Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/alyyNw3LXDp86dIDznoqSm7d9M0.roa
File: alyyNw3LXDp86dIDznoqSm7d9M0.roa (raw, json)
Hash identifier: 77E8VYRBB9TIyIN38LPi2pnd8l6y5b2l+W9jiRR1cRc=
Subject key identifier: 6A:5C:B2:37:0D:CB:5C:3A:7C:E9:D2:03:CE:7A:2A:4A:6E:DD:F4:CD
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01965A54853B45312CDF0B625088E33DE21F
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/alyyNw3LXDp86dIDznoqSm7d9M0.roa
Signing time: Mon 21 Apr 2025 21:50:10 +0000
ROA not before: Mon 21 Apr 2025 21:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 81.168.116.0/24 maxlen: 24
82.153.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:54:85:3b:45:31:2c:df:0b:62:50:88:e3:3d:e2:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 21 21:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a5cb2370dcb5c3a7ce9d203ce7a2a4a6eddf4cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e0:a6:e3:74:dc:4a:69:0c:dd:46:92:a5:82:
74:b2:bc:19:e1:44:2f:c9:2b:6c:c4:8d:90:f1:da:
1d:37:51:7e:84:07:5d:8e:16:43:65:b0:05:6c:0e:
51:c8:af:7e:5c:bd:01:eb:2f:d7:24:f3:d2:e6:0d:
82:12:8d:b4:0a:60:6f:3f:1a:57:b7:23:18:3f:da:
d5:c2:a3:bc:66:b0:10:42:34:e0:56:dd:5b:e6:94:
e5:c6:eb:3c:69:93:50:7a:bd:9d:f1:fb:72:46:a1:
3e:54:4a:1c:5f:60:eb:78:5b:f4:d2:15:d2:39:29:
11:48:9f:48:e7:e4:62:ab:e0:48:f7:09:a8:c0:34:
af:38:f1:9d:d3:92:f0:d5:63:b0:80:62:a8:c5:28:
66:11:e4:ad:0a:bc:eb:dd:59:3b:35:f8:db:8d:0f:
69:55:19:e9:ae:0a:e3:0c:36:19:f5:a5:7d:56:e8:
75:cd:7a:15:a5:6a:b8:e7:9c:be:59:8d:2f:14:e3:
04:51:8a:f2:7b:3b:4e:23:d8:4e:53:3b:a2:b8:72:
dc:5a:09:3d:1e:c2:a6:af:fe:75:93:71:46:40:d0:
51:82:d5:6e:e4:a4:d1:32:ac:a9:59:3d:67:a1:3f:
20:42:60:96:25:22:bd:04:db:d3:52:f7:3e:4f:58:
b1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:5C:B2:37:0D:CB:5C:3A:7C:E9:D2:03:CE:7A:2A:4A:6E:DD:F4:CD
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/alyyNw3LXDp86dIDznoqSm7d9M0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.116.0/24
82.153.255.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:2f:44:cd:dc:51:4c:a9:9f:cd:9e:85:b9:b0:96:f9:5a:4c:
dd:85:09:ff:2e:4a:ad:1e:1a:56:b4:42:a4:1d:86:6d:b0:6c:
04:65:02:bb:07:bf:83:30:00:b9:8f:2d:02:bd:6b:99:35:08:
1e:9e:8e:9f:d1:57:bb:a8:43:ac:dc:ea:09:5f:86:5c:0e:a2:
16:bf:b8:1c:68:1e:db:fd:d5:6b:0a:0c:5e:23:f5:5a:54:93:
bf:32:79:18:ad:d2:e8:06:f0:af:d1:e6:13:ea:69:4b:db:5c:
67:29:5f:a7:f7:d7:5b:b3:a6:3b:28:9a:23:0d:45:e3:2c:7e:
c9:d9:90:c5:fe:96:22:f4:22:34:69:a7:80:26:b3:30:7a:c2:
cf:0c:37:18:5d:9b:00:db:42:e1:e1:d8:6b:c7:a1:53:0d:73:
f9:96:f3:28:d7:c0:b0:ab:bc:6d:66:dc:db:4a:40:aa:d6:bb:
b1:40:cb:da:e7:a2:c2:9d:97:07:09:fe:db:23:7e:3f:4c:7d:
e5:fa:8c:7f:31:27:f7:12:9a:54:aa:a6:32:9e:a8:6a:b1:fb:
f6:27:53:de:5e:a3:08:f4:71:f7:99:48:4a:39:0d:2f:7b:1e:
f4:4d:6e:d7:9b:58:3a:81:fa:97:ec:17:c9:80:13:f3:65:3d:
fe:c2:1b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:46:53 2025 by rpki-client