Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/yFRw8q4k0v0OL9Ce0AshdGghXG8.roa
File: yFRw8q4k0v0OL9Ce0AshdGghXG8.roa (raw, json)
Hash identifier: t47jhkvwslm22JJIGO341Kc6OVcgswUpwpZDqVXEDVs=
Subject key identifier: C8:54:70:F2:AE:24:D2:FD:0E:2F:D0:9E:D0:0B:21:74:68:21:5C:6F
Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial: 0196CF18BB1147863FED5CCF3A7CCCDFB0BB
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/yFRw8q4k0v0OL9Ce0AshdGghXG8.roa
Signing time: Wed 14 May 2025 14:00:26 +0000
ROA not before: Wed 14 May 2025 14:00:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13335
IP address blocks: 185.251.80.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cf:18:bb:11:47:86:3f:ed:5c:cf:3a:7c:cc:df:b0:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Validity
Not Before: May 14 14:00:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c85470f2ae24d2fd0e2fd09ed00b217468215c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:09:0f:0d:9a:ca:32:d7:11:48:97:30:6f:ce:
5a:e2:a3:a4:2d:be:aa:dc:1e:eb:0e:ed:b6:1e:0c:
82:a8:4f:59:42:89:73:16:1d:6f:b5:64:99:b1:ba:
8e:5f:b9:b1:82:0d:3b:92:24:31:dc:d5:ce:98:72:
83:38:64:0b:4b:f1:bd:6b:3c:a6:e6:ef:f8:a6:00:
89:b6:4e:61:b8:e7:bf:d7:0f:76:18:fb:0c:34:c3:
a3:99:a1:da:b7:93:55:76:c3:19:01:33:e6:95:7a:
57:e4:12:f1:a7:a8:3f:92:e3:05:a0:b7:64:0a:2c:
29:22:54:5c:f2:ce:f2:9f:4c:09:54:b3:84:fe:30:
8d:67:5a:12:7a:f6:34:d7:50:e5:c0:36:cd:04:4a:
21:96:ca:85:05:75:19:52:9d:86:51:17:9c:45:73:
aa:07:4a:2c:13:9c:8c:11:92:04:12:c8:25:ea:5c:
35:9e:f8:56:f9:85:8e:f1:03:c3:e3:63:5d:53:4e:
67:87:77:8d:34:28:d5:17:42:ab:cb:34:cd:fd:87:
82:4e:6c:d0:a9:d4:db:1b:f8:60:f6:ee:e3:3d:a3:
f6:e9:e1:f4:92:1b:06:a7:6e:3e:8d:e5:d4:c3:d1:
3a:8f:46:49:c5:e4:cc:0b:6f:83:c4:86:5b:9c:fa:
69:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:54:70:F2:AE:24:D2:FD:0E:2F:D0:9E:D0:0B:21:74:68:21:5C:6F
X509v3 Authority Key Identifier:
keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/yFRw8q4k0v0OL9Ce0AshdGghXG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.80.0/23
Signature Algorithm: sha256WithRSAEncryption
54:51:36:eb:7e:37:c7:b5:12:cd:ab:21:d1:e8:88:b1:29:49:
1b:3f:02:31:cf:1f:49:14:55:33:2d:f3:37:ec:7d:6b:41:b8:
b7:4b:09:c0:14:41:e0:1b:22:a8:01:b0:c2:05:bd:1b:d4:03:
c8:fb:f1:b4:e8:1b:bc:6d:15:a5:5b:13:2e:3d:5a:b7:a3:7a:
b4:68:3b:f3:e7:ef:51:ab:2c:73:36:7f:3e:d6:37:b7:03:47:
72:d2:47:e1:b6:37:f1:f5:51:6c:6b:54:32:29:6c:f7:13:ec:
39:0c:f6:35:02:f1:57:4a:81:78:58:16:61:39:b9:27:d4:2c:
c4:89:6c:8c:0e:bd:18:ec:7b:1b:97:2d:7d:64:75:2c:67:95:
ce:cb:b2:f6:32:de:9d:7e:83:25:cc:8f:df:2b:a8:d5:de:95:
ce:c7:ad:72:4b:f1:d5:f9:d4:68:77:b0:4b:d2:fc:d8:91:47:
bf:32:5f:56:cc:ee:fd:95:d3:54:63:6a:49:94:88:25:5b:f4:
bb:e1:7f:44:73:2e:c1:32:9a:d5:56:c5:7a:6f:a9:dc:82:c9:
9e:7d:fc:70:5f:4a:e5:0c:b9:0a:5a:0c:dc:70:d3:df:06:4a:
7c:b7:22:b1:7b:2f:ac:78:e5:f8:9a:63:78:b0:e1:1b:2c:0e:
5c:d5:25:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:25:00 2025 by rpki-client