Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/hkOClaI0qOhDiy4ef1cnw5LLJH4.roa
File: hkOClaI0qOhDiy4ef1cnw5LLJH4.roa (raw, json)
Hash identifier: X9wMXvkSFUXL8jSDc6OPMWMjTZZ+zuK6wmkFI6Bxiao=
Subject key identifier: 86:43:82:95:A2:34:A8:E8:43:8B:2E:1E:7F:57:27:C3:92:CB:24:7E
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 0196734BCF9B289F1A02A64A84138CC50062
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/hkOClaI0qOhDiy4ef1cnw5LLJH4.roa
Signing time: Sat 26 Apr 2025 18:11:10 +0000
ROA not before: Sat 26 Apr 2025 18:11:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 87.254.11.0/24 maxlen: 24
185.210.168.0/23 maxlen: 24
217.25.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:4b:cf:9b:28:9f:1a:02:a6:4a:84:13:8c:c5:00:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Apr 26 18:11:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=86438295a234a8e8438b2e1e7f5727c392cb247e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f1:84:c1:f0:6b:06:8d:5f:52:c4:8d:7e:aa:
15:ca:6e:36:e5:a0:cf:a9:af:97:23:4a:55:b8:8b:
c5:a3:33:3f:32:aa:f0:4e:94:cb:55:a7:63:fd:42:
b1:1d:6c:b5:21:88:d4:7f:62:b2:b2:f2:26:ae:43:
d9:db:9a:03:dd:e6:40:03:6b:f1:8b:42:ed:e4:0e:
63:10:fa:cc:26:c5:a9:d6:fe:d9:82:01:eb:fd:f1:
26:ff:2a:68:c1:e1:5c:40:f3:f5:90:f3:af:57:e3:
84:44:f5:7c:af:15:34:8b:e8:df:4e:27:5d:26:2c:
bc:4a:1b:9f:1a:44:d2:e7:5e:f3:74:89:63:7f:70:
4f:55:9f:a8:e3:db:d1:4a:9e:5f:1b:ad:de:9d:2e:
f9:82:55:2b:6d:42:7e:44:b3:c4:5e:04:bd:e7:84:
ee:93:62:23:58:26:1b:3d:47:53:7d:13:4c:47:0a:
95:9e:0b:15:23:43:65:30:b1:10:b4:5f:e6:1c:dc:
e6:9c:ab:1c:1e:b2:46:5e:60:4b:2d:52:ec:9d:18:
d5:02:cd:ed:27:dd:12:39:ec:77:23:91:71:c5:e7:
f9:37:ea:da:3c:1a:cd:52:7a:e7:92:fa:f2:4f:3a:
cd:42:09:e8:df:e6:ad:6a:d4:18:22:de:c6:ac:80:
df:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:43:82:95:A2:34:A8:E8:43:8B:2E:1E:7F:57:27:C3:92:CB:24:7E
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/hkOClaI0qOhDiy4ef1cnw5LLJH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.11.0/24
185.210.168.0/23
217.25.3.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:6f:c6:29:15:5d:53:7e:b1:33:a2:ae:ee:d2:d4:1d:f1:a8:
52:98:fb:87:73:09:ca:f6:d6:d5:56:30:67:5f:60:8c:db:5e:
c4:70:59:0f:18:d1:de:ab:de:b2:38:29:cd:82:42:2a:a2:b2:
58:62:d7:99:d8:6d:80:07:bf:58:05:bd:5a:8d:40:8b:d2:64:
fa:6a:53:6f:f2:36:d4:28:40:28:18:06:d3:11:0a:f2:c7:7c:
80:c8:b5:85:bf:e7:5f:9b:20:4f:b9:ac:af:2e:01:af:35:f1:
66:35:c8:8c:35:2f:40:93:d6:20:68:77:6a:88:c0:7b:ee:25:
65:58:4d:96:91:ae:2c:68:3e:1e:09:6c:d3:b1:c8:e5:a9:58:
3d:8b:94:a6:b7:6b:03:37:04:79:7a:ed:1b:70:5f:7c:7c:ad:
b8:97:51:d5:71:45:78:98:eb:cf:7e:62:37:8c:d9:7d:77:d4:
da:0d:cc:49:cb:4c:ba:f8:9d:c5:0e:6a:6a:5c:5d:72:cb:74:
f1:00:da:21:16:6f:99:ce:79:00:0e:80:c4:28:7e:b6:24:fe:
e3:bd:c7:01:ca:10:c5:38:e3:0b:8b:18:66:eb:53:8e:ab:b7:
8b:18:8c:1d:17:78:2e:42:7c:47:c8:8f:7c:8a:e5:97:7e:de:
e8:b5:c7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 02:25:19 2025 by rpki-client