Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/2ye1nEG00z6xc6qFR23vVFqqhbE.roa
File: 2ye1nEG00z6xc6qFR23vVFqqhbE.roa (raw, json)
Hash identifier: 5i8bdwLHCSUW/WKDF4taP2OB33HmQb50deK5bo+0rqU=
Subject key identifier: DB:27:B5:9C:41:B4:D3:3E:B1:73:AA:85:47:6D:EF:54:5A:AA:85:B1
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01975919E166F3C8EE8C11DCBCFACADA4680
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/2ye1nEG00z6xc6qFR23vVFqqhbE.roa
Signing time: Tue 10 Jun 2025 09:09:17 +0000
ROA not before: Tue 10 Jun 2025 09:09:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213257
IP address blocks: 185.254.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:19:e1:66:f3:c8:ee:8c:11:dc:bc:fa:ca:da:46:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jun 10 09:09:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db27b59c41b4d33eb173aa85476def545aaa85b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f3:ba:90:43:b9:df:05:5e:b0:58:dd:84:0b:
57:91:72:53:0e:dc:fa:a8:45:06:1c:b5:fb:d8:75:
af:3e:33:33:df:7a:03:4f:cb:79:f0:c7:6f:ab:ff:
d6:19:15:7b:2b:de:83:c7:e7:2f:be:8f:a6:13:9a:
5e:98:8f:fe:ce:b4:46:e5:a5:e2:ac:2c:ec:eb:bc:
2b:56:9a:ef:73:74:c1:52:b9:80:a2:33:6e:e7:58:
41:05:ff:8b:85:12:04:c1:be:39:6a:f1:d7:0a:5a:
41:71:ef:14:79:9a:32:98:f3:81:a4:23:7a:a3:ab:
53:f2:6e:de:0f:a2:71:17:1a:13:b7:f0:cf:30:45:
cb:0b:d7:09:e8:f0:40:73:fa:59:b1:48:c6:4c:7a:
6b:33:eb:cf:ab:3b:c1:8a:c6:18:d6:e4:e1:6c:08:
0a:7b:c5:c6:89:5b:e8:f9:68:75:fd:2d:fb:e6:55:
94:38:a2:e3:dc:15:2e:55:0c:59:7b:f4:01:a6:c3:
0c:6f:ef:27:e3:26:2e:e3:0a:56:cd:a5:c4:e7:9c:
4c:17:a8:85:8f:be:b3:5d:66:ee:29:3b:db:0f:52:
5d:4e:9d:3d:f0:dd:8c:89:a0:f7:17:cf:bb:bb:0f:
19:9d:ca:53:71:75:2d:26:da:1f:bd:6f:3d:29:6a:
b2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:27:B5:9C:41:B4:D3:3E:B1:73:AA:85:47:6D:EF:54:5A:AA:85:B1
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/2ye1nEG00z6xc6qFR23vVFqqhbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.31.0/24
Signature Algorithm: sha256WithRSAEncryption
40:55:1e:ab:17:ba:81:63:78:80:11:16:7e:c0:a7:24:c9:a9:
e1:e1:bc:bd:ff:1a:95:69:c4:31:09:b4:92:c6:52:35:03:e1:
32:cb:3d:8b:0f:c1:9c:3e:6b:5a:0d:b5:45:ff:7a:a3:a2:1c:
28:60:31:7d:f0:b4:70:22:1d:46:00:2f:7b:57:71:93:4f:44:
41:44:dc:ad:2e:7e:53:65:b3:63:9e:41:08:69:e5:1f:98:39:
e9:5d:9f:7e:2e:0e:92:fe:d2:2a:f6:4e:88:92:53:34:4b:3b:
be:5f:87:b0:85:c0:5e:ed:26:2a:e7:f9:9e:9d:a4:f2:93:97:
8f:3e:44:c0:59:1f:54:7e:a9:e2:c5:4f:8e:ff:65:56:6c:78:
db:c0:48:74:98:51:72:ad:af:8d:36:93:b7:74:6d:b0:71:ea:
12:08:7e:56:bb:58:12:45:02:5d:a6:5f:d5:e7:9b:dc:bd:65:
44:5f:56:9b:9d:ab:4e:e3:e3:55:f5:2e:dc:b1:32:48:e7:e2:
f4:44:6f:3a:19:0d:57:ad:e4:ac:4e:f7:2a:c4:b8:6c:30:67:
1a:02:54:36:de:f4:46:93:ee:18:0c:ff:7e:7e:e5:87:8f:d7:
0e:7e:a3:c9:83:09:c4:6a:8d:e7:4f:a8:c6:60:78:9d:8d:9e:
8b:ad:ef:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:12:50 2025 by rpki-client