Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/L49koyNjEltWVgnwR0M3QCYB8U8.roa
File: L49koyNjEltWVgnwR0M3QCYB8U8.roa (raw, json)
Hash identifier: WNJt3vr/SLREcuu5FouVh3niIrtGl3h9jG/3NCYHWmw=
Subject key identifier: 2F:8F:64:A3:23:63:12:5B:56:56:09:F0:47:43:37:40:26:01:F1:4F
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 01970C6BB617B9B518E5B015B6D0E6FC0B24
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/L49koyNjEltWVgnwR0M3QCYB8U8.roa
Signing time: Mon 26 May 2025 11:47:54 +0000
ROA not before: Mon 26 May 2025 11:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 104.238.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0c:6b:b6:17:b9:b5:18:e5:b0:15:b6:d0:e6:fc:0b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: May 26 11:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f8f64a32363125b565609f0474337402601f14f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f8:3f:2e:2e:b9:62:cf:9f:0f:98:91:c5:7b:
f1:d2:e4:9d:78:a7:fa:5d:c8:5b:03:4d:f2:24:01:
22:2c:e5:3b:8a:89:10:15:0d:8d:21:f6:86:15:5b:
d5:52:f8:b2:3c:39:97:2f:35:21:36:22:50:16:80:
83:d0:e6:bb:a8:7c:71:a6:81:cf:c9:32:4f:78:e8:
e4:e8:77:16:2a:05:2e:8e:c2:18:44:96:80:95:22:
88:ce:28:98:e4:0d:bb:d7:71:8e:c8:02:f8:8e:df:
49:8a:87:a8:1b:2d:80:d4:ff:89:87:05:dd:ea:2b:
e0:fd:cc:a4:ec:45:de:46:ee:67:ee:4b:7e:59:64:
28:03:58:a6:81:85:1a:8f:59:c0:fa:05:c6:b4:94:
a7:3a:7b:37:54:d8:f1:2c:27:88:c3:aa:0f:01:4d:
b6:bd:77:57:f9:12:86:65:82:24:c4:1f:1d:69:26:
2f:6e:ff:89:b6:bf:47:48:cd:35:51:1c:1d:35:1c:
66:ea:ca:57:55:03:d0:51:29:f6:4f:9a:ba:49:79:
70:da:96:ca:1b:16:38:8e:4f:9b:24:c0:3c:a3:b7:
96:96:9c:09:e1:7c:5a:4b:26:12:41:9b:32:41:5b:
68:7b:7f:51:24:58:90:6a:d4:2d:f8:d7:41:20:8c:
3c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8F:64:A3:23:63:12:5B:56:56:09:F0:47:43:37:40:26:01:F1:4F
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/L49koyNjEltWVgnwR0M3QCYB8U8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.238.31.0/24
Signature Algorithm: sha256WithRSAEncryption
36:2b:c7:37:52:5f:72:86:a1:2b:ac:13:a4:93:7f:9f:34:17:
09:dd:d5:b6:92:97:f6:02:c4:2e:90:a7:09:6a:ec:62:c5:7e:
03:29:9e:62:7c:af:2b:81:20:57:bb:d9:bc:bc:0b:f4:41:b2:
2a:ee:de:61:ea:ab:79:39:0b:5d:f0:be:0c:3f:ec:e4:f0:55:
f3:3a:60:ee:b3:1a:5c:e5:27:40:19:bd:22:a3:61:48:73:db:
64:57:59:fc:30:89:97:81:7a:d8:02:da:41:88:45:f2:60:48:
ef:72:ab:b4:c6:e7:29:59:20:b6:9e:ac:3a:84:72:46:5b:23:
34:0a:f3:56:58:c3:70:65:d3:28:52:19:6b:15:ae:d9:af:fa:
d7:2d:a9:92:3a:96:16:55:da:04:b7:df:b8:b6:61:78:dc:bd:
61:a8:c6:fb:3e:fa:16:f1:35:c6:9b:be:3e:70:36:d9:9a:6e:
ed:c6:dc:86:aa:b5:49:19:be:f0:5e:84:1f:71:37:6d:ef:20:
2b:09:79:1e:59:b1:2b:12:11:2c:87:64:96:f5:1e:2a:5c:a8:
bb:13:42:46:2a:21:2a:f5:80:6b:51:d6:5d:9c:0e:76:83:09:
90:e5:63:b5:94:81:50:a3:7e:3f:ec:dd:10:0b:a2:81:8d:f0:
6d:2a:6d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:38:45 2025 by rpki-client