Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/vyoLOYF7hsLBOGjck5t3unLW39g.roa
File: vyoLOYF7hsLBOGjck5t3unLW39g.roa (raw, json)
Hash identifier: zHMbGWldBzia3+X0+26y7vhQZZJp5fFWFDYQyTykG6o=
Subject key identifier: BF:2A:0B:39:81:7B:86:C2:C1:38:68:DC:93:9B:77:BA:72:D6:DF:D8
Certificate issuer: /CN=0e51516767d9a8508c6e14d58deeffbfab8080dd
Certificate serial: 0195D1FD8E616A6A7C9CCE0A691270FF0D65
Authority key identifier: 0E:51:51:67:67:D9:A8:50:8C:6E:14:D5:8D:EE:FF:BF:AB:80:80:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DlFRZ2fZqFCMbhTVje7_v6uAgN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/vyoLOYF7hsLBOGjck5t3unLW39g.roa
Signing time: Wed 26 Mar 2025 10:26:49 +0000
ROA not before: Wed 26 Mar 2025 10:26:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 38930
IP address blocks: 91.224.122.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DlFRZ2fZqFCMbhTVje7_v6uAgN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d1:fd:8e:61:6a:6a:7c:9c:ce:0a:69:12:70:ff:0d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e51516767d9a8508c6e14d58deeffbfab8080dd
Validity
Not Before: Mar 26 10:26:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf2a0b39817b86c2c13868dc939b77ba72d6dfd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:99:aa:5b:48:0b:09:66:21:09:13:ac:2c:37:
5d:7a:2f:74:66:28:50:b9:78:dc:44:69:0b:86:39:
e8:7f:92:1d:5b:e4:46:c8:a6:a7:c1:4e:53:e1:ce:
c9:0f:4e:c2:54:21:4c:52:2c:45:db:c2:15:c6:27:
81:ec:cc:39:27:d7:40:30:cf:32:94:ef:bd:c7:95:
5d:d2:69:1d:d6:bc:01:1f:94:ad:ca:f8:47:61:ae:
78:4e:33:20:02:2d:5d:c3:6e:4f:64:dd:4e:4a:2b:
71:26:d4:d2:f0:14:df:71:d8:1f:a8:52:b0:9b:54:
37:28:86:c7:03:cb:37:ce:42:4a:0c:6a:84:da:7a:
d3:28:07:b8:92:b6:5a:e3:30:d8:e2:e8:6e:a5:71:
8f:cd:9d:fd:5e:ea:23:00:8f:3f:59:3f:28:a2:83:
bb:21:e6:52:64:8e:8c:b1:e8:40:fc:44:95:1c:3f:
b6:dd:46:ba:8d:58:d5:82:6b:d4:86:69:d7:4d:c5:
0f:15:33:5b:fa:ea:4c:3d:ef:0d:68:bf:fb:10:83:
c1:4f:53:1b:8f:54:d3:9e:29:c8:b2:04:90:3b:a9:
24:ba:bc:02:33:84:e9:35:7e:ab:d9:64:ca:04:1d:
90:3e:e5:d3:79:c4:a3:9b:98:42:db:4d:a2:41:ce:
69:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:2A:0B:39:81:7B:86:C2:C1:38:68:DC:93:9B:77:BA:72:D6:DF:D8
X509v3 Authority Key Identifier:
keyid:0E:51:51:67:67:D9:A8:50:8C:6E:14:D5:8D:EE:FF:BF:AB:80:80:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DlFRZ2fZqFCMbhTVje7_v6uAgN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/vyoLOYF7hsLBOGjck5t3unLW39g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.122.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:d8:97:d7:61:09:00:70:5d:ea:08:64:bd:99:4b:41:b7:6e:
7a:f4:46:31:15:cb:d3:02:a0:36:96:de:2b:99:fa:11:b4:d2:
a9:fd:d3:a3:f9:23:fe:18:53:a7:4a:9d:e3:1f:f7:ce:8f:75:
e0:cd:b2:8b:96:aa:c5:64:cf:32:c6:18:a5:32:86:66:11:ab:
8b:9c:d8:a2:f6:a6:88:b3:f6:de:2b:c3:49:47:2d:0c:99:60:
96:8b:65:a3:49:6b:1d:bf:90:d9:9f:a5:95:70:b1:f6:62:9b:
2e:35:88:2a:56:fb:93:ae:49:8c:38:d4:95:db:1b:34:06:1a:
2c:ca:b1:d3:01:09:ac:39:2e:d0:5e:50:c9:74:5a:c6:ed:48:
96:5e:7b:ad:a4:65:e9:a9:45:eb:44:6f:44:4e:6b:d0:c2:a6:
d0:56:90:a1:1d:f0:3d:22:05:fb:97:27:58:91:2b:7e:70:7a:
93:b5:10:97:6f:d4:ec:06:61:e5:46:be:c2:78:4e:01:70:22:
ca:93:cb:84:cc:36:d0:ab:e0:98:eb:1e:2d:74:a0:67:4a:e3:
c7:8e:2f:93:fd:9f:06:3b:6c:bd:47:ac:55:45:66:4f:ca:c5:
6d:e4:12:49:81:d6:3d:dc:14:03:65:4d:3f:9a:e1:91:f0:ef:
fe:94:ea:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:55:52 2025 by rpki-client