Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/bHY9-snRvY8g2YGDDEk5RertPnQ.roa
File: bHY9-snRvY8g2YGDDEk5RertPnQ.roa (raw, json)
Hash identifier: siOTZA8gaSdAHWVwUxkSIsgjUIgGQ3iVG6FyFikgHEE=
Subject key identifier: 6C:76:3D:FA:C9:D1:BD:8F:20:D9:81:83:0C:49:39:45:EA:ED:3E:74
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 0196F7E83E028F127EE01191721934764F52
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/bHY9-snRvY8g2YGDDEk5RertPnQ.roa
Signing time: Thu 22 May 2025 12:11:54 +0000
ROA not before: Thu 22 May 2025 12:11:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31715
IP address blocks: 188.191.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f7:e8:3e:02:8f:12:7e:e0:11:91:72:19:34:76:4f:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: May 22 12:11:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c763dfac9d1bd8f20d981830c493945eaed3e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e2:05:5f:3d:d6:f7:cb:2e:7e:a3:a1:4d:ec:
07:46:d9:69:0a:59:66:a6:5c:d0:b9:c5:e1:82:4d:
f7:83:c9:2d:a3:56:d5:d0:ba:d6:31:7e:11:32:6f:
94:b7:07:c8:68:67:5e:1b:aa:e2:7f:a4:cc:2a:38:
07:31:0c:7c:f5:53:f5:1c:bb:5c:4b:e9:af:c7:e2:
bc:46:29:fd:96:25:9e:e9:3d:51:fd:f6:80:f8:ed:
be:91:2e:ad:3d:21:37:e6:d7:23:c0:5f:cc:e2:eb:
75:b2:d4:aa:34:41:94:4e:73:38:c6:8c:e9:78:76:
ab:82:f2:5e:7c:26:b8:bf:ac:4f:66:b5:d8:35:6e:
bb:c6:23:98:b9:8e:21:b5:8c:45:79:75:19:74:de:
b3:38:e7:14:d7:3f:36:32:6e:cb:dc:ac:8a:86:04:
d7:99:04:05:70:5c:4c:a7:15:79:b7:27:44:84:5e:
b6:d3:36:4a:03:65:24:84:6f:07:fb:ed:79:70:69:
ac:e8:2f:65:56:b8:a5:52:f7:b5:89:62:f9:80:2a:
86:82:2d:6c:00:4e:f9:ba:98:6e:a4:e0:d8:7d:29:
15:88:8f:36:8f:13:c6:02:00:cd:90:71:a1:a3:b1:
f8:08:4f:ac:7f:43:10:1a:87:45:82:6c:ce:f0:f6:
fb:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:76:3D:FA:C9:D1:BD:8F:20:D9:81:83:0C:49:39:45:EA:ED:3E:74
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/bHY9-snRvY8g2YGDDEk5RertPnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.191.111.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:bb:a0:2d:4c:2d:22:4b:aa:13:7b:ee:77:6c:f2:c4:ec:01:
e5:9b:ea:85:a0:af:df:0a:c5:62:40:eb:55:15:4f:fd:94:6a:
48:8d:b8:d5:00:3d:ed:e8:52:d0:51:a1:94:b3:49:e7:2f:df:
52:c4:ec:98:f5:11:d3:e4:14:3f:f1:78:a0:63:59:8c:c5:3d:
69:4d:c5:06:c2:59:d7:e0:75:05:2c:fa:7d:4a:1f:62:df:cb:
70:a0:9f:0c:6a:40:14:6d:29:cf:d2:18:66:62:a5:5d:11:c4:
cb:03:fe:f4:95:a4:83:21:f5:5e:7f:37:a9:ec:10:7a:64:a2:
76:76:cf:14:49:04:8c:5e:06:19:09:f5:20:85:8d:76:fa:be:
ac:db:aa:e0:01:ef:c0:94:d8:c6:57:bb:60:e4:f9:74:2d:8e:
17:6c:e3:6c:c3:37:66:6d:1e:70:16:bb:fc:36:16:17:30:75:
c6:3d:19:a2:e8:3d:0d:b9:5a:c3:6b:de:62:9f:0e:80:fb:a6:
78:8a:6d:b2:17:e8:94:6e:ce:79:c3:72:55:22:2c:94:cb:46:
ac:4e:39:19:a7:d9:ef:32:36:59:d8:ec:e2:e1:28:73:38:e5:
cd:81:d8:35:8a:61:74:41:03:af:4c:06:2f:22:99:6f:38:ae:
15:d2:20:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:16:19 2025 by rpki-client