Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/8SCwalNOCtaX1GmWAS6VFuVHGa4.roa
File: 8SCwalNOCtaX1GmWAS6VFuVHGa4.roa (raw, json)
Hash identifier: MCBdmn43q9v0IHNEMsKZZxueWeuhZImr9/xukqPZ3tY=
Subject key identifier: F1:20:B0:6A:53:4E:0A:D6:97:D4:69:96:01:2E:95:16:E5:47:19:AE
Certificate issuer: /CN=c1e3a44ae8cf0243f1dffe2684e3dd5a8fc85d79
Certificate serial: 01968690ADD0A56F08A61492CFB1E6D8DFF5
Authority key identifier: C1:E3:A4:4A:E8:CF:02:43:F1:DF:FE:26:84:E3:DD:5A:8F:C8:5D:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/weOkSujPAkPx3_4mhOPdWo_IXXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/8SCwalNOCtaX1GmWAS6VFuVHGa4.roa
Signing time: Wed 30 Apr 2025 11:59:10 +0000
ROA not before: Wed 30 Apr 2025 11:59:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202240
IP address blocks: 79.98.188.0/22 maxlen: 24
2a05:bc40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/weOkSujPAkPx3_4mhOPdWo_IXXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:90:ad:d0:a5:6f:08:a6:14:92:cf:b1:e6:d8:df:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1e3a44ae8cf0243f1dffe2684e3dd5a8fc85d79
Validity
Not Before: Apr 30 11:59:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f120b06a534e0ad697d46996012e9516e54719ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c5:3c:75:70:6e:64:74:9a:f3:84:1e:90:90:
4a:e9:e7:83:1a:e5:5a:5d:ba:a0:0b:e7:72:d1:2c:
20:30:e6:a4:82:b4:7d:05:d8:a8:0c:00:82:5f:9f:
46:4f:cd:e8:07:50:5d:58:2d:ad:c6:11:9b:88:b9:
d2:1f:ec:b7:dd:91:6e:00:b1:34:f2:76:bc:27:93:
9b:05:6c:5c:f4:99:b2:46:55:ed:96:9b:73:05:91:
1d:3d:dc:c1:df:07:91:bb:3c:9b:60:96:df:cc:21:
80:11:ae:fb:86:33:6d:a8:42:9a:de:03:ee:4b:3f:
a4:cd:2c:4f:be:65:a9:27:78:79:9e:31:d8:5a:db:
c7:22:1c:9b:db:9e:f6:d8:ab:dc:26:d3:ca:88:ba:
11:24:4c:d2:c4:15:3b:d0:dd:72:7c:53:2f:16:d7:
5f:0c:88:58:cd:da:77:d0:35:ab:5d:79:ec:d7:02:
85:99:d5:70:9a:84:9f:b7:45:55:15:e0:5e:7b:17:
37:f0:b1:68:b6:7c:61:39:fa:98:81:d5:db:78:34:
e3:dc:61:c5:b5:9b:6c:5f:99:e7:25:1c:f0:b7:a5:
25:40:dc:b5:3a:f8:cf:06:c9:c4:14:fb:34:99:e7:
71:f8:1d:18:06:66:79:de:be:e4:f2:fc:3b:34:3c:
cc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:20:B0:6A:53:4E:0A:D6:97:D4:69:96:01:2E:95:16:E5:47:19:AE
X509v3 Authority Key Identifier:
keyid:C1:E3:A4:4A:E8:CF:02:43:F1:DF:FE:26:84:E3:DD:5A:8F:C8:5D:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/weOkSujPAkPx3_4mhOPdWo_IXXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/8SCwalNOCtaX1GmWAS6VFuVHGa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.188.0/22
IPv6:
2a05:bc40::/29
Signature Algorithm: sha256WithRSAEncryption
80:de:2c:4c:84:fd:fb:04:6a:c8:41:fe:25:41:e4:04:a1:f8:
e9:26:f6:1e:15:6d:b6:de:10:07:c1:66:6c:93:b5:13:e1:da:
0a:62:22:4d:7b:5b:41:68:65:40:4d:d3:31:59:64:49:3c:bc:
99:b1:99:31:8f:8f:b1:91:04:5c:0d:91:43:0c:70:99:2a:57:
74:bb:3d:58:7c:55:4e:0a:17:25:a1:9d:b2:71:8a:59:45:97:
37:c4:2b:a2:af:c1:7f:cd:bf:c1:ea:f4:f8:b0:16:9c:dc:21:
e1:df:b3:69:76:d6:47:c7:5f:f2:c0:01:e9:fe:0b:2a:8b:83:
e4:ff:41:84:c4:4c:3e:66:e5:ba:75:24:eb:4b:c3:97:c9:bf:
8f:76:f8:29:16:f6:ff:89:2f:fb:23:8d:11:da:22:f2:81:97:
00:99:11:f1:92:46:a1:ae:a9:2d:4a:e7:46:50:24:42:0f:34:
55:0e:7a:d7:f8:89:9c:f0:8c:d2:f9:10:2f:5d:43:08:2c:4b:
2c:40:f5:48:7d:e5:4d:32:b6:66:34:ea:92:81:0f:09:1e:6b:
1b:b1:d6:3a:42:ce:41:a9:4b:dc:9a:10:ba:88:cb:77:54:9c:
aa:0a:33:5e:df:ff:21:d9:13:62:59:f8:56:07:7d:61:45:ce:
86:76:68:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:34:01 2025 by rpki-client