Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/8s7vHKE6FBZYlH7mxDn7_1ykPk4.roa
File: 8s7vHKE6FBZYlH7mxDn7_1ykPk4.roa (raw, json)
Hash identifier: fgNyBR69p7xJvQXl06eoPq2tjnGBemgh7E+PjbLx9mo=
Subject key identifier: F2:CE:EF:1C:A1:3A:14:16:58:94:7E:E6:C4:39:FB:FF:5C:A4:3E:4E
Certificate issuer: /CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2
Certificate serial: 01970B30C57632985270B89CEA21313C0237
Authority key identifier: F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/8s7vHKE6FBZYlH7mxDn7_1ykPk4.roa
Signing time: Mon 26 May 2025 06:03:54 +0000
ROA not before: Mon 26 May 2025 06:03:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200017
IP address blocks: 45.9.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 20:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0b:30:c5:76:32:98:52:70:b8:9c:ea:21:31:3c:02:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2
Validity
Not Before: May 26 06:03:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2ceef1ca13a141658947ee6c439fbff5ca43e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:00:84:d3:92:de:90:e3:5b:dd:f6:8d:f8:c1:
71:79:14:b8:99:62:e8:11:9a:b7:32:1f:ab:a9:1d:
cd:3c:3e:26:33:2b:f7:76:7c:c7:4a:20:33:ad:61:
97:14:a8:02:d7:53:d2:a8:97:9b:00:bf:db:a7:26:
52:fe:2a:b1:ab:0c:e0:5d:31:17:ca:41:8b:1e:61:
37:ab:af:39:02:72:b9:5c:4d:9e:e7:43:d5:fe:ab:
c8:f2:51:54:61:a6:d9:07:46:bd:1f:af:54:11:71:
55:18:35:41:48:33:fe:86:c1:95:36:ad:df:75:bb:
af:92:4b:ce:7c:d1:ef:95:e1:4c:41:ed:3f:74:87:
cc:f4:e3:93:aa:12:03:a9:bc:3c:b3:67:3c:a9:99:
ac:07:44:91:ed:d6:70:11:a3:e2:14:35:b2:9d:6f:
ec:b2:b1:5d:65:67:14:33:bc:66:02:59:cc:eb:6c:
24:80:6f:f1:a1:96:eb:c8:8b:8e:61:12:63:91:1d:
7f:78:f6:6b:1b:32:fc:d5:98:97:69:99:99:7f:b4:
34:fb:db:d9:bb:b5:4e:62:2c:8a:72:f2:22:cb:d4:
d9:05:bc:a9:0c:a5:7e:5e:dd:86:32:9e:df:92:da:
29:d9:3d:3c:58:c3:23:3d:51:54:1a:0f:3d:4f:33:
c9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CE:EF:1C:A1:3A:14:16:58:94:7E:E6:C4:39:FB:FF:5C:A4:3E:4E
X509v3 Authority Key Identifier:
keyid:F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/8s7vHKE6FBZYlH7mxDn7_1ykPk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.126.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:10:ef:b8:c9:7c:11:26:b9:79:f1:44:0c:63:80:cd:21:16:
0b:f2:25:9c:70:9d:54:b4:94:f7:50:da:fa:27:4d:3b:15:fd:
72:57:11:cc:c9:34:5d:e1:45:48:30:3a:c0:4f:f3:a3:9b:e7:
3b:96:9a:9c:7a:5b:6b:8e:6a:b6:17:f4:66:01:e3:02:68:59:
3c:7b:24:e0:71:64:11:0d:ad:f8:a8:be:98:c7:85:3a:a8:fe:
0e:3d:94:fb:af:21:94:22:c5:e5:f9:79:99:5c:27:89:22:4e:
a5:53:c9:10:46:7a:10:fe:3e:79:64:d9:91:87:97:03:c0:fc:
62:2f:33:81:57:b8:d7:7d:83:e9:36:a5:46:05:90:b9:53:85:
5a:fe:29:2a:31:76:fc:64:22:4a:01:5e:d1:4d:1e:4a:ab:d5:
2f:8d:38:20:c6:49:c0:72:d9:8b:10:fc:ed:cb:3d:a6:ed:d9:
d5:b7:54:b1:1a:84:ba:1a:0f:76:74:84:a0:a5:3c:a5:27:82:
d3:cc:f0:13:84:19:45:d1:e6:d6:9e:2b:bf:91:d5:3e:c0:36:
8c:85:88:c4:fd:8e:5b:c0:6f:fc:0f:07:2d:41:64:80:34:b0:
80:0e:05:42:d9:d3:e0:31:c3:63:27:76:15:6a:c7:cd:58:bd:
2d:58:2b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:40:44 2025 by rpki-client