Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/85d540-7b0c-4c16-8cb7-f5b9924d6cf1/1/B0-8lZYraEx150X3g22rWD-3L8I.roa
File: B0-8lZYraEx150X3g22rWD-3L8I.roa (raw, json)
Hash identifier: 6NnoqG71xZV/7Tl4SVNDBKlXoHQBrNWRbnGwKyVzpAg=
Subject key identifier: 07:4F:BC:95:96:2B:68:4C:75:E7:45:F7:83:6D:AB:58:3F:B7:2F:C2
Certificate issuer: /CN=d66bf5004840c33b6b1f2109dc249bf5b390f319
Certificate serial: 0197414963C5E01BF931912E1CF4AC006A51
Authority key identifier: D6:6B:F5:00:48:40:C3:3B:6B:1F:21:09:DC:24:9B:F5:B3:90:F3:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/85d540-7b0c-4c16-8cb7-f5b9924d6cf1/1/B0-8lZYraEx150X3g22rWD-3L8I.roa
Signing time: Thu 05 Jun 2025 18:10:18 +0000
ROA not before: Thu 05 Jun 2025 18:10:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57612
IP address blocks: 81.162.216.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/85d540-7b0c-4c16-8cb7-f5b9924d6cf1/1/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/85d540-7b0c-4c16-8cb7-f5b9924d6cf1/1/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:41:49:63:c5:e0:1b:f9:31:91:2e:1c:f4:ac:00:6a:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d66bf5004840c33b6b1f2109dc249bf5b390f319
Validity
Not Before: Jun 5 18:10:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=074fbc95962b684c75e745f7836dab583fb72fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f9:ae:68:4a:bf:71:5d:3d:74:ad:28:4b:8c:
d9:84:f8:56:58:22:da:79:fa:6d:5d:4d:61:93:c2:
b4:0a:e9:51:c8:ae:52:cc:d6:e8:bc:c1:e6:da:f3:
20:f4:b8:f1:e7:d8:e8:cc:66:94:fe:d7:3e:63:10:
a8:49:04:b6:79:0f:3b:32:62:27:5f:9f:b8:31:94:
ac:b4:49:93:35:9c:8e:48:28:67:ea:96:f8:7b:9e:
2a:13:71:57:fa:dd:94:5d:84:90:cc:73:84:62:db:
c2:3b:b4:7e:46:b5:f1:c2:51:9c:7d:dc:62:cc:ef:
be:3e:e3:0a:14:5e:d4:6f:d6:40:7a:ec:a3:8f:75:
75:a9:17:99:29:e9:12:e8:c5:89:f6:08:41:0c:79:
fe:c3:b3:ff:b3:1f:4c:62:54:19:14:53:7e:70:a3:
6e:d4:fc:2a:d5:de:52:73:5c:b9:70:84:d1:5b:06:
84:39:6f:50:87:50:68:76:b4:a0:90:03:dd:e7:f8:
f8:a2:57:79:dc:a9:80:d5:fa:a1:82:56:af:0e:ff:
3f:38:61:64:5a:9f:65:6f:b0:3d:5f:00:ae:eb:c7:
c3:49:ce:3d:56:ec:a0:ba:ff:b9:b8:b7:6e:ec:b9:
06:6f:c7:38:6c:7f:74:8f:26:f0:3d:fa:e9:70:49:
27:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:4F:BC:95:96:2B:68:4C:75:E7:45:F7:83:6D:AB:58:3F:B7:2F:C2
X509v3 Authority Key Identifier:
keyid:D6:6B:F5:00:48:40:C3:3B:6B:1F:21:09:DC:24:9B:F5:B3:90:F3:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/85d540-7b0c-4c16-8cb7-f5b9924d6cf1/1/B0-8lZYraEx150X3g22rWD-3L8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/85d540-7b0c-4c16-8cb7-f5b9924d6cf1/1/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.162.216.0/21
Signature Algorithm: sha256WithRSAEncryption
28:8b:e1:14:ff:15:ed:d0:1b:80:1f:4f:18:fe:74:3c:e4:67:
61:57:7c:72:c1:b3:e0:ba:30:af:b0:af:f3:fc:b0:7e:a9:dd:
5e:4a:ff:4e:b6:17:61:66:92:ad:66:55:b4:a9:b2:ef:73:25:
3a:93:37:64:f5:32:4a:ff:a9:9c:38:e6:87:79:b7:1b:e1:80:
16:28:f1:c8:5e:a2:e4:2c:78:88:4d:d2:a9:95:fe:13:b0:34:
a1:d3:a1:27:34:0a:82:e3:64:4e:04:f5:d4:12:c2:85:4e:4e:
96:b6:0c:0d:db:02:ba:66:7f:3c:2b:35:7e:44:b7:3e:e6:5a:
6c:50:15:20:74:c8:7e:41:59:5b:68:e5:b2:6f:61:39:d1:69:
1f:93:93:2d:0d:20:f1:ba:58:8b:03:e3:9d:91:09:2b:c8:a2:
5d:e9:f6:60:de:62:a3:6c:a4:bc:58:24:93:ae:ed:74:b7:ab:
76:00:c3:95:34:75:aa:9c:7d:e1:63:3c:44:ab:b1:a3:3c:30:
bb:cd:65:de:b9:f6:5a:e9:48:13:99:e8:bd:d4:8b:3c:a0:a8:
28:f5:de:5e:5c:f3:20:8b:08:2f:fb:50:50:56:cb:af:f2:ef:
71:18:98:74:61:0f:d1:79:4b:e6:46:97:fc:62:f9:54:f2:04:
7a:16:dc:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:07:13 2025 by rpki-client