Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/14COYkAcdivMizdxhgk_N0gUAQQ.roa
File: 14COYkAcdivMizdxhgk_N0gUAQQ.roa (raw, json)
Hash identifier: v3YU7qlpO84HSN0S3HaATS1zzZ04ifNGDpb4EL7skyE=
Subject key identifier: D7:80:8E:62:40:1C:76:2B:CC:8B:37:71:86:09:3F:37:48:14:01:04
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 01982E03ECB799D3F71E5C2DB5190A871301
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/14COYkAcdivMizdxhgk_N0gUAQQ.roa
Signing time: Mon 21 Jul 2025 17:24:25 +0000
ROA not before: Mon 21 Jul 2025 17:24:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47508
IP address blocks: 104.249.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2e:03:ec:b7:99:d3:f7:1e:5c:2d:b5:19:0a:87:13:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jul 21 17:24:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7808e62401c762bcc8b377186093f3748140104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4a:aa:35:c0:36:78:77:d9:06:96:37:eb:8c:
fd:48:c9:79:27:24:02:d2:39:7f:de:ed:4b:49:c1:
14:0e:8c:02:ea:a0:7b:74:60:01:97:12:aa:4a:c8:
91:87:69:ca:37:a2:dd:9a:e7:40:ad:a9:50:b0:d8:
bb:91:52:9c:58:e7:0e:0a:16:ea:a4:35:30:6e:7f:
1d:58:61:c9:cf:48:f7:f8:26:cf:87:d2:37:ae:98:
7b:cf:eb:e7:02:89:1e:a6:4f:46:ea:0b:a0:19:ff:
d3:e1:af:e0:59:78:22:99:0c:9d:66:c4:ab:96:fa:
0b:31:59:e5:e6:54:3f:2d:4e:0a:ae:58:2b:fa:60:
06:04:57:7b:2a:33:f3:c3:5d:e5:e7:65:6e:17:61:
4d:d1:cf:66:24:fa:c6:14:44:db:c9:88:7a:f2:94:
39:58:de:50:ff:20:1d:57:cb:cf:04:f0:0f:96:ff:
b3:55:45:6c:31:b6:1c:2f:21:0e:9d:a6:02:92:2b:
d0:34:1d:79:6b:8e:2d:b2:19:01:80:98:13:f1:a1:
11:d3:14:2d:55:86:37:14:38:ad:5b:72:65:5f:19:
28:76:4c:7c:c0:84:87:01:85:02:c5:2e:7d:7a:9d:
f3:50:45:58:17:68:5c:22:92:bb:da:04:a7:e2:95:
c2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:80:8E:62:40:1C:76:2B:CC:8B:37:71:86:09:3F:37:48:14:01:04
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/14COYkAcdivMizdxhgk_N0gUAQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.249.18.0/24
Signature Algorithm: sha256WithRSAEncryption
44:2b:96:c9:5e:a4:22:dc:fd:05:e6:ac:97:02:1e:a3:83:2d:
17:de:58:bc:0b:3d:f8:f2:d2:ff:e7:7f:26:84:74:10:9c:af:
45:07:fc:c4:ec:dd:38:9b:b6:3c:64:33:47:54:e8:19:a4:cd:
05:4c:5b:72:2a:05:a1:23:1b:91:bc:78:7c:33:fd:73:2b:54:
8a:94:f9:fd:e5:fc:f6:d0:67:b2:e6:3b:a5:a0:e6:51:b7:32:
f1:ae:46:d2:5d:ca:98:e8:a1:5d:aa:42:ea:0e:06:d0:ad:8a:
2a:8c:82:2d:cb:8f:0f:d4:dc:be:32:da:a6:ed:b7:6a:2a:55:
c5:15:46:c0:c5:a0:d5:93:40:09:42:2a:db:39:07:b5:35:ee:
f5:b8:62:e6:60:7c:7f:f1:5b:7b:47:e2:e4:a8:6c:4e:62:b1:
7d:a2:bd:68:cf:45:e1:9c:bd:fc:d7:4f:2e:fa:aa:85:aa:08:
e5:33:4b:09:eb:bb:ee:89:33:a7:90:a6:a2:77:c1:30:97:16:
72:36:8e:51:1b:dd:85:f3:49:45:d4:8d:30:0d:ed:1e:50:34:
6f:1e:b5:28:84:40:44:80:39:27:4d:bd:ee:a6:84:4b:08:36:
f0:47:0c:ac:9a:c5:88:3c:d6:cf:94:56:1e:f3:63:3d:f4:e5:
53:5f:d4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:36:28 2025 by rpki-client