Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/yEIzEDNlVYG2U9PRbVP1FLxEQxk.roa
File: yEIzEDNlVYG2U9PRbVP1FLxEQxk.roa (raw, json)
Hash identifier: Fv9hIbJ4brwrbURruEtIMtsEQKbTJMPhQX18jUCwWZ4=
Subject key identifier: C8:42:33:10:33:65:55:81:B6:53:D3:D1:6D:53:F5:14:BC:44:43:19
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 0196D2DC886E59BBA248ED86E6F26F375B96
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/yEIzEDNlVYG2U9PRbVP1FLxEQxk.roa
Signing time: Thu 15 May 2025 07:33:10 +0000
ROA not before: Thu 15 May 2025 07:33:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214059
IP address blocks: 86.106.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d2:dc:88:6e:59:bb:a2:48:ed:86:e6:f2:6f:37:5b:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: May 15 07:33:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c842331033655581b653d3d16d53f514bc444319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d4:ab:50:eb:41:57:5e:f7:36:3d:89:c0:15:
eb:fc:e7:70:9c:62:20:c6:17:0a:7b:34:59:10:03:
76:be:f2:2f:d1:04:7f:5b:dd:23:90:cc:dd:0f:94:
7d:01:4a:4f:0b:d5:74:bc:40:7d:73:3e:03:c4:03:
02:2c:0b:cf:09:04:8c:a9:33:21:35:65:69:c6:a6:
77:eb:43:dc:1e:3c:17:31:a8:fe:f4:29:23:ff:37:
15:33:e3:19:06:ec:5f:a7:e9:df:6e:81:06:a6:b1:
9d:7a:38:72:2e:cb:57:e8:b1:e3:7b:fa:ae:d8:8d:
34:29:b5:f2:c9:1b:ed:1e:a1:d8:28:3e:61:87:6c:
1e:4c:f7:9b:54:46:cc:4f:e1:ce:97:a3:41:c4:1c:
c9:a1:68:35:50:e5:df:31:df:c6:38:08:ef:e9:0e:
f5:fc:e7:31:54:e7:09:3c:c5:f6:26:58:9f:01:54:
d6:d9:24:c5:6a:e9:99:34:a4:6a:94:d6:af:24:1a:
1d:51:22:06:9a:ce:09:a4:10:6c:90:f3:0f:ee:ca:
04:a5:4b:a0:3b:cc:ea:e2:04:f5:ac:97:d9:bc:68:
03:a1:30:34:f0:b6:d8:d2:b8:47:32:a9:4f:de:69:
bf:e5:e2:23:eb:f9:c8:92:0a:08:6e:c9:dd:25:f4:
6c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:42:33:10:33:65:55:81:B6:53:D3:D1:6D:53:F5:14:BC:44:43:19
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/yEIzEDNlVYG2U9PRbVP1FLxEQxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.104.0/24
Signature Algorithm: sha256WithRSAEncryption
27:95:af:a5:e9:af:f7:bb:e4:ae:f7:53:e7:db:92:58:a7:7a:
db:8a:1e:d4:45:50:75:56:7b:f3:db:d6:79:7b:8c:fa:0a:86:
cf:08:ef:ce:57:97:d5:ea:62:6e:2b:b8:31:eb:c7:48:bd:92:
4f:46:80:73:e2:66:54:94:62:b1:f6:ea:d0:18:92:77:60:e3:
ba:18:5e:6d:6b:75:4a:55:1c:01:c5:7b:cc:df:da:0f:45:e0:
21:44:23:24:4e:10:7b:f3:5b:8d:4e:4d:fb:46:57:cf:ea:08:
b7:5d:0f:ca:0a:e4:42:e3:91:4d:25:a0:e6:75:80:65:20:bf:
41:b2:0f:22:da:5e:5c:7d:26:ae:21:21:95:4c:9b:ae:71:65:
fa:46:e5:13:7e:78:9f:f7:b1:e1:1e:e3:cc:5d:8c:c2:3a:fc:
5c:9e:a7:08:f6:11:1d:73:2b:8c:25:71:27:1a:0a:de:66:c3:
e3:90:c0:e9:4e:8b:cd:90:2b:b4:31:5c:08:38:f6:cf:6a:ef:
9f:45:8e:7f:d6:a1:e6:3b:d3:fe:7f:0e:56:7c:df:6f:e0:6e:
95:15:03:a2:ac:d0:85:fd:45:be:cc:8b:01:d2:37:de:92:07:
3b:2e:9c:cb:0d:a8:c9:3b:af:54:7f:69:00:e6:30:1d:aa:fa:
9e:f5:9b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:39:45 2025 by rpki-client