Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/pYkXhi8dISdm8J5V6Ump4-4cOFU.roa
File: pYkXhi8dISdm8J5V6Ump4-4cOFU.roa (raw, json)
Hash identifier: EouhCVKO7/yt//jgu0i4ZZyGPzW9rnR1WQJxIMHssJE=
Subject key identifier: A5:89:17:86:2F:1D:21:27:66:F0:9E:55:E9:49:A9:E3:EE:1C:38:55
Certificate issuer: /CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
Certificate serial: 01980A05CCBAB45E4826646F752F301084A0
Authority key identifier: BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/pYkXhi8dISdm8J5V6Ump4-4cOFU.roa
Signing time: Mon 14 Jul 2025 17:40:08 +0000
ROA not before: Mon 14 Jul 2025 17:40:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 146813
IP address blocks: 45.87.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0a:05:cc:ba:b4:5e:48:26:64:6f:75:2f:30:10:84:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
Validity
Not Before: Jul 14 17:40:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a58917862f1d212766f09e55e949a9e3ee1c3855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:92:23:22:45:3b:e6:46:04:37:07:b0:97:a9:
91:39:18:7d:47:97:e0:df:62:31:6c:d3:6c:57:18:
4a:03:45:9d:75:69:fb:4f:5e:17:5e:79:66:8c:c2:
c8:ee:a9:5a:89:fb:49:6d:cd:eb:c8:3c:a6:d5:dd:
1a:6b:e5:ec:2a:d1:7b:45:64:36:a7:08:9b:af:77:
ef:d9:79:7a:57:95:e4:74:ae:59:4a:00:1c:ad:07:
ff:ef:2a:66:ec:42:9e:f0:45:ed:b6:15:63:44:15:
cf:9d:a1:20:61:fc:a8:fc:19:e3:57:d5:6a:10:61:
e4:17:41:02:74:8d:cb:59:89:d3:8e:9c:f3:47:5c:
00:94:4e:52:7f:2c:92:0d:4b:63:f1:dd:d9:53:14:
48:27:a2:a8:d8:0b:fd:6c:92:38:17:52:79:c3:f8:
21:56:e3:89:2d:94:15:1f:a2:c2:8c:9b:22:43:9a:
69:37:eb:2b:e3:73:76:5e:b0:79:c9:06:cb:e4:4e:
06:67:58:67:77:88:36:80:1b:8e:d4:fa:d5:9a:ec:
97:5f:bc:16:a4:01:2a:b4:ef:6c:c0:41:d3:30:f3:
ec:62:46:8c:67:5f:25:f0:0f:6f:2c:f0:2c:b6:3c:
4d:3c:f4:53:0c:c6:04:c0:05:23:4e:ab:d6:49:ae:
fd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:89:17:86:2F:1D:21:27:66:F0:9E:55:E9:49:A9:E3:EE:1C:38:55
X509v3 Authority Key Identifier:
keyid:BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/pYkXhi8dISdm8J5V6Ump4-4cOFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.101.0/24
Signature Algorithm: sha256WithRSAEncryption
81:eb:5f:bc:1d:f3:13:34:69:1b:2f:44:ab:af:73:35:00:05:
c0:f9:70:df:12:ef:a8:eb:63:55:03:0d:68:31:86:3a:c5:8c:
b2:b5:37:d5:1c:a4:f5:4c:96:d5:85:b0:66:c2:89:84:fc:86:
3e:5b:f3:9c:d4:4d:22:32:aa:31:32:a1:d0:05:2b:c5:37:91:
bc:fa:97:7c:b4:88:1a:70:0f:65:69:a9:5a:bf:48:9b:41:e0:
cf:81:b5:c2:e1:7c:9b:3a:c1:3e:18:23:92:db:79:e1:0e:5a:
88:f3:12:9a:9b:e0:66:a8:a9:9b:95:57:66:74:e6:8b:46:5f:
02:a9:12:af:53:63:92:d7:0e:49:60:9c:47:80:d2:0a:a9:84:
7e:44:2f:bf:73:e1:43:68:05:51:02:65:16:b4:23:bd:98:61:
67:ff:f1:8b:6d:35:a3:cf:7b:51:6d:20:f6:01:05:c7:33:bc:
d5:53:d2:02:60:28:22:45:7b:58:6b:5e:da:62:0f:bd:66:92:
5f:1f:f8:51:b7:e2:30:a3:08:3d:d1:e2:ec:88:4c:9a:9c:86:
f3:e8:af:92:18:5c:dc:4d:5d:4e:ef:9c:99:28:b1:f2:a6:61:
78:74:6b:e8:34:ee:0f:a1:02:d4:aa:a7:02:a3:a5:4a:d0:64:
69:61:9d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:05:05 2025 by rpki-client