Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/I8bPM6Z_2vXpUI089O5-y4ygQIo.roa
File: I8bPM6Z_2vXpUI089O5-y4ygQIo.roa (raw, json)
Hash identifier: x/SuJ4WgZwAnUhOc07e5Kvt5wBmm78Znu1AdX1pExI8=
Subject key identifier: 23:C6:CF:33:A6:7F:DA:F5:E9:50:8D:3C:F4:EE:7E:CB:8C:A0:40:8A
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019742BFD7ADA697992D70022283E97A976A
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/I8bPM6Z_2vXpUI089O5-y4ygQIo.roa
Signing time: Fri 06 Jun 2025 00:59:18 +0000
ROA not before: Fri 06 Jun 2025 00:59:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13213
IP address blocks: 155.2.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:42:bf:d7:ad:a6:97:99:2d:70:02:22:83:e9:7a:97:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jun 6 00:59:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23c6cf33a67fdaf5e9508d3cf4ee7ecb8ca0408a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f5:fc:5f:c0:11:d8:a7:e9:2f:8d:72:cb:5e:
43:eb:5f:ab:d8:bb:d9:61:68:d4:38:11:7f:62:cf:
45:b3:02:54:d1:50:a0:7b:fb:b7:2a:a4:71:b2:73:
b5:72:68:62:d4:b0:0a:fb:66:41:d0:ea:d1:5f:35:
f9:ce:94:ad:e2:5d:08:ef:ef:3c:a9:66:c1:18:57:
bf:3b:05:cd:f3:3b:4e:58:52:66:dd:05:77:ea:88:
cc:94:f3:df:ec:7a:0f:4c:85:68:06:25:17:ff:02:
ad:6e:4c:29:e4:37:ff:83:86:15:5d:cf:4f:78:97:
3c:45:a7:29:48:b6:db:b6:47:f2:1a:1b:66:2d:74:
5e:a8:7c:b0:c9:3a:ee:4a:37:1b:89:6c:3c:6e:3f:
62:31:15:00:34:3d:a9:85:33:ea:ba:c5:d9:f4:fb:
2a:cd:35:1f:cb:5b:58:71:cd:a5:18:7c:aa:bc:57:
4d:52:1d:22:ce:b5:c5:68:35:91:26:c7:6a:5f:2f:
7d:96:d5:4e:d0:3d:90:cc:ca:27:6d:36:39:e0:94:
56:cd:d7:df:48:a8:1c:78:08:ad:95:5b:10:13:e4:
a5:01:76:e1:30:a5:1e:d8:ce:c7:fb:b1:91:69:87:
92:98:01:9c:b7:b4:f9:ca:87:7d:d7:e1:41:de:80:
22:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C6:CF:33:A6:7F:DA:F5:E9:50:8D:3C:F4:EE:7E:CB:8C:A0:40:8A
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/I8bPM6Z_2vXpUI089O5-y4ygQIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.2.190.0/24
Signature Algorithm: sha256WithRSAEncryption
78:f0:46:63:ab:58:f1:c0:4f:a5:a1:ce:3e:ba:06:89:47:e6:
ef:eb:1f:e6:76:0b:1e:30:92:30:cf:ff:33:51:70:af:f1:d8:
37:95:86:5f:96:70:32:72:a4:f8:3f:a6:ea:54:1b:76:eb:a5:
74:5e:fd:24:f1:c2:eb:35:8f:4f:a6:88:91:08:69:fd:9e:10:
4f:93:a0:e3:26:5d:a0:f1:a3:73:8d:44:d2:46:44:55:ef:05:
93:6a:b7:a0:9f:3f:52:62:50:29:28:b9:f5:84:80:da:1c:58:
81:42:99:2f:cc:9f:be:ea:57:9c:84:f8:7e:58:f4:a7:6b:1d:
fc:8d:cf:e5:a7:ba:d7:6c:58:a9:33:14:a0:56:51:3b:51:2b:
59:a2:86:f2:7a:7c:73:56:ed:4c:c5:e2:11:1e:e4:62:1e:be:
0b:3f:c4:2d:71:8d:99:6b:65:02:8f:64:c0:d3:47:a8:9d:48:
18:c2:63:b5:24:f1:42:22:4d:97:5a:d1:6c:03:0e:25:a3:d8:
c7:65:c7:65:3d:93:24:81:79:59:dc:fa:c2:30:13:74:26:e7:
95:3a:f2:19:f0:7f:6a:77:af:70:5b:19:ba:e8:de:ab:38:15:
44:2e:55:30:be:b9:6a:38:d5:d4:14:a3:48:2b:e8:39:74:a1:
f1:05:ce:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:18:49 2025 by rpki-client