Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/8cWfahg-VDjeZtRRDOSOgaZBKKo.roa
File: 8cWfahg-VDjeZtRRDOSOgaZBKKo.roa (raw, json)
Hash identifier: 9i7se4/zOMkhHJFeNP5OTbaUpanb8DTDP8yisJke8J4=
Subject key identifier: F1:C5:9F:6A:18:3E:54:38:DE:66:D4:51:0C:E4:8E:81:A6:41:28:AA
Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Certificate serial: 01975F444124DCB24C016F9CB1EEF35D25CF
Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/8cWfahg-VDjeZtRRDOSOgaZBKKo.roa
Signing time: Wed 11 Jun 2025 13:53:18 +0000
ROA not before: Wed 11 Jun 2025 13:53:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6830
IP address blocks: 83.229.113.0/24 maxlen: 24
185.90.220.0/24 maxlen: 24
185.90.221.0/24 maxlen: 24
185.90.222.0/24 maxlen: 24
185.90.223.0/24 maxlen: 24
188.191.48.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:44:41:24:dc:b2:4c:01:6f:9c:b1:ee:f3:5d:25:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Validity
Not Before: Jun 11 13:53:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1c59f6a183e5438de66d4510ce48e81a64128aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:44:80:19:02:3a:8a:90:63:7e:e9:0f:e1:43:
5f:1d:b4:8d:3b:c6:ba:94:5b:3c:d7:fd:32:4a:79:
d0:bf:07:96:fb:63:74:44:3a:78:e3:c3:d4:8f:4b:
04:5a:a3:d9:cd:50:a6:99:e6:40:44:04:69:b7:7a:
95:2d:6b:42:c8:a2:e4:25:01:f5:b6:95:99:1e:20:
d2:f8:79:6e:a1:c7:91:b3:38:a5:a0:6c:1b:35:01:
05:04:44:1f:f1:c5:b5:6d:e6:a0:4b:57:14:27:22:
57:96:46:58:ac:69:b1:4d:e3:ad:51:83:ac:d9:6b:
4f:1f:16:8c:f6:16:93:da:15:46:32:d5:30:60:2c:
2b:0b:5d:27:c8:b4:f7:a8:10:fa:68:3e:25:58:9d:
5b:c2:2b:34:42:5d:34:ac:73:50:1c:2c:9f:8c:e0:
c7:0f:cd:10:7b:2f:8c:6b:f7:4e:5b:3e:c9:0f:bb:
9b:3e:6b:cc:c0:6d:6b:01:02:13:44:15:44:c6:c3:
75:f1:e5:f4:3b:b5:1e:23:2d:03:c0:2c:ea:eb:c6:
0b:44:8f:64:6b:cc:3d:7c:cf:2b:02:19:f4:8a:d2:
c0:04:1b:94:45:d9:87:f2:d4:e2:a4:67:2d:1d:11:
ee:00:c5:1a:98:48:26:d6:74:64:a5:6f:d0:71:e8:
95:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C5:9F:6A:18:3E:54:38:DE:66:D4:51:0C:E4:8E:81:A6:41:28:AA
X509v3 Authority Key Identifier:
keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/8cWfahg-VDjeZtRRDOSOgaZBKKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.229.113.0/24
185.90.220.0/22
188.191.48.0/22
Signature Algorithm: sha256WithRSAEncryption
42:bb:28:af:05:c6:ac:12:9f:65:3e:37:8b:61:a2:c3:2b:11:
1f:ac:cf:74:40:22:80:7d:4a:99:be:54:a5:3b:25:a2:92:07:
46:8a:65:25:61:f9:94:b8:26:a6:1a:ad:85:a9:dd:c3:57:60:
f0:c7:20:70:31:fa:12:ba:68:59:e7:ee:98:21:59:e7:f7:29:
75:55:a6:2c:75:e7:09:36:e4:6a:0f:08:9c:a4:a0:18:3b:86:
8b:e8:b9:12:52:aa:35:39:8d:0f:e5:04:1b:39:c8:2b:ae:b5:
90:4a:2d:e2:5b:bf:bb:d4:5f:44:00:f3:62:98:fb:94:d1:57:
cd:4a:31:11:2c:f5:73:d1:8d:af:ae:42:86:80:4f:cd:21:14:
e0:34:fb:a9:24:6e:56:fc:a6:5c:83:28:ea:82:32:38:95:b1:
98:54:36:94:86:ce:0a:8b:c8:40:96:8a:dd:f6:3c:f3:05:1e:
c4:70:59:ed:92:55:46:4e:a3:a1:42:02:61:1a:1b:6f:47:49:
5c:be:a6:fe:9b:62:65:a1:07:e9:2a:21:e9:22:ff:70:43:cf:
32:55:89:5d:2f:e6:33:8f:8c:c9:d1:52:0d:96:f6:a5:9e:2b:
e5:7a:c6:f0:33:4c:4b:0d:ee:94:3a:bc:39:61:3e:7c:9e:81:
55:58:63:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:15:31 2025 by rpki-client