Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/cYZL2PxzTq8JPhLXSv4n3rhTnBM.roa
File: cYZL2PxzTq8JPhLXSv4n3rhTnBM.roa (raw, json)
Hash identifier: 0bTWxebwS7PSuNsexevGfXCFA2im0QW1jPcHW/TWVlE=
Subject key identifier: 71:86:4B:D8:FC:73:4E:AF:09:3E:12:D7:4A:FE:27:DE:B8:53:9C:13
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 0197F91058A6274E7902C0D11BCB8118731D
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/cYZL2PxzTq8JPhLXSv4n3rhTnBM.roa
Signing time: Fri 11 Jul 2025 10:38:07 +0000
ROA not before: Fri 11 Jul 2025 10:38:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6461
IP address blocks: 104.249.56.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f9:10:58:a6:27:4e:79:02:c0:d1:1b:cb:81:18:73:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jul 11 10:38:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=71864bd8fc734eaf093e12d74afe27deb8539c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:06:69:e1:92:63:6b:d9:cd:95:3c:79:08:ae:
51:ed:43:1d:76:12:24:e3:0f:fd:c2:71:be:2d:67:
83:80:ef:f1:bd:6c:11:54:df:ca:25:e4:93:de:f9:
c8:c3:7a:05:b2:d1:2b:56:53:25:33:4d:d6:6d:10:
2d:8d:b3:49:f0:ec:ca:d8:c9:20:11:9f:ae:18:b5:
db:73:cd:7d:b4:36:39:08:7e:4e:a6:d6:1f:a0:12:
9f:c5:0c:75:17:3c:2a:ee:58:49:01:c2:e3:07:5e:
ef:08:f3:0a:88:dc:bf:de:5b:84:8d:99:53:c4:69:
32:01:24:19:48:eb:1d:8a:f7:53:32:c7:f9:8e:3c:
94:5a:09:cb:9f:f6:8b:12:e9:76:28:a9:2b:db:4d:
fd:d4:65:f2:20:1e:de:9d:01:e8:1b:c9:08:e9:19:
43:7c:e0:63:44:8e:66:d6:c9:ac:d2:60:c7:ef:32:
a0:84:cf:9f:74:9e:58:f7:2e:1a:bd:ab:41:3a:95:
56:82:4d:8f:7b:7a:21:60:f4:2c:32:ce:ab:40:13:
98:99:b1:e2:20:6b:52:d5:d6:f3:3d:26:8a:d3:5d:
23:39:64:f3:ef:63:25:04:28:22:f8:d4:10:db:e2:
33:49:d0:33:86:06:25:90:36:e9:d3:f5:c7:06:bf:
23:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:86:4B:D8:FC:73:4E:AF:09:3E:12:D7:4A:FE:27:DE:B8:53:9C:13
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/cYZL2PxzTq8JPhLXSv4n3rhTnBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.249.56.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:3c:2b:f7:8e:72:78:a1:b7:63:02:19:e6:af:cb:c0:d9:7c:
96:2b:06:79:ca:a5:31:8d:05:84:15:cd:4a:ca:76:7b:7d:6a:
3b:4d:18:b7:3b:f7:a2:28:49:1a:82:91:b9:a9:39:58:1b:94:
a1:8c:9d:e5:b1:21:6d:f2:65:25:67:79:52:3c:43:1b:aa:bb:
41:6e:b2:22:08:79:0a:c9:84:1a:9d:26:43:c4:c5:d5:39:c4:
9b:29:09:c0:ca:c0:df:f1:c1:8e:1b:93:3e:cb:af:c5:4a:20:
52:17:4d:33:d9:dc:65:95:b9:c5:4e:46:b7:ec:1d:b2:31:31:
a2:ca:41:7c:5b:17:d8:d0:2d:15:a7:93:65:e1:21:55:bb:7b:
88:94:9f:ea:76:be:5e:5d:89:8d:a1:25:e8:d6:df:a8:3f:7a:
bb:ab:9b:d3:2e:66:70:0d:72:6f:94:c9:3a:e9:72:f8:22:ba:
b0:26:cf:e9:33:ee:0c:fc:eb:b3:c7:7f:f2:d0:bc:7c:f6:27:
53:aa:d8:a8:cb:80:70:cc:f6:03:12:5a:44:e6:63:7c:81:67:
f1:27:8c:f3:13:fa:87:fa:b1:8c:da:e8:ff:02:2b:c7:d2:da:
8e:31:3a:41:a8:fe:b4:9e:2a:41:82:76:ed:b4:f8:83:f3:41:
8e:33:07:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:44:11 2025 by rpki-client