Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/YxZAW7xYuuoItNSxZUB_Jyv54M8.roa
File: YxZAW7xYuuoItNSxZUB_Jyv54M8.roa (raw, json)
Hash identifier: ZHkpmuH04xDfiHb0nZigSHP0TijTWcHxuOKkj3BJQR4=
Subject key identifier: 63:16:40:5B:BC:58:BA:EA:08:B4:D4:B1:65:40:7F:27:2B:F9:E0:CF
Certificate issuer: /CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8
Certificate serial: 0196F1419980D9C860CC12C7FABE9093861E
Authority key identifier: 5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/YxZAW7xYuuoItNSxZUB_Jyv54M8.roa
Signing time: Wed 21 May 2025 05:12:10 +0000
ROA not before: Wed 21 May 2025 05:12:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39011
IP address blocks: 194.102.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f1:41:99:80:d9:c8:60:cc:12:c7:fa:be:90:93:86:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8
Validity
Not Before: May 21 05:12:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6316405bbc58baea08b4d4b165407f272bf9e0cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b1:e2:dc:f1:d5:29:97:97:c5:fd:91:f9:c1:
29:34:20:09:26:6f:ea:87:00:0e:fa:0b:c6:f4:b1:
88:8e:52:2d:ed:07:59:bc:fe:73:8d:90:68:a0:bf:
46:03:88:1a:3e:e9:07:c9:e5:05:6f:d3:58:54:d2:
ea:97:7a:a3:9e:3e:c6:ee:a6:39:82:a5:f9:54:a0:
b3:93:2f:fe:41:f6:3e:43:e2:4a:cc:07:60:23:c9:
b1:d8:59:63:ad:55:28:cd:4f:64:df:37:0f:11:2c:
c8:7f:9b:da:fa:3d:65:16:62:e1:b2:57:e6:20:af:
63:8f:9c:f2:be:3f:bf:52:0a:70:39:b5:d2:b8:b3:
45:40:bb:b8:d7:08:43:2c:7e:b8:1c:c4:b3:ad:d0:
66:5e:6e:c8:47:27:a9:e2:11:c9:75:e0:bf:8c:60:
45:89:df:05:c8:d9:dc:76:f4:39:a5:9b:fa:c4:81:
e3:8e:2c:83:ad:61:2d:61:ee:43:95:43:a8:f1:6b:
4c:55:33:f9:3c:43:40:af:a2:3d:e2:96:e6:f3:84:
e6:fb:9d:06:9f:21:a8:bb:96:2f:8b:97:fd:a1:6f:
df:0f:13:1c:cf:ec:ef:34:a2:03:46:fb:e3:3c:70:
53:e6:36:9a:36:b2:69:f9:13:e1:23:e4:73:0e:80:
71:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:16:40:5B:BC:58:BA:EA:08:B4:D4:B1:65:40:7F:27:2B:F9:E0:CF
X509v3 Authority Key Identifier:
keyid:5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/YxZAW7xYuuoItNSxZUB_Jyv54M8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.204.0/24
Signature Algorithm: sha256WithRSAEncryption
19:6e:d5:66:ee:0c:0a:88:65:21:50:15:b1:e3:a8:a4:7d:2b:
4e:aa:d8:67:aa:c2:85:0e:a1:47:8a:ed:f0:fb:5a:72:87:05:
6f:c4:62:57:9a:97:f8:b1:38:5c:5e:f9:5d:d9:60:82:6d:a3:
39:c5:1b:a5:2d:12:47:9e:c6:8b:de:3c:10:17:72:15:07:18:
7f:47:1a:85:28:c6:48:6d:0d:62:9d:42:67:4a:5f:64:cd:c8:
3d:2a:b1:d9:80:d3:d7:a9:a5:75:97:8e:b2:21:4e:d3:67:3d:
60:a6:92:2f:4a:d4:2f:90:8e:b1:a8:de:b7:59:6d:9f:ed:d7:
47:1c:f5:ff:2a:95:7e:01:2a:16:9c:a7:11:06:29:2e:cc:d4:
b2:5f:a5:bd:23:43:4a:87:16:21:c3:69:fe:b3:ff:24:88:73:
33:ea:50:cc:57:84:81:02:12:10:cb:40:1f:50:a5:81:9f:67:
7a:ed:5b:ef:c7:1f:41:33:57:a0:b0:d6:4e:0b:a9:93:a4:c5:
1c:e4:cc:4e:f4:50:86:9b:b9:69:5f:15:8e:1d:68:59:7f:76:
3f:5e:30:ba:73:e2:0a:37:5b:06:aa:c6:99:b1:11:0a:10:2d:
0d:3f:88:3d:7c:0a:23:83:d7:7d:23:23:eb:12:e2:df:5d:cb:
b2:7b:6c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:07:13 2025 by rpki-client