Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/lFi_2CDHgTPSR-Xxo-U5ohxluu8.roa
File: lFi_2CDHgTPSR-Xxo-U5ohxluu8.roa (raw, json)
Hash identifier: u4qJFUu2v9DMBJmArLe+Y/Q/WiHYmJsHB3rpShxcurw=
Subject key identifier: 94:58:BF:D8:20:C7:81:33:D2:47:E5:F1:A3:E5:39:A2:1C:65:BA:EF
Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Certificate serial: 0198C8A181551B221FDE6BE213053AF6CAF1
Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/lFi_2CDHgTPSR-Xxo-U5ohxluu8.roa
Signing time: Wed 20 Aug 2025 17:58:04 +0000
ROA not before: Wed 20 Aug 2025 17:58:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13335
IP address blocks: 193.162.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c8:a1:81:55:1b:22:1f:de:6b:e2:13:05:3a:f6:ca:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Validity
Not Before: Aug 20 17:58:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9458bfd820c78133d247e5f1a3e539a21c65baef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c3:d0:d0:a0:d2:4c:0a:df:80:0a:a2:2d:f4:
df:8c:2b:d9:0a:f8:07:12:94:c3:a2:19:56:87:9f:
ce:2c:6b:8a:d9:30:65:0e:57:83:51:83:b5:48:17:
07:e4:51:1d:25:9a:7a:39:59:80:6e:a3:eb:16:92:
eb:85:63:93:85:a8:19:ce:68:0b:c9:74:d8:b0:20:
a8:e8:c9:d6:bf:4b:60:c7:c6:a2:27:4e:8c:4c:36:
b6:db:8d:e4:69:6f:c1:8d:10:2b:f4:1e:56:24:bf:
56:70:c5:3d:78:4e:17:2e:20:74:a1:0f:e0:a6:c9:
b3:ee:ec:5c:cb:dd:d3:35:59:65:4e:dc:07:87:6f:
af:6b:ab:77:82:f0:53:fb:cc:f5:41:ad:ea:01:52:
1d:2b:68:9b:b2:68:8c:d3:34:cc:fe:a1:8e:12:70:
62:5e:3b:e2:3f:71:08:58:3f:50:ae:20:57:d9:1e:
f7:9a:e3:96:e7:29:73:b9:aa:9d:c8:14:cc:c2:d1:
01:e6:c2:29:b2:d1:e8:16:a4:f5:77:45:29:a2:30:
74:39:0e:f7:77:6c:ad:7e:48:b2:60:a1:41:1a:70:
9a:5e:7e:b4:78:f3:5a:9d:e3:4d:44:83:e3:43:0d:
95:a0:d2:7f:96:8c:ab:87:81:72:c5:72:c1:1b:33:
e5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:58:BF:D8:20:C7:81:33:D2:47:E5:F1:A3:E5:39:A2:1C:65:BA:EF
X509v3 Authority Key Identifier:
keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/lFi_2CDHgTPSR-Xxo-U5ohxluu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.35.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:0c:88:f8:8c:d8:a0:0d:2d:28:6b:26:a6:87:78:05:09:e0:
56:88:d5:7f:d6:09:a9:99:42:59:fe:f5:e8:79:b8:94:6a:58:
f0:1b:35:17:99:f2:22:80:f3:20:0c:5d:de:78:d4:19:26:36:
f8:43:23:66:fb:0b:9a:cd:e6:3c:0d:06:7c:1c:5d:a3:96:25:
31:aa:39:cc:a3:07:6c:9d:77:00:bf:5c:f6:79:ec:9d:99:dc:
7a:c1:62:26:97:78:13:17:8f:46:f5:65:72:e0:e3:34:2a:bd:
a6:51:1c:93:fe:55:03:bc:83:31:83:30:b1:58:bf:1e:3b:1e:
94:90:a1:c2:64:53:e8:b9:91:86:ea:4c:92:4d:d2:b5:73:91:
7f:e1:fb:8f:07:d7:d5:fc:db:f8:c9:d4:33:b9:ab:d0:21:38:
d7:98:61:88:7a:bf:c1:e3:2f:7e:8d:2d:31:22:83:f8:ad:73:
6e:1b:c2:0f:69:03:1a:51:07:52:47:18:09:8c:0b:52:f8:1c:
c4:34:bf:58:df:cc:a1:75:84:01:13:c5:19:5f:b9:d1:62:e1:
c9:67:09:cc:31:bd:d7:c5:c3:d5:ec:30:21:c1:e5:02:ac:2d:
02:c2:a9:a9:be:d6:a2:cb:d5:e1:a7:f3:5e:ce:dd:f9:3d:5b:
54:10:02:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:01:56 2025 by rpki-client