Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/8ut8tz3y77DXYwwnH4Tk5ohbpoo.roa
File: 8ut8tz3y77DXYwwnH4Tk5ohbpoo.roa (raw, json)
Hash identifier: rjplWuK2sYDzK8S0DsSM/RF7omBp5MfyQgZEev+mntE=
Subject key identifier: F2:EB:7C:B7:3D:F2:EF:B0:D7:63:0C:27:1F:84:E4:E6:88:5B:A6:8A
Certificate issuer: /CN=a316c7659af1d56bc718faf614f092758f5edc7f
Certificate serial: 0197A8F426F6BD8EC4CD379D11CCE5ED3783
Authority key identifier: A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/8ut8tz3y77DXYwwnH4Tk5ohbpoo.roa
Signing time: Wed 25 Jun 2025 21:17:42 +0000
ROA not before: Wed 25 Jun 2025 21:17:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49915
IP address blocks: 212.32.4.0/24 maxlen: 24
212.32.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a8:f4:26:f6:bd:8e:c4:cd:37:9d:11:cc:e5:ed:37:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a316c7659af1d56bc718faf614f092758f5edc7f
Validity
Not Before: Jun 25 21:17:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2eb7cb73df2efb0d7630c271f84e4e6885ba68a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e4:4e:7f:26:e8:eb:e7:3c:f3:28:83:20:30:
6c:ab:6f:cd:cd:4f:20:a5:cb:ad:20:ca:13:bf:ab:
f7:97:d8:0d:74:ec:75:8e:84:9b:cb:27:f4:77:af:
29:24:f4:5e:90:e6:98:fa:0e:a0:9f:2f:52:f0:2c:
a7:8f:b9:c2:c6:81:a5:d0:7a:34:ce:e6:54:7a:eb:
ad:76:0b:c6:21:d4:eb:b9:93:3a:1f:8b:0f:05:0a:
13:95:c4:53:ca:e7:33:54:99:63:d1:1c:5e:17:63:
bd:be:a9:0a:19:42:29:df:b8:a8:64:99:79:c8:c5:
ee:d9:57:a8:fd:7f:b7:bb:41:7b:91:24:f3:72:37:
cd:9f:e2:1a:d9:d7:e2:28:61:b2:f1:09:3a:84:d4:
39:02:27:19:74:10:a1:36:ce:45:58:3d:60:00:3a:
3b:e2:eb:77:cc:3b:73:4f:49:56:f6:82:2d:bf:0c:
6c:4c:e9:22:9f:1e:dd:69:bb:2d:83:28:3e:79:29:
91:ae:bf:57:21:fe:36:05:07:ab:8c:8f:1d:a9:30:
99:a7:38:bf:ad:6b:73:a2:85:77:bb:20:41:da:bf:
64:91:93:4c:b3:43:4f:47:e2:b3:92:6e:d3:b9:15:
b2:65:37:13:54:ed:94:ca:c4:d8:4a:1b:bd:d7:3f:
81:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:EB:7C:B7:3D:F2:EF:B0:D7:63:0C:27:1F:84:E4:E6:88:5B:A6:8A
X509v3 Authority Key Identifier:
keyid:A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/8ut8tz3y77DXYwwnH4Tk5ohbpoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.32.4.0/23
Signature Algorithm: sha256WithRSAEncryption
76:fd:62:75:ed:6f:c4:e2:45:0d:66:6e:a6:ef:41:34:1a:8e:
f6:09:59:22:34:c3:e1:02:d3:c3:ba:33:85:9d:ba:9a:0c:3d:
b7:f1:60:73:c8:92:f6:b4:15:23:08:c7:f0:56:36:fb:1c:84:
06:df:84:43:2f:ce:2d:09:11:71:b9:d2:19:c3:30:b2:29:1a:
91:00:a3:84:55:b0:6c:85:1a:f0:93:fc:ee:1f:2b:59:59:4b:
87:90:56:4f:30:d8:f3:68:33:db:20:73:f3:88:dd:c1:c2:05:
a3:9c:c9:82:fc:76:9d:f3:a5:55:a1:62:d7:16:a7:dd:f3:30:
a8:1b:63:27:eb:30:a6:60:2b:1f:d5:af:2e:c5:3f:36:42:3e:
7f:19:05:85:6f:b4:84:93:0a:56:c3:5d:cd:08:34:1c:5c:45:
d7:59:21:e5:8c:86:1b:d9:63:3f:61:5b:bf:d5:3a:1b:3d:b6:
4d:ab:39:55:8e:44:ca:0a:1d:e4:bd:1d:1b:e0:11:a9:d2:50:
74:4c:a0:a4:e2:81:b2:72:31:cb:8d:9c:74:0c:03:96:ba:d2:
a5:d5:7d:f0:42:50:cc:6d:dc:a2:d9:e2:7b:14:34:94:ee:91:
8a:fb:3a:b1:13:5e:d5:92:76:5d:ad:85:5d:6b:aa:2a:79:d4:
90:3b:23:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 21:40:56 2025 by rpki-client