Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/OXu-FbGFEQtW2qF8C1ljMqApmsc.roa
File: OXu-FbGFEQtW2qF8C1ljMqApmsc.roa (raw, json)
Hash identifier: zRugNhwFvWMFrtxr0PiixmvLsHNCirDprXDBAlXfL/4=
Subject key identifier: 39:7B:BE:15:B1:85:11:0B:56:DA:A1:7C:0B:59:63:32:A0:29:9A:C7
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0198560A90F976E7163B38208FEA61043718
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/OXu-FbGFEQtW2qF8C1ljMqApmsc.roa
Signing time: Tue 29 Jul 2025 11:56:29 +0000
ROA not before: Tue 29 Jul 2025 11:56:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204314
IP address blocks: 62.89.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:0a:90:f9:76:e7:16:3b:38:20:8f:ea:61:04:37:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jul 29 11:56:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=397bbe15b185110b56daa17c0b596332a0299ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e3:ef:d1:e7:a5:a7:7d:39:5d:fb:fd:06:7f:
9f:52:f3:a8:00:c3:e2:43:f1:8e:11:72:67:c6:4f:
cb:6f:d8:e4:58:99:95:83:b2:15:07:74:6f:41:3e:
2f:7f:78:a7:83:2b:10:a8:2d:d4:e8:ef:d6:0b:1d:
17:d1:fa:b4:d3:c1:c5:ae:b2:3c:8b:2f:c7:2a:49:
2b:1f:09:42:36:cd:c6:a4:15:f7:88:f2:eb:79:4d:
a7:f1:7d:ae:f8:a5:5e:ee:7e:e8:61:dc:09:25:f4:
fa:e9:93:13:f4:78:48:9c:e3:31:1f:11:30:b4:b1:
65:cb:b9:b4:9f:b8:ea:14:ea:54:f6:a6:4d:17:02:
39:7b:94:8e:13:1e:a9:f2:ac:15:b0:90:0d:1a:0a:
38:b6:93:7a:eb:4d:7b:63:c5:13:4e:ae:45:52:5a:
3f:de:76:30:0d:b7:5c:48:dc:61:2c:2f:cb:da:32:
05:bc:33:fc:da:7d:01:b9:c2:e1:be:9b:4e:90:cc:
f0:42:28:13:71:aa:54:54:73:4e:03:9d:aa:b6:f2:
52:7d:21:86:f2:ea:35:95:11:2c:3f:54:13:88:2a:
0c:9c:33:d9:05:5c:d4:9a:6b:bb:44:e0:33:4b:de:
44:20:69:c0:23:2d:67:32:b8:37:28:d1:a0:2d:a7:
ef:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:7B:BE:15:B1:85:11:0B:56:DA:A1:7C:0B:59:63:32:A0:29:9A:C7
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/OXu-FbGFEQtW2qF8C1ljMqApmsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.89.212.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:06:51:2a:65:b8:4e:c3:63:c6:95:90:40:da:e9:45:f4:9f:
56:3a:02:e0:d7:ce:c4:8e:d1:18:d7:bc:f4:ba:a9:2e:15:ed:
b7:cc:11:39:ec:2a:1a:b7:3a:15:fb:34:78:9f:8a:ec:1f:32:
a2:db:05:28:d9:ab:1d:3b:7b:d7:cc:04:9b:8c:69:f7:bc:4e:
e4:86:84:95:2f:64:f3:76:f7:c5:2c:d1:85:97:cb:5c:23:33:
3b:89:43:13:3d:0f:a8:e8:ec:f7:85:a6:bc:73:a2:6b:b5:83:
6f:5f:16:db:84:bc:ca:1a:fe:46:f2:99:a8:47:a4:e7:e4:2c:
aa:04:b7:25:02:dd:35:90:0e:5d:2e:33:71:bb:5d:77:a1:6e:
cb:a5:e8:75:0c:12:8a:b6:30:17:22:b2:4c:67:65:41:bc:48:
12:6a:2d:bc:6e:6e:a7:c8:1e:8d:ce:a1:10:3a:3f:01:9d:99:
1d:76:ef:bd:11:9b:59:2c:d0:78:14:7b:be:53:26:40:5d:8a:
d6:b5:e4:aa:c2:12:37:26:40:9f:54:91:36:91:b5:7d:d3:ea:
0d:9c:06:50:95:bc:ba:53:ca:27:b0:b2:d6:2a:61:4c:6f:66:
7c:df:01:3d:60:8a:89:38:05:b5:4e:34:23:f0:bf:f6:a3:4c:
20:eb:03:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 13:58:19 2025 by rpki-client