Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/yh5VzgeOwtUgAcziSiqUhcW6kK8.roa
File: yh5VzgeOwtUgAcziSiqUhcW6kK8.roa (raw, json)
Hash identifier: hvI53ao0Y2iffOi0mRz/DzGNpvNOk5YefpCNLUXPIjc=
Subject key identifier: CA:1E:55:CE:07:8E:C2:D5:20:01:CC:E2:4A:2A:94:85:C5:BA:90:AF
Certificate issuer: /CN=fc55e0533efaa5624f538b92ed1a973feff89751
Certificate serial: 0196D7E858286723BDCA9D29A59DB2B87958
Authority key identifier: FC:55:E0:53:3E:FA:A5:62:4F:53:8B:92:ED:1A:97:3F:EF:F8:97:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/yh5VzgeOwtUgAcziSiqUhcW6kK8.roa
Signing time: Fri 16 May 2025 07:04:10 +0000
ROA not before: Fri 16 May 2025 07:04:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8311
IP address blocks: 80.255.117.0/24 maxlen: 24
80.255.118.0/24 maxlen: 24
185.84.116.0/22 maxlen: 24
185.132.188.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d7:e8:58:28:67:23:bd:ca:9d:29:a5:9d:b2:b8:79:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc55e0533efaa5624f538b92ed1a973feff89751
Validity
Not Before: May 16 07:04:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca1e55ce078ec2d52001cce24a2a9485c5ba90af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:48:8c:27:2a:b1:47:71:cf:ae:42:84:e6:c7:
a2:52:9e:eb:e6:2a:d1:9d:1e:3f:1f:68:19:40:37:
fd:ee:be:55:3c:d0:c3:14:2b:99:d8:97:b5:4d:f6:
a9:e8:9a:b0:34:76:2d:7b:67:69:0c:b1:7f:f3:55:
8d:f4:66:28:81:32:cc:69:d7:c0:92:c9:e5:8a:02:
03:6a:0f:ce:25:d5:1a:3c:6d:07:61:3c:4e:ba:43:
d8:7a:63:7f:ff:0a:dc:2f:41:f7:fe:3b:20:24:5b:
3f:d4:16:22:ea:dd:96:c4:ed:0a:05:43:ee:0d:c8:
7e:9f:67:72:a7:d2:95:ea:3f:54:f1:df:0a:78:c9:
cb:d7:ee:9e:a6:93:8a:0c:f2:5a:1c:17:1f:fa:4e:
f2:b8:71:15:9b:81:ab:0a:0c:e3:51:86:4d:3d:b7:
0c:a0:16:2f:93:91:b9:15:32:cb:7a:0c:75:f9:4a:
e0:f4:5f:25:e2:a8:7a:9d:c2:67:f8:a0:e5:e7:49:
fc:b5:af:c7:83:e7:cb:c2:7b:b6:f4:45:67:96:87:
70:94:a0:59:62:6d:0d:9a:47:78:a4:c9:a3:5c:71:
fc:06:c9:a2:66:ac:88:0a:fc:20:78:e8:66:b5:99:
37:70:9a:d2:de:be:d1:61:5c:47:f9:4e:b5:64:26:
cc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:1E:55:CE:07:8E:C2:D5:20:01:CC:E2:4A:2A:94:85:C5:BA:90:AF
X509v3 Authority Key Identifier:
keyid:FC:55:E0:53:3E:FA:A5:62:4F:53:8B:92:ED:1A:97:3F:EF:F8:97:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/yh5VzgeOwtUgAcziSiqUhcW6kK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.255.117.0-80.255.118.255
185.84.116.0/22
185.132.188.0/23
Signature Algorithm: sha256WithRSAEncryption
42:40:5b:19:44:f2:23:cc:d5:e5:de:77:4a:9a:d7:7e:77:81:
44:4e:e1:c8:e6:9b:05:27:03:14:cd:31:88:5d:9e:ec:4d:e5:
47:a2:5b:4a:7a:4c:b3:0e:d2:ed:0d:bd:8b:2c:58:3b:94:32:
76:52:3c:f3:f2:6c:28:61:7f:c1:a9:3c:33:b9:88:6d:e7:e2:
a2:51:1d:ab:ff:d7:c8:d6:09:4c:17:d8:f4:a9:f0:c7:67:8d:
e4:58:d6:39:5b:c8:3e:92:98:1d:41:13:5f:f3:96:8f:ea:a6:
46:3a:66:ee:03:b5:1b:90:ce:2d:eb:c3:89:6b:88:ee:2e:13:
6b:4e:db:75:4a:50:6d:3a:77:d1:d6:fc:30:b0:6a:da:c0:16:
95:76:1d:b3:cb:d3:72:20:6d:14:07:15:92:08:77:e6:9b:33:
83:78:c6:ce:45:eb:16:5f:67:19:b6:9e:b0:51:6b:7d:9b:a9:
b1:32:83:e4:89:6a:b5:d9:e4:02:ce:28:17:fb:e8:80:f4:9f:
ad:90:0f:eb:51:ea:ea:2e:c6:e2:34:60:d4:d9:f9:55:fb:a5:
3e:03:98:12:a3:f1:b8:fc:06:99:6e:df:00:30:b1:51:87:a9:
c7:86:32:93:cb:c8:30:ac:c9:1d:e0:d0:64:2c:d5:97:d2:30:
d1:d8:91:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:05:05 2025 by rpki-client