Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/yUZQqLzjNzgnRFOJHcGgHPrA6YI.roa
File: yUZQqLzjNzgnRFOJHcGgHPrA6YI.roa (raw, json)
Hash identifier: 7vNRp7CtdZI4nv8gy/5Xkn0efzS1leki/YZwRLcZP1E=
Subject key identifier: C9:46:50:A8:BC:E3:37:38:27:44:53:89:1D:C1:A0:1C:FA:C0:E9:82
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 0196CE05EDA3DDC71A22B9E2653C9702D9F5
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/yUZQqLzjNzgnRFOJHcGgHPrA6YI.roa
Signing time: Wed 14 May 2025 09:00:17 +0000
ROA not before: Wed 14 May 2025 09:00:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205090
IP address blocks: 91.200.13.0/24 maxlen: 24
103.71.20.0/24 maxlen: 24
103.71.21.0/24 maxlen: 24
109.69.62.0/24 maxlen: 24
185.37.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:05:ed:a3:dd:c7:1a:22:b9:e2:65:3c:97:02:d9:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: May 14 09:00:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c94650a8bce33738274453891dc1a01cfac0e982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5b:b4:ad:ec:2c:30:bc:ac:4b:13:ab:fd:c6:
c7:35:31:b0:d1:2d:da:89:ad:d2:3b:f2:9a:85:41:
86:ed:a8:7c:17:95:53:96:41:27:7d:a4:fc:3f:be:
cd:48:d2:ba:f2:58:01:9a:44:21:1a:6d:86:c6:dc:
91:74:da:4f:53:99:a6:e1:f7:85:31:48:13:ed:d6:
86:77:ef:7c:20:fb:10:9b:8c:c7:dc:f7:02:a4:57:
b2:02:36:77:23:cc:af:14:00:80:fa:27:35:36:d7:
9a:dd:eb:f0:82:e2:80:48:c5:75:48:04:e5:d3:cd:
06:67:f6:f2:ab:b4:27:f6:31:27:0d:6e:dc:c9:ee:
c7:24:15:a8:4b:71:3a:ac:8a:c3:d5:3c:06:53:9e:
84:9a:8e:11:c6:c6:09:06:7b:93:b0:28:7d:71:e1:
ee:6e:c7:23:d8:71:2a:16:a3:ee:28:14:06:6d:a7:
1f:f1:d9:87:ff:bb:4a:69:9c:5a:8f:1c:e8:1b:b5:
b6:7e:54:65:21:d1:ee:f1:56:28:1d:2c:16:72:5e:
36:42:6d:36:1d:43:6f:52:11:00:93:91:66:9f:bc:
3a:41:d2:cd:54:75:ea:4a:cd:d6:8c:3c:85:67:c6:
2f:e6:71:7f:fc:15:74:82:f7:aa:9c:74:1c:ec:87:
8f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:46:50:A8:BC:E3:37:38:27:44:53:89:1D:C1:A0:1C:FA:C0:E9:82
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/yUZQqLzjNzgnRFOJHcGgHPrA6YI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.13.0/24
103.71.20.0/23
109.69.62.0/24
185.37.192.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:1e:d9:30:17:4c:7d:97:37:2e:af:06:21:5c:04:ec:26:c7:
39:d6:ce:35:0c:9a:5e:9c:f5:f4:db:24:17:68:13:ae:7e:2d:
07:c9:fa:5b:7e:1b:c6:fe:f8:3e:26:b1:04:95:a7:69:15:f2:
ee:84:96:3b:13:15:77:f1:45:e0:d5:ec:c3:40:e9:ae:00:64:
78:31:8c:2a:2e:90:a1:79:a8:cd:66:2c:7c:49:15:fa:6d:be:
b1:52:8d:07:d2:7e:f5:5e:aa:ea:6d:cc:5f:a2:5f:58:c1:61:
f7:80:60:20:95:7f:de:1e:f9:aa:57:02:88:97:52:53:51:6c:
22:b6:7c:a2:c4:8b:71:c2:f4:d4:78:e7:2b:67:28:c7:72:27:
9a:a6:3a:c2:04:a2:ce:43:a1:42:ff:8c:63:7e:1c:e2:5f:5c:
9b:36:44:c0:ea:cb:87:b7:4a:da:0a:ff:00:32:22:15:53:1d:
32:ad:f3:69:bb:be:32:c9:18:f4:aa:4e:ec:69:a7:b9:64:84:
43:4a:a1:2e:93:61:a9:9e:7b:4f:8d:40:97:ed:63:92:b5:7b:
3e:c1:02:d5:35:e2:c1:3c:77:e2:44:a2:d4:01:f9:03:70:0f:
af:5f:f7:88:2c:4f:d3:6a:c1:32:98:02:0e:f4:f0:b7:66:a3:
fb:c1:50:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:17:49 2025 by rpki-client