Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/8ci54VVYciz_jxxq2gzGcTqq324.roa
File: 8ci54VVYciz_jxxq2gzGcTqq324.roa (raw, json)
Hash identifier: m8iDJ2nBFQ5dEA0SAfYW/kJtrFJRgfeU1s8OGK3JtLU=
Subject key identifier: F1:C8:B9:E1:55:58:72:2C:FF:8F:1C:6A:DA:0C:C6:71:3A:AA:DF:6E
Certificate issuer: /CN=bbe2cc20d69b30dde18ec0d002ce2f9149bfb06d
Certificate serial: 019715EFEE4C2AAEAB675BDF2AF4D8A6665A
Authority key identifier: BB:E2:CC:20:D6:9B:30:DD:E1:8E:C0:D0:02:CE:2F:91:49:BF:B0:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/8ci54VVYciz_jxxq2gzGcTqq324.roa
Signing time: Wed 28 May 2025 08:08:55 +0000
ROA not before: Wed 28 May 2025 08:08:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214202
IP address blocks: 2001:678:450::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:15:ef:ee:4c:2a:ae:ab:67:5b:df:2a:f4:d8:a6:66:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe2cc20d69b30dde18ec0d002ce2f9149bfb06d
Validity
Not Before: May 28 08:08:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1c8b9e15558722cff8f1c6ada0cc6713aaadf6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:af:ce:b5:67:74:67:ba:f5:44:5e:bc:50:06:
a8:f8:a7:30:a0:d3:e0:22:2d:ba:11:7e:57:dc:9a:
af:cd:0d:6f:05:bf:c0:50:ee:ed:c3:92:b5:aa:1c:
10:a9:94:e5:65:5a:5a:7a:90:f8:6c:bf:48:c9:e5:
17:6f:41:71:d8:61:0c:d4:df:d8:9b:dc:85:3f:cd:
b9:d2:aa:10:4a:75:e1:14:d0:3a:d0:29:bf:b1:87:
34:74:87:34:42:ef:6c:c1:bc:b2:5d:9a:22:55:0b:
82:22:3c:fd:9b:4d:53:1a:49:db:50:62:02:7b:1d:
bb:5f:22:3d:67:40:d7:e2:15:4e:32:52:c1:54:f5:
05:3b:c6:77:9d:1a:0e:b5:94:ce:0c:80:4a:c2:c0:
94:d6:07:7d:55:90:1d:35:78:4f:d9:2f:f8:2a:f8:
f7:28:99:cc:be:eb:d4:0d:8c:3e:ee:f5:4e:61:43:
12:a1:e0:1e:de:b9:4d:52:e4:fe:78:4f:75:ae:b1:
3f:c2:0e:5e:33:a4:b1:cb:27:73:aa:ff:f2:ca:74:
90:45:11:c5:58:d6:82:60:d6:51:3a:08:b8:7e:71:
f8:2c:a1:f0:07:08:3a:dc:2b:8a:b3:4a:c8:51:3e:
d3:ad:a7:c3:d7:c8:81:4b:51:5a:bd:14:9d:d1:71:
7b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C8:B9:E1:55:58:72:2C:FF:8F:1C:6A:DA:0C:C6:71:3A:AA:DF:6E
X509v3 Authority Key Identifier:
keyid:BB:E2:CC:20:D6:9B:30:DD:E1:8E:C0:D0:02:CE:2F:91:49:BF:B0:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-LMINabMN3hjsDQAs4vkUm_sG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/8ci54VVYciz_jxxq2gzGcTqq324.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b4b1a-ea4f-42e1-b942-b119c258cfad/1/u-LMINabMN3hjsDQAs4vkUm_sG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:450::/48
Signature Algorithm: sha256WithRSAEncryption
59:54:db:65:1e:de:88:48:7b:db:dd:8d:a9:f7:ab:9a:80:5e:
ad:42:e0:aa:54:b1:35:8d:29:a7:97:64:d2:9e:a1:61:db:2d:
ca:45:9b:4a:5e:55:07:56:64:e2:ea:e0:be:0a:17:86:07:3e:
3f:a8:56:73:43:e2:de:f8:18:1d:73:e0:5d:c3:35:be:ae:d3:
2d:da:a3:c2:3d:ee:b4:82:17:10:36:20:84:97:3f:fd:cd:16:
09:20:9c:92:e7:6d:57:69:cb:32:d5:9a:7e:36:ce:2d:a3:9d:
74:dc:19:e4:a6:41:e3:72:19:0f:05:b7:bc:c0:28:a4:c3:c2:
cf:72:97:67:a5:d8:38:6b:85:69:6f:c9:64:b9:3f:20:4c:f3:
d6:25:8b:d5:2c:ea:d4:7a:66:80:0e:6a:12:99:85:d5:f5:3a:
6e:1a:e7:5f:cf:9a:d9:26:05:9e:46:60:b8:2b:43:ac:ed:03:
ed:74:eb:1c:46:49:d6:25:bc:f0:8b:02:86:22:ab:7c:f3:a6:
d4:0a:48:ac:c5:10:16:67:b4:5c:5b:2c:d3:80:aa:dd:ce:56:
5e:ff:a3:c7:96:cc:b3:68:b9:47:f5:d7:49:10:41:62:9b:98:
2d:26:86:4c:6d:2e:4d:c3:d9:b3:67:9a:41:8a:34:14:f9:51:
60:87:86:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:20:24 2025 by rpki-client