Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/_ITSv8iuWxYF6Xi3_Ud63eugcVA.roa
File: _ITSv8iuWxYF6Xi3_Ud63eugcVA.roa (raw, json)
Hash identifier: e1oaUiU/1FwcsXzZfTfjISFOH22WsphA6YVaiUR+Z3Y=
Subject key identifier: FC:84:D2:BF:C8:AE:5B:16:05:E9:78:B7:FD:47:7A:DD:EB:A0:71:50
Certificate issuer: /CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d
Certificate serial: 0197CF1EA9010E426BA41CEDF79CEC45C528
Authority key identifier: 8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/_ITSv8iuWxYF6Xi3_Ud63eugcVA.roa
Signing time: Thu 03 Jul 2025 07:09:42 +0000
ROA not before: Thu 03 Jul 2025 07:09:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51431
IP address blocks: 91.246.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft
rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cf:1e:a9:01:0e:42:6b:a4:1c:ed:f7:9c:ec:45:c5:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d
Validity
Not Before: Jul 3 07:09:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc84d2bfc8ae5b1605e978b7fd477addeba07150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8e:55:20:95:b3:c5:0b:6c:d2:d7:bb:2c:e1:
db:af:04:e4:de:c5:fb:8a:74:76:c4:58:6c:4b:9d:
2b:e1:c7:c1:59:49:ed:d6:b5:18:32:d0:a9:74:2f:
37:60:1f:76:06:6b:07:95:1f:35:66:85:3b:be:d3:
b7:4e:39:c1:d1:a5:85:25:ec:6b:ae:f5:10:45:6d:
e5:4b:88:0a:64:9e:66:69:de:31:06:dc:ef:dd:bd:
8e:6b:f2:1e:c1:63:10:ca:ca:28:07:c3:f7:82:d0:
85:2b:3b:32:cb:c8:6d:40:c1:b1:c8:fd:43:99:8f:
ee:5a:72:05:ce:79:76:55:0a:a2:ed:2f:e8:50:b0:
cf:3f:8c:6c:b7:6a:41:ee:d8:4b:d3:c9:42:67:0c:
ad:8d:fe:22:0f:f5:75:e5:23:4f:1e:f4:14:97:a3:
2f:58:13:ab:9a:5e:b6:54:46:d9:f9:c3:ae:dd:3d:
08:09:ad:78:fa:b6:fb:d8:30:3e:31:d9:98:d1:87:
56:dc:70:89:04:22:31:e2:64:2c:63:30:a5:af:6f:
cd:dc:a4:ae:b0:df:76:bb:b5:54:e4:49:ef:38:d8:
59:7c:38:5f:00:a8:04:c3:88:44:c7:75:a3:53:e5:
7c:53:30:f4:92:ff:51:4d:b2:ed:6d:4f:82:81:05:
ab:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:84:D2:BF:C8:AE:5B:16:05:E9:78:B7:FD:47:7A:DD:EB:A0:71:50
X509v3 Authority Key Identifier:
keyid:8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/_ITSv8iuWxYF6Xi3_Ud63eugcVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.31.0/24
Signature Algorithm: sha256WithRSAEncryption
25:c1:56:c7:ae:0a:8e:44:01:e0:24:e3:44:66:ac:a9:69:85:
65:bf:81:40:ab:05:59:93:8d:31:2c:75:3b:05:a0:e8:a9:dd:
1c:4b:a0:3d:07:8b:28:58:a8:e3:15:db:dd:e6:92:08:fc:03:
5c:ee:0c:49:a6:5f:e7:d2:fc:a6:87:54:9f:8f:43:ff:97:55:
de:e3:38:35:e8:d4:18:ac:6a:bf:ad:fb:2b:97:bb:ea:60:b6:
1c:08:90:ab:91:e3:a9:fe:a0:37:f8:cc:39:fe:b7:1f:40:6c:
3e:17:5b:cf:30:2b:24:21:a8:a7:54:8f:91:22:d9:c3:8b:60:
f0:6d:33:37:bd:31:d4:cb:e4:b7:cf:4a:07:e6:85:d5:45:c6:
24:ef:fb:ed:c5:ca:e7:9b:aa:75:3a:db:13:c9:04:9b:19:3a:
a7:d9:fc:e2:7b:52:1f:8d:76:d1:d3:ed:41:12:9a:28:c8:18:
ae:22:c0:af:d7:6d:05:54:d9:b5:af:9c:cf:e5:c2:ca:f0:49:
5f:1f:2b:cc:0c:6e:15:dc:1b:79:77:80:67:f1:93:1c:5f:bd:
fb:f6:3c:6c:e1:51:cb:b9:e1:13:71:da:3a:7e:f6:bd:a1:25:
dd:09:a6:41:3e:37:c3:5d:aa:a6:1d:33:64:3d:17:ec:2d:1b:
69:44:6c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:05:22 2025 by rpki-client