Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/8bzVTIvU7VLto519WM6kmb1aC88.roa
File: 8bzVTIvU7VLto519WM6kmb1aC88.roa (raw, json)
Hash identifier: RKtsKte4GFMP8uvXTysNKUtwWTqGBn/sT3xSLBAL7kc=
Subject key identifier: F1:BC:D5:4C:8B:D4:ED:52:ED:A3:9D:7D:58:CE:A4:99:BD:5A:0B:CF
Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e
Certificate serial: 01976A91515196F7589D6DCEBCCBB500DD1F
Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/8bzVTIvU7VLto519WM6kmb1aC88.roa
Signing time: Fri 13 Jun 2025 18:33:17 +0000
ROA not before: Fri 13 Jun 2025 18:33:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213431
IP address blocks: 82.129.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 15:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:91:51:51:96:f7:58:9d:6d:ce:bc:cb:b5:00:dd:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e
Validity
Not Before: Jun 13 18:33:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1bcd54c8bd4ed52eda39d7d58cea499bd5a0bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a2:c2:7f:b5:a8:ac:3b:e4:d5:b2:76:d1:be:
c4:42:b7:0e:d7:b3:dd:57:58:93:dd:b2:32:e0:99:
82:b7:43:0e:72:c5:fc:17:95:db:87:e9:0c:68:03:
d7:2e:0d:49:89:be:35:e0:cd:b2:12:6e:73:77:82:
c2:15:c3:fd:93:85:67:ce:bd:c3:c3:ae:13:d7:5f:
d1:fe:48:a8:db:35:3b:65:88:42:d3:9b:a2:27:80:
18:0a:3a:17:10:02:81:41:6b:b2:17:f2:ee:ac:d0:
ef:de:ea:1b:29:cd:2a:a7:e1:23:7d:fd:a8:b4:ac:
61:4c:a7:10:7d:9b:f6:84:97:b7:86:6e:92:64:12:
a9:13:0a:b0:af:61:02:7a:04:56:0d:d0:43:2b:17:
32:b4:69:8f:c8:96:ed:3e:90:3f:9a:b6:f6:ff:a0:
28:0d:b3:e2:d1:a0:e5:08:47:78:40:d0:15:dc:0f:
fc:e2:99:88:db:a9:16:93:4b:83:81:f0:9e:20:09:
ea:ef:87:14:cf:6f:7c:40:3c:e5:79:00:d3:55:3a:
f4:52:e0:2e:eb:52:70:9a:bd:d7:36:3d:dd:0c:39:
03:47:6e:ca:48:ab:11:0b:50:d4:40:14:e4:6f:33:
c5:d9:ba:08:68:5d:41:16:cf:28:d3:dc:ab:35:fa:
e3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:BC:D5:4C:8B:D4:ED:52:ED:A3:9D:7D:58:CE:A4:99:BD:5A:0B:CF
X509v3 Authority Key Identifier:
keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/8bzVTIvU7VLto519WM6kmb1aC88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.129.4.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:a6:a6:90:be:c6:ed:d5:b5:2e:34:d5:fe:bd:24:32:79:87:
ec:66:14:1c:76:ce:1b:b5:1d:f5:4e:09:61:fb:c5:9f:e1:6d:
df:ea:d1:7d:54:6d:07:31:6f:ab:3e:7b:b2:0a:3b:71:5a:15:
46:68:1a:2e:4d:b2:ac:5f:c1:3a:35:87:2a:b0:e1:d9:c1:84:
fb:d6:6e:58:0c:dc:74:4a:72:63:a8:27:53:43:f8:8f:28:7b:
53:15:6a:70:4d:f3:c4:99:14:a6:3b:cc:89:ce:8b:44:18:bc:
82:f9:aa:e4:8a:42:3c:22:da:f9:13:bb:bb:cf:32:dc:c1:94:
d9:a3:7f:ae:1f:cf:7d:0c:27:3f:6a:01:b2:d4:8b:ab:6d:d5:
b9:9f:68:33:7e:75:60:8c:32:23:a0:5d:9b:ff:8f:a8:29:1a:
3a:e1:c6:8f:2e:4f:08:ec:8a:6b:f9:63:09:52:35:d4:a3:37:
64:4e:98:3d:e8:9f:08:5a:2c:eb:5f:15:86:e2:01:09:05:9f:
4b:ea:3b:6d:3b:d8:42:e0:58:50:e7:48:d1:2e:06:e1:88:6d:
6f:41:47:b4:46:f2:c5:2a:b6:df:0c:63:10:0c:fa:01:0c:11:
41:56:b5:0c:31:b0:33:8a:37:0e:b6:f4:ac:1b:ba:3d:9a:af:
ea:f9:c6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 21:03:11 2025 by rpki-client