Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/8IrRnzXhLEtJOzQ76JyjoEUrlXo.roa
File: 8IrRnzXhLEtJOzQ76JyjoEUrlXo.roa (raw, json)
Hash identifier: twXscxBiA6A/cPdgQ7hNA9EiiSEcOyWKVNdA2W42KG4=
Subject key identifier: F0:8A:D1:9F:35:E1:2C:4B:49:3B:34:3B:E8:9C:A3:A0:45:2B:95:7A
Certificate issuer: /CN=47d064fb3e541f23563065e48f300f2cfdfe009a
Certificate serial: 01977609BFDF7E2E314B84BF70F4F167F0D6
Authority key identifier: 47:D0:64:FB:3E:54:1F:23:56:30:65:E4:8F:30:0F:2C:FD:FE:00:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/8IrRnzXhLEtJOzQ76JyjoEUrlXo.roa
Signing time: Mon 16 Jun 2025 00:00:39 +0000
ROA not before: Mon 16 Jun 2025 00:00:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39592
IP address blocks: 195.244.28.0/23 maxlen: 23
195.244.28.0/24 maxlen: 24
195.244.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 15:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:09:bf:df:7e:2e:31:4b:84:bf:70:f4:f1:67:f0:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47d064fb3e541f23563065e48f300f2cfdfe009a
Validity
Not Before: Jun 16 00:00:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f08ad19f35e12c4b493b343be89ca3a0452b957a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:01:9d:81:d9:0a:f4:6e:5d:de:96:19:d5:e4:
e7:a4:95:f3:c7:70:47:9d:7c:31:1a:a7:57:74:94:
01:59:16:66:5e:ec:5a:ec:b9:6a:da:b4:ca:d3:f2:
cb:9a:04:e1:6d:34:e9:66:db:8b:36:f0:e2:e7:8b:
43:af:ba:83:af:d1:e7:e2:d8:2a:d9:3e:07:83:12:
64:f5:b7:9e:15:39:a7:6c:c6:c5:e7:bd:36:1a:b2:
37:ec:99:41:fd:96:1d:ad:15:25:c8:48:e8:db:c4:
9b:ed:53:b6:40:e2:2d:97:0a:aa:ae:f9:37:1c:d4:
e3:90:0d:9d:fb:27:80:c2:1b:72:82:b2:a5:74:88:
5f:f0:7a:a3:82:f1:62:44:89:d4:a0:c5:9e:84:8c:
3c:78:51:82:4f:67:00:39:47:bc:b4:0b:3f:97:37:
08:7d:69:0c:46:b4:17:30:47:61:27:9b:81:81:2f:
c0:2a:e9:3a:04:22:a6:1f:1a:fc:1c:46:c5:3c:55:
31:b9:65:13:18:86:f5:1c:20:9a:06:7d:86:9a:f8:
a9:4d:b2:44:a4:df:9b:cc:f7:45:74:b8:ab:2a:ea:
11:12:94:a5:83:53:b2:97:d8:c8:b9:47:4d:6b:14:
0b:bb:f3:c5:59:88:b6:9f:23:dc:e5:1a:01:0c:00:
c7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:8A:D1:9F:35:E1:2C:4B:49:3B:34:3B:E8:9C:A3:A0:45:2B:95:7A
X509v3 Authority Key Identifier:
keyid:47:D0:64:FB:3E:54:1F:23:56:30:65:E4:8F:30:0F:2C:FD:FE:00:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/8IrRnzXhLEtJOzQ76JyjoEUrlXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.244.28.0/23
Signature Algorithm: sha256WithRSAEncryption
44:fc:49:30:5d:11:af:5e:9d:5c:c6:26:71:95:b7:4e:97:2e:
d1:f7:9e:9f:3d:25:04:20:ce:80:d6:64:64:20:ae:62:b5:d4:
e9:f2:7a:cd:67:e5:b3:7a:6d:b8:cc:0a:03:13:99:23:b6:f9:
51:94:47:76:fc:47:7b:45:26:59:e3:d3:d7:f4:79:26:5c:71:
c1:4f:12:d5:88:5b:29:ef:d4:3e:71:25:bb:3b:52:b8:98:53:
95:eb:92:1a:a8:d5:5b:7a:8c:6c:e5:88:ca:dc:57:24:80:00:
95:c2:36:ce:63:d1:c4:89:72:0b:fa:94:0f:0c:9e:75:5b:0a:
b9:a2:d5:1b:5b:a3:78:02:eb:5b:67:61:f3:0b:46:6a:3e:5c:
f7:f6:d1:a3:9b:2b:5d:57:ce:08:86:36:3d:b3:b1:ab:ff:0f:
32:d1:91:77:73:37:60:ed:94:6f:34:fe:fa:63:90:6c:00:fd:
3f:2a:3f:90:95:cc:4b:8a:ba:92:1a:ef:a4:ef:61:e5:54:d8:
b5:7c:0c:6e:76:b1:06:4b:85:cf:2a:d5:b8:30:65:9d:75:a9:
93:85:e6:32:15:c7:81:f4:8a:60:76:e0:ce:90:98:64:e0:eb:
98:46:f9:58:b8:ec:63:f0:23:a6:7a:f3:d0:60:28:e0:e2:94:
fe:1c:75:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 01:19:23 2025 by rpki-client