Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/8l5FYwYGOqxUaWVSlUjVKFQRq9o.roa
File: 8l5FYwYGOqxUaWVSlUjVKFQRq9o.roa (raw, json)
Hash identifier: iKbO3HNza0VQ3VY9N8HdJ3BiSCs2zhs5feby4QGnZ8M=
Subject key identifier: F2:5E:45:63:06:06:3A:AC:54:69:65:52:95:48:D5:28:54:11:AB:DA
Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial: 0196EEEBC34603B671FB766FB69F8A10E64F
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/8l5FYwYGOqxUaWVSlUjVKFQRq9o.roa
Signing time: Tue 20 May 2025 18:19:10 +0000
ROA not before: Tue 20 May 2025 18:19:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 188.209.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft
rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ee:eb:c3:46:03:b6:71:fb:76:6f:b6:9f:8a:10:e6:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Validity
Not Before: May 20 18:19:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f25e456306063aac546965529548d5285411abda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:57:d6:69:23:64:ad:a6:90:e3:e9:c2:b3:e0:
34:27:80:b0:5e:f3:75:a7:0a:52:94:8f:d0:fd:1c:
e6:42:41:da:c4:7b:ee:5b:0a:98:5b:40:79:27:09:
91:c1:43:2c:51:1a:f3:4b:b8:c8:80:74:7a:f8:db:
d8:03:18:8f:73:2e:58:26:49:68:7f:cb:6e:91:8f:
61:99:aa:79:47:1a:40:d1:b0:fd:aa:b6:b2:cf:d6:
b2:40:e0:9b:13:7e:0e:ee:3e:47:f7:52:75:5a:93:
a3:e5:1a:70:2f:cb:a4:3e:f4:fb:38:d8:14:37:74:
5b:87:9c:46:1e:a5:2d:69:9b:1b:7e:ad:ed:a7:71:
51:14:49:0e:50:15:67:f9:18:a8:df:3a:d5:84:ca:
34:4b:1f:77:a0:6a:a2:0d:df:56:14:f0:08:a7:84:
87:8b:7c:6a:e3:f0:b4:ec:2a:44:31:74:d7:5d:9e:
a2:2e:17:4f:6a:0e:a8:b3:f8:ac:fe:31:01:8e:f8:
63:14:51:36:4e:fd:31:0e:59:7e:31:a8:36:b5:24:
2b:c7:00:be:e0:42:5b:ff:29:0f:e1:c5:e1:68:80:
3a:c8:68:f4:66:a3:81:15:a3:bd:15:80:7c:63:90:
be:3b:a2:f1:ed:aa:76:48:6b:c1:0c:67:50:ff:2f:
99:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:5E:45:63:06:06:3A:AC:54:69:65:52:95:48:D5:28:54:11:AB:DA
X509v3 Authority Key Identifier:
keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/8l5FYwYGOqxUaWVSlUjVKFQRq9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.140.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:cd:44:78:c2:25:42:4b:cb:fb:09:62:aa:56:23:f1:dc:0d:
9b:7a:7b:cd:41:31:d2:75:6d:c9:0b:1f:76:79:02:a2:ca:f1:
50:d5:2c:03:91:bb:87:b0:e9:76:ca:71:a0:a4:94:61:b0:00:
18:82:c1:a6:27:dc:06:ef:75:00:96:12:8f:1b:94:ec:3f:31:
b6:51:03:c2:b7:e0:3e:82:f1:cc:f8:4a:80:a2:52:0b:e6:df:
94:f4:e5:da:9d:83:53:15:a4:b3:57:8e:71:23:f3:cb:c0:1b:
25:12:9a:97:60:41:c8:44:09:ab:06:6b:28:58:99:0d:44:96:
41:7f:48:4d:f4:37:54:e8:21:d7:6c:34:f7:61:05:ad:9a:2d:
de:4c:7e:94:7a:b2:06:9b:55:9c:38:4c:c9:a8:fa:16:35:d5:
fe:c2:17:c2:74:0c:24:cf:3b:01:96:df:43:7f:f5:27:8a:47:
b9:4f:91:f2:5a:d9:a4:1c:98:2d:f3:cc:e3:02:85:d3:fb:ce:
aa:2b:b7:93:a2:76:9e:02:8c:df:8f:fa:1a:80:ea:80:62:0b:
60:cd:79:d0:0c:3d:18:33:99:bd:03:56:a7:44:9e:cd:4f:1e:
bf:62:28:e1:46:2d:d2:35:10:97:a0:f9:cc:77:d0:e1:69:47:
20:19:02:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:52:56 2025 by rpki-client