Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/oyk-KIEutl2C2dAeb2COSuiUJp8.roa
File: oyk-KIEutl2C2dAeb2COSuiUJp8.roa (raw, json)
Hash identifier: TZwgyTJuNHvdFJWTGTX48pNDGcvyOzbXQOK/aBu5rfU=
Subject key identifier: A3:29:3E:28:81:2E:B6:5D:82:D9:D0:1E:6F:60:8E:4A:E8:94:26:9F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01973B01B9B6EDEEE70E98FA606420ECD11D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/oyk-KIEutl2C2dAeb2COSuiUJp8.roa
Signing time: Wed 04 Jun 2025 12:54:18 +0000
ROA not before: Wed 04 Jun 2025 12:54:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215730
IP address blocks: 81.31.192.0/24 maxlen: 24
87.120.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3b:01:b9:b6:ed:ee:e7:0e:98:fa:60:64:20:ec:d1:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 4 12:54:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3293e28812eb65d82d9d01e6f608e4ae894269f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c2:2d:5d:29:20:fe:ca:0b:12:4a:96:5f:05:
a0:ef:bc:f6:4f:2b:ab:aa:e1:2c:8e:36:36:de:4c:
f0:8e:bb:5d:12:89:9a:26:cf:34:23:3c:e9:6d:a3:
93:c1:94:66:d2:f1:a8:d1:5a:83:9f:31:4e:a5:69:
77:bf:0e:ee:6d:f5:9b:66:d9:b9:79:88:84:59:ca:
96:ee:b6:ea:de:d5:65:da:a2:59:08:8e:3d:2e:6d:
c2:19:5c:be:8d:ad:43:68:7c:ea:68:6c:50:da:00:
b1:69:ad:0d:34:f2:69:06:4b:f7:ee:a4:80:36:44:
c6:69:ed:7d:c0:42:54:de:c8:96:78:eb:2e:a8:8d:
e4:e0:a5:f2:d1:35:cc:8f:54:52:8b:9c:5b:86:35:
c5:fd:3c:ee:a2:28:64:1a:2e:69:b9:4c:ce:59:d0:
c0:96:ad:45:8c:de:6c:fe:9a:df:06:b8:b6:c6:75:
64:39:d4:36:c1:25:9a:f9:b1:e2:9e:30:c7:ea:a8:
b0:a2:3d:67:7e:fa:0a:06:04:79:c7:3d:a8:47:3a:
df:59:31:ac:af:26:2b:df:6c:d6:09:49:40:3d:16:
a6:c6:e2:09:0e:d2:b4:02:e1:21:58:13:7d:5a:d9:
e7:14:ed:24:ce:ec:b6:41:9f:f7:c3:ad:8d:5d:b5:
35:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:29:3E:28:81:2E:B6:5D:82:D9:D0:1E:6F:60:8E:4A:E8:94:26:9F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/oyk-KIEutl2C2dAeb2COSuiUJp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.192.0/24
87.120.93.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:35:95:48:a1:43:03:0c:30:a0:1a:ef:c2:85:7d:0b:14:66:
d1:d5:9d:94:d7:fa:78:f8:cd:fe:21:49:19:b8:8a:bf:e4:e7:
94:2d:83:fe:7e:e1:74:c8:d7:dd:53:7e:e3:3a:80:02:6c:97:
4e:b9:80:66:8b:7c:c3:fd:7e:23:f4:00:db:2e:74:e6:9f:1b:
d8:f8:21:24:6a:24:37:6a:b9:46:25:8e:7c:2f:e5:cb:cd:9f:
7a:b2:e3:a0:93:f4:7e:2f:20:dc:6a:f4:b0:94:ab:a2:a2:7c:
35:b2:2b:4a:47:c3:65:8b:68:64:b2:a3:5f:9c:f2:8e:a2:84:
f9:ee:f0:30:7d:78:2d:9e:b1:88:4a:e9:fd:88:d5:1c:45:2c:
92:65:73:5c:a5:fb:e8:10:ea:2e:35:0c:d0:f2:42:cf:f7:9c:
6c:29:63:bb:65:85:d3:90:11:e3:8e:f6:74:f0:46:7d:72:be:
43:c8:87:98:b9:9c:46:f8:75:26:ac:56:c4:f8:d3:2d:84:c7:
82:d8:6a:91:29:e8:2c:80:a3:2a:9f:d1:11:b1:ac:fa:bd:41:
00:a9:17:da:38:75:22:a7:01:d0:46:fe:58:d2:ea:4d:27:c6:
57:81:21:4a:1e:c6:df:ea:ac:9f:02:9d:46:fe:32:25:f5:46:
66:7d:7e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:48:32 2025 by rpki-client