Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/1-8_4Eda3WCGuArYXM2BfRVK04Rk.roa
File: 1-8_4Eda3WCGuArYXM2BfRVK04Rk.roa (raw, json)
Hash identifier: M6cbeyDGcJvscRU15s7VhDF3WDNbwlO0vnGAsXXGGrQ=
Subject key identifier: FB:CF:F8:11:D6:B7:58:21:AE:02:B6:17:33:60:5F:45:52:B4:E1:19
Certificate issuer: /CN=cab936b35f92cdec5e90df33bdc508661c27b455
Certificate serial: 01973055205BA79359B00FD4B9E65699C653
Authority key identifier: CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/1-8_4Eda3WCGuArYXM2BfRVK04Rk.roa
Signing time: Mon 02 Jun 2025 11:09:34 +0000
ROA not before: Mon 02 Jun 2025 11:09:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201746
IP address blocks: 45.94.101.0/24 maxlen: 24
45.94.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:30:55:20:5b:a7:93:59:b0:0f:d4:b9:e6:56:99:c6:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab936b35f92cdec5e90df33bdc508661c27b455
Validity
Not Before: Jun 2 11:09:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fbcff811d6b75821ae02b61733605f4552b4e119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:88:5f:87:b4:28:97:d2:68:fb:a4:23:71:4d:
20:7e:e8:e4:05:69:65:15:a2:de:5c:87:d7:d9:0a:
86:93:77:3d:4b:c5:d4:fa:16:d0:c0:a7:1a:02:51:
66:ac:a6:6e:88:bf:b0:74:23:15:70:43:de:e6:2e:
1b:2c:fe:3e:60:24:b8:dd:08:0e:08:59:c4:5a:5b:
33:2a:00:cd:1d:aa:70:c0:45:7b:19:04:be:38:59:
10:73:c0:6d:07:81:7d:73:32:2e:4a:8e:7d:47:d3:
62:25:2a:23:16:8f:cd:4e:87:26:d6:85:9d:5e:3f:
47:09:02:5e:bb:a5:67:ba:9e:25:6c:56:d0:1d:90:
b8:94:ca:e2:f2:e6:16:27:0b:d2:aa:59:bc:86:7d:
8b:d4:cf:8c:85:81:13:de:71:65:01:23:1f:bb:6e:
b3:c7:df:ac:35:dc:ed:1f:e3:64:2b:5a:0e:04:06:
6e:35:f6:6b:af:9f:34:f3:91:6a:43:29:c3:bf:a4:
2d:fd:93:df:39:76:be:9b:27:79:77:47:ac:6f:ba:
ce:ff:2d:e6:2d:1b:fa:a9:92:b7:1a:c0:32:01:95:
f8:24:91:2e:8c:bb:89:94:ed:73:e4:e1:01:5a:ad:
24:ce:67:b1:80:c9:c5:e4:c6:83:9e:a4:52:6d:a0:
bf:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:CF:F8:11:D6:B7:58:21:AE:02:B6:17:33:60:5F:45:52:B4:E1:19
X509v3 Authority Key Identifier:
keyid:CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/1-8_4Eda3WCGuArYXM2BfRVK04Rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.101.0-45.94.102.255
Signature Algorithm: sha256WithRSAEncryption
44:6f:a8:d8:63:af:cf:59:f0:af:79:19:00:11:49:34:93:15:
00:d3:25:be:4c:e6:76:c6:c9:38:63:64:65:15:61:f6:c5:05:
ee:05:f2:a5:d3:6b:9c:b5:29:59:9e:44:42:69:59:94:70:2a:
9f:fb:87:db:1b:3a:43:82:c5:0b:25:74:c8:89:b5:e7:67:eb:
a5:b9:db:03:44:74:52:03:9a:bc:ad:75:ad:eb:5a:91:fd:1b:
42:45:1a:b4:96:f5:94:f6:5a:69:db:bc:eb:8b:be:5c:1d:35:
e8:ed:85:c0:93:cd:84:03:76:81:01:a5:5b:f0:73:67:18:e2:
30:55:ca:89:e4:9f:f1:c7:50:67:f6:24:eb:ce:94:c9:7f:62:
9c:8d:4e:1e:7c:1d:79:c6:cf:c9:63:0c:2a:63:2d:af:1c:6f:
85:61:59:f3:1f:ce:51:24:a9:ff:18:bc:78:b8:76:65:02:fe:
ad:d7:a9:a7:30:57:30:c1:08:0a:99:df:30:40:3a:b0:c1:83:
d8:d6:58:75:a8:db:4b:b1:37:d8:d3:c8:fa:98:7c:b3:51:28:
d7:5a:40:0a:c6:9a:08:98:51:46:4b:c2:2a:ff:4c:96:ab:aa:
6a:82:08:da:89:68:43:7a:4b:91:15:94:7a:cd:b0:d4:89:2b:
93:25:86:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:32:01 2025 by rpki-client