Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/JbyektcecEj3BAlwzdyd-YQZG-I.roa
File: JbyektcecEj3BAlwzdyd-YQZG-I.roa (raw, json)
Hash identifier: qaQjv/GNe5ncVF9/+USSvz1DDnlwL3O9F43o15WDW8o=
Subject key identifier: 25:BC:9E:92:D7:1E:70:48:F7:04:09:70:CD:DC:9D:F9:84:19:1B:E2
Certificate issuer: /CN=f8ad543624f8d3281ec970458ee752f10a424529
Certificate serial: 019736B36CBEAD84BC9284A8A864DEE993BF
Authority key identifier: F8:AD:54:36:24:F8:D3:28:1E:C9:70:45:8E:E7:52:F1:0A:42:45:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/JbyektcecEj3BAlwzdyd-YQZG-I.roa
Signing time: Tue 03 Jun 2025 16:50:17 +0000
ROA not before: Tue 03 Jun 2025 16:50:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197412
IP address blocks: 185.230.172.0/22 maxlen: 24
185.230.172.0/24 maxlen: 24
185.230.173.0/24 maxlen: 24
185.230.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:36:b3:6c:be:ad:84:bc:92:84:a8:a8:64:de:e9:93:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ad543624f8d3281ec970458ee752f10a424529
Validity
Not Before: Jun 3 16:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25bc9e92d71e7048f7040970cddc9df984191be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e8:cf:f9:7a:53:9a:a1:2c:3d:8c:ca:87:0a:
f3:dd:92:5e:89:98:4e:a7:12:10:fb:b0:a4:71:8e:
df:d0:c4:9c:ec:b3:27:d2:8d:e4:34:bc:99:f4:d6:
75:96:cd:58:14:50:ec:62:fd:44:fd:22:1a:4f:78:
7d:d5:2f:7c:72:ec:4d:9b:5f:f6:58:6c:5c:05:14:
66:bd:86:a7:07:7f:1e:f6:85:c9:cd:c1:9b:4c:8e:
2b:bb:e9:0c:3d:65:ac:db:c1:e3:00:d7:6f:3e:bd:
79:97:c8:f2:72:47:ff:ea:51:15:f7:54:fb:09:43:
e0:be:0c:b7:e4:07:05:72:89:27:fc:15:99:30:95:
9f:c5:39:91:1e:95:32:83:f3:dd:ab:5e:88:89:ef:
e2:51:f1:c8:b6:05:07:ca:4b:44:a5:ab:b6:ef:19:
41:67:5a:0a:26:51:4b:da:16:81:75:a4:47:24:f4:
f8:2a:52:83:22:17:85:4f:ce:3e:51:55:d4:c1:0e:
7c:d8:c4:60:e7:63:44:85:ac:6e:66:6f:d8:2d:ea:
5d:f8:12:d4:e1:c1:30:7e:09:9c:c3:e5:af:4b:32:
31:7c:99:03:33:4a:b8:82:2d:74:d9:d0:23:5c:c8:
94:1b:f7:31:c5:d9:25:8c:2b:a2:02:ed:e0:fa:b1:
f5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:BC:9E:92:D7:1E:70:48:F7:04:09:70:CD:DC:9D:F9:84:19:1B:E2
X509v3 Authority Key Identifier:
keyid:F8:AD:54:36:24:F8:D3:28:1E:C9:70:45:8E:E7:52:F1:0A:42:45:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/JbyektcecEj3BAlwzdyd-YQZG-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.172.0/22
Signature Algorithm: sha256WithRSAEncryption
26:d4:30:82:4a:25:13:9d:da:09:bf:f5:48:2a:44:d3:de:24:
79:a1:bd:05:c3:fc:4a:e8:10:9a:db:c0:1e:47:94:7b:8c:c3:
b1:7b:2d:be:03:da:97:4d:19:82:e8:d9:97:59:36:b4:36:58:
6d:8b:ad:4f:b3:28:33:47:64:c4:04:66:85:9a:a9:6b:cf:f1:
1e:93:95:15:ce:5d:bb:78:39:2c:12:ed:b7:1a:c9:32:99:5f:
9b:7f:3b:e2:5f:b1:83:6d:2e:cd:0f:fd:3a:ec:65:b5:09:cd:
db:c0:c0:6e:98:29:3b:fb:c8:3e:38:84:aa:8d:1e:6f:da:5c:
98:cc:1e:0d:9f:5e:7e:53:d3:f1:f1:3d:79:57:d2:5f:fb:3f:
fd:3b:e0:f8:37:ee:74:52:46:52:91:e6:e1:e7:0a:bd:bf:2c:
cc:61:39:72:c2:d6:bc:62:22:1f:92:5c:a6:53:09:df:da:54:
71:8e:b3:ed:17:2e:f7:4d:4b:c2:5a:72:a0:1f:9d:7f:e9:ae:
79:21:e5:e8:e4:20:9a:c8:01:dc:e8:18:2f:03:3d:80:c0:53:
16:2f:8c:59:18:af:3f:b8:c7:b8:6a:8f:1e:16:d5:26:a4:46:
d2:6f:d4:61:8e:97:ff:9e:56:cd:b2:ab:f2:0d:10:e1:37:aa:
50:ae:82:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:15:20 2025 by rpki-client