdXLkHwvwX3uSN42W0ZgLuxeFlST0DkWLZAtI=
Subject key identifier: A3:C9:E9:DF:32:78:70:A6:EB:76:B4:F5:F5:94:03:96:D5:E2:86:F6
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01969A47119214DAD782883B3D9DD822485B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/o8np3zJ4cKbrdrT19ZQDltXihvY.roa
Signing time: Sun 04 May 2025 07:51:10 +0000
ROA not before: Sun 04 May 2025 07:51:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136501
IP address blocks: 217.60.0.0/21 maxlen: 24
217.60.12.0/22 maxlen: 24
217.60.24.0/22 maxlen: 24
217.60.36.0/22 maxlen: 24
217.60.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 12:57:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9a:47:11:92:14:da:d7:82:88:3b:3d:9d:d8:22:48:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 4 07:51:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3c9e9df327870a6eb76b4f5f5940396d5e286f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0d:17:b8:96:79:fd:c0:4f:b4:5c:ba:8d:ed:
c9:84:6c:6e:f4:ed:17:67:4e:1a:af:3e:f4:21:3b:
b5:d0:a1:c8:71:bb:ec:f2:b9:f0:4a:a9:66:cc:15:
bc:75:76:3a:36:9e:6d:cb:c9:c7:c9:de:10:03:36:
f4:21:97:92:78:d0:1c:3f:44:33:71:d2:4f:01:f6:
33:36:13:0a:e1:87:76:a3:bf:58:89:7a:9f:01:68:
91:9c:19:78:7e:5f:16:f1:c5:21:da:18:d1:75:92:
a7:1f:b1:7f:0f:f3:64:61:9d:65:9d:4f:70:f0:09:
ca:23:7b:d6:01:e0:05:a7:4c:49:20:0e:1b:74:d5:
86:d7:a1:eb:da:3e:a6:13:3d:1c:e4:79:af:40:b2:
a8:a9:ce:20:54:dd:ac:7e:6d:d5:04:95:7c:e0:1a:
92:60:7f:8e:7b:3d:7c:df:bb:4c:a9:07:68:9a:63:
2c:af:b7:d7:5f:24:34:89:c6:1c:3e:a3:71:9d:2e:
c7:86:ff:1f:d8:b8:96:ad:55:49:38:c9:eb:6e:e8:
0f:a3:cb:0d:73:fc:a6:bf:90:eb:7d:3e:aa:5a:9b:
6f:02:cd:b6:06:59:f1:04:b3:d0:c0:e8:97:ee:d5:
c4:fb:cd:2b:a7:73:d3:da:a8:13:66:52:11:9d:e9:
b1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C9:E9:DF:32:78:70:A6:EB:76:B4:F5:F5:94:03:96:D5:E2:86:F6
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/o8np3zJ4cKbrdrT19ZQDltXihvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.0.0/21
217.60.12.0/22
217.60.24.0/22
217.60.36.0/22
217.60.60.0/22
Signature Algorithm: sha256WithRSAEncryption
47:5e:02:85:37:39:bd:9c:1a:3c:a5:4b:89:45:31:8a:0d:ff:
2e:19:b4:dd:e2:3f:5b:24:e9:f1:5d:1d:cc:08:81:34:1a:20:
f0:e0:b2:d6:5e:70:84:bc:ce:56:23:b4:a2:40:cd:36:67:84:
45:5a:40:ec:3e:c4:14:c4:63:fb:dd:7a:d4:47:4a:9b:3e:42:
59:c0:ed:36:4f:2d:d3:7d:a3:a9:a9:44:2f:9a:28:02:d9:15:
15:c4:d2:3f:97:9e:21:3c:0c:14:c0:21:c9:42:04:f9:95:fe:
86:4a:eb:bc:1c:ba:f9:b7:c9:35:15:71:e7:e8:e6:f6:41:68:
a4:fd:e4:9b:a8:88:8b:c5:8c:7f:20:61:7d:69:92:5b:bb:2e:
2f:4e:96:cb:57:cb:54:d6:ea:8c:c1:1c:29:f0:d9:00:39:a2:
27:71:6f:41:0a:fd:ed:15:fe:33:f7:11:1e:ce:fe:c4:31:4d:
34:42:70:83:6f:76:df:81:21:e6:bf:1c:ae:7d:21:4c:cc:2a:
d2:92:ee:20:bf:a9:59:18:9d:27:a0:8d:26:41:ff:4e:24:b5:
93:45:6f:c7:61:b0:d6:a8:15:bd:47:56:8d:93:8a:22:62:6d:
2b:6a:9e:54:f2:ea:ac:1c:1e:73:86:e9:17:da:84:0d:09:e9:
c9:32:cd:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:09:10 2025 by rpki-client