Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/vYkV6kUVFjsLOaSYb5JQJeUl9Lo.roa
File: vYkV6kUVFjsLOaSYb5JQJeUl9Lo.roa (raw, json)
Hash identifier: QcMdmuYYkRKD1mCw5hra2RSf8EPKqHzXLoUnYY2tlUI=
Subject key identifier: BD:89:15:EA:45:15:16:3B:0B:39:A4:98:6F:92:50:25:E5:25:F4:BA
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0196C8745A6FA6D488C69E37B73C913E8968
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/vYkV6kUVFjsLOaSYb5JQJeUl9Lo.roa
Signing time: Tue 13 May 2025 07:03:10 +0000
ROA not before: Tue 13 May 2025 07:03:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 151338
IP address blocks: 79.172.218.0/24 maxlen: 24
79.172.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:74:5a:6f:a6:d4:88:c6:9e:37:b7:3c:91:3e:89:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: May 13 07:03:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd8915ea4515163b0b39a4986f925025e525f4ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:68:b6:4d:17:66:6a:ea:a9:5e:b6:da:e9:3e:
b0:65:c1:3d:d5:9b:44:4f:d4:29:05:12:84:b1:60:
64:fc:88:6b:63:4b:3d:13:e3:d1:28:aa:8c:0a:3a:
ff:1e:6e:9d:7c:85:f2:a9:72:47:6e:e6:b0:d0:81:
38:d4:a4:18:ac:7b:aa:a2:3f:65:c2:b3:9c:0d:59:
d2:b3:71:4c:3d:a1:2d:97:e3:14:67:3e:ef:c0:24:
07:95:d6:fb:90:ee:b7:33:ce:20:9b:b7:e5:5c:76:
79:13:57:ca:03:67:59:2c:b7:b3:ae:7f:c0:fd:4e:
ec:d0:f9:a6:3b:80:c1:14:bd:41:e3:a6:5c:93:fb:
4e:83:fb:24:b2:76:cd:80:ac:cf:3d:90:be:c0:ff:
12:03:27:db:9a:fa:e4:4c:9a:ff:f3:7c:2a:74:1a:
dd:09:89:3e:c4:f6:d0:53:27:b3:a2:d9:5d:c7:bf:
ef:3f:79:ef:67:d5:d6:44:bb:a4:ae:9a:30:16:b3:
fc:bb:40:37:58:28:23:37:29:5f:1f:9e:50:75:1f:
b4:d3:b9:1a:3e:3a:44:6e:f8:71:29:71:92:1d:60:
d6:0b:17:7f:02:73:42:d4:88:b8:fa:22:6f:e4:f4:
8e:65:35:50:01:47:1f:49:6f:16:c4:91:12:5f:3b:
df:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:89:15:EA:45:15:16:3B:0B:39:A4:98:6F:92:50:25:E5:25:F4:BA
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/vYkV6kUVFjsLOaSYb5JQJeUl9Lo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.218.0/24
79.172.242.0/24
Signature Algorithm: sha256WithRSAEncryption
45:fd:83:7e:3a:f3:57:3a:af:7a:ab:e1:48:94:e6:a4:74:3a:
07:a5:bf:ea:03:94:c7:e7:59:b3:ea:b9:cc:d2:a3:2e:d6:76:
c5:e4:bc:08:bf:4f:bb:69:d3:dc:11:39:94:8b:71:d9:e5:97:
0e:e6:2c:36:7f:79:46:4a:2b:a7:c2:83:9e:04:ed:38:d5:02:
9e:e3:0c:64:ff:f3:18:d6:27:0d:9f:d0:bd:c2:c2:0a:62:9d:
c1:e5:9a:2b:bc:45:93:74:ed:e6:2e:76:6f:ef:ee:f3:2e:cd:
2d:58:6d:30:f0:d4:f9:74:c4:0d:d1:1e:41:b5:d6:fe:66:00:
cc:a7:ca:1c:0c:bc:18:ec:69:71:6b:37:65:8b:b0:4c:55:92:
ca:92:a4:de:99:cd:aa:45:ca:75:85:9b:03:90:ee:0a:97:51:
ad:79:33:f7:ee:51:d3:26:9d:4f:a0:fd:e0:e5:3b:fe:cf:69:
12:c8:64:78:f6:ab:4e:90:61:2a:05:03:3e:1b:b8:b1:cb:9f:
21:58:54:65:c9:2a:b2:e9:66:63:a3:81:d5:58:0b:42:41:db:
fb:9a:42:48:d3:c9:d7:1e:57:a9:ea:c2:09:9d:2f:45:ed:7f:
d0:41:0c:46:e4:d1:32:d0:ac:16:14:9e:e1:1c:f4:87:9d:2d:
53:b9:48:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:25:07 2025 by rpki-client