Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/ij6-YE2XVidboU68JMPVKequ6tg.roa
File: ij6-YE2XVidboU68JMPVKequ6tg.roa (raw, json)
Hash identifier: YEMop9i5KBqo0Emc5LLaJ2ZkaUOlrtnZjcsi8p8jPuQ=
Subject key identifier: 8A:3E:BE:60:4D:97:56:27:5B:A1:4E:BC:24:C3:D5:29:EA:AE:EA:D8
Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial: 0197EEEF97593F5877E089C2CC0DC4145B02
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/ij6-YE2XVidboU68JMPVKequ6tg.roa
Signing time: Wed 09 Jul 2025 11:26:08 +0000
ROA not before: Wed 09 Jul 2025 11:26:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3257
IP address blocks: 45.129.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft
rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ee:ef:97:59:3f:58:77:e0:89:c2:cc:0d:c4:14:5b:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Validity
Not Before: Jul 9 11:26:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a3ebe604d9756275ba14ebc24c3d529eaaeead8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:11:42:14:11:fb:f4:e9:34:ee:4f:db:c4:26:
40:08:c3:23:b8:f6:bb:63:99:8e:cb:1e:a9:0e:78:
51:6a:6a:61:52:26:6f:52:7b:4a:1c:79:b9:64:2e:
08:cd:1c:c2:af:6f:e3:2e:5c:dc:e7:c9:f0:d5:3b:
d6:35:3b:45:60:ee:88:95:7c:76:1b:57:0a:ea:c7:
40:7f:de:48:b4:de:0e:38:27:6e:09:7b:eb:88:06:
f7:e2:a2:3e:9e:6d:f2:c7:eb:3c:d9:9e:e9:45:2a:
f0:c7:37:eb:7b:ad:f2:fc:49:d2:d5:1b:cf:f8:1b:
6b:8e:b5:4b:54:31:02:fa:a8:15:70:17:ad:e7:29:
b5:e7:6b:9f:4d:54:32:4b:42:d3:81:c2:45:4c:09:
f4:7e:5d:14:ef:7f:6f:7c:d6:65:c4:45:0b:ae:96:
0c:8b:67:bb:2f:c2:0b:42:5b:d6:95:e0:88:4b:43:
1b:ea:de:d0:83:69:b2:0b:ce:02:2d:ef:01:41:a8:
0b:47:71:cb:2f:6e:fe:c9:a4:35:21:4a:70:ad:a9:
8d:53:e5:81:c1:a7:2b:bb:f0:d9:38:0b:0d:ee:0e:
c2:3f:d1:21:42:ab:fd:03:d4:43:d2:2c:4f:4b:da:
84:80:c9:37:a7:2e:83:f7:91:bd:23:b5:38:b2:aa:
0a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:3E:BE:60:4D:97:56:27:5B:A1:4E:BC:24:C3:D5:29:EA:AE:EA:D8
X509v3 Authority Key Identifier:
keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/ij6-YE2XVidboU68JMPVKequ6tg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.93.0/24
Signature Algorithm: sha256WithRSAEncryption
09:09:19:62:a1:6e:94:21:d9:d7:db:1a:87:1f:9f:8f:31:e2:
37:74:47:c2:ad:cc:c0:bb:ec:64:8d:8d:2c:87:6e:14:82:d7:
7c:db:77:ce:3b:0c:f6:a7:2b:dc:1e:2d:38:86:cb:84:0c:71:
2c:5f:1d:46:c6:4d:a7:87:84:03:67:73:da:27:e0:7d:de:31:
ca:9f:31:41:cd:2f:19:21:31:12:26:31:94:e4:d9:fe:af:79:
11:6f:78:b5:40:0a:37:81:03:27:c5:75:85:0b:5e:d0:17:27:
47:5a:86:71:ef:d1:b6:83:24:8e:23:73:33:d8:e5:8b:09:b1:
6d:3e:6f:82:68:3b:74:d7:96:18:6b:f5:7d:91:35:c0:a0:0b:
b3:2c:97:87:b3:11:e9:d5:f1:50:ba:78:a3:7e:c3:b4:45:07:
62:cd:c9:f7:21:87:e1:1b:51:77:cb:77:ec:15:7a:19:19:50:
00:04:d6:4a:75:54:34:10:2e:1f:00:2e:9d:34:a3:14:67:50:
e8:0b:1f:06:09:b8:67:af:d8:fc:ec:a7:76:18:36:ad:a7:af:
9f:2d:ff:b5:73:3b:cc:06:e6:6f:18:13:5c:a6:b2:d1:7d:8f:
03:33:70:09:4c:91:72:e2:a2:f6:ee:bb:9a:d4:49:52:63:7e:
77:20:47:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 18:08:35 2025 by rpki-client