Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vyBIKOyaG23twuci1Ghgw1zuEHk.roa
File: vyBIKOyaG23twuci1Ghgw1zuEHk.roa (raw, json)
Hash identifier: psiZARh6KuKYs5vn23wS8+dyExc2a5aWb/7xs1ACvpA=
Subject key identifier: BF:20:48:28:EC:9A:1B:6D:ED:C2:E7:22:D4:68:60:C3:5C:EE:10:79
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019768806262415A48F9F073051AB490309C
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vyBIKOyaG23twuci1Ghgw1zuEHk.roa
Signing time: Fri 13 Jun 2025 08:55:33 +0000
ROA not before: Fri 13 Jun 2025 08:55:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 217.60.36.0/22 maxlen: 24
217.60.239.0/24 maxlen: 24
217.60.242.0/24 maxlen: 24
217.60.247.0/24 maxlen: 24
217.60.248.0/24 maxlen: 24
217.60.249.0/24 maxlen: 24
217.60.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:80:62:62:41:5a:48:f9:f0:73:05:1a:b4:90:30:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 13 08:55:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf204828ec9a1b6dedc2e722d46860c35cee1079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ac:ab:c6:a7:a8:96:06:33:0f:72:78:48:c9:
ef:46:c1:52:9d:69:cb:d8:40:f0:a5:ea:0a:8d:49:
60:c8:f8:eb:b8:40:a9:61:27:09:5c:ae:2b:d6:1e:
e6:7e:77:a1:fa:97:ed:c1:1f:9c:e4:81:ac:08:fe:
59:04:67:90:12:5e:c4:70:5e:34:75:fe:9a:9a:ad:
42:fd:ad:8e:f8:fd:b5:8e:49:aa:17:ef:52:65:cc:
99:17:62:03:8a:24:01:e2:f1:6f:18:7f:93:3c:82:
a1:5a:42:33:72:3d:01:5b:81:99:9b:eb:c6:c6:3d:
36:84:82:65:ed:35:91:dd:22:d6:02:41:3e:fd:5a:
1b:04:af:1f:36:32:ab:48:57:e6:7f:1a:8d:af:90:
6b:66:65:4a:b3:fb:a6:97:2d:5e:66:e1:55:53:b2:
9b:30:7f:ef:2d:d5:b9:be:24:8b:3f:be:05:68:d2:
de:1b:43:ef:99:19:0d:ab:c9:05:ba:ef:f1:62:54:
6e:a7:bf:68:9e:79:95:23:30:df:52:ea:4d:bf:e5:
64:f7:c9:f5:88:78:92:2b:cf:b7:3f:4e:9c:6c:2a:
32:fb:d4:0d:19:83:df:83:25:b7:ec:07:a0:94:31:
68:9e:93:b4:5c:77:46:b8:de:f0:8f:3d:c9:85:4f:
82:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:20:48:28:EC:9A:1B:6D:ED:C2:E7:22:D4:68:60:C3:5C:EE:10:79
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vyBIKOyaG23twuci1Ghgw1zuEHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.36.0/22
217.60.239.0/24
217.60.242.0/24
217.60.247.0-217.60.249.255
217.60.252.0/24
Signature Algorithm: sha256WithRSAEncryption
29:06:12:b7:81:90:ad:cf:f3:8d:16:dc:4f:94:da:58:38:1f:
15:4b:97:3f:b0:88:a5:b3:2b:b5:83:82:b9:a8:ff:97:f0:16:
bf:7d:73:a8:08:0e:75:0e:ad:9b:23:76:9b:09:4b:20:01:5d:
87:a2:5d:fa:87:ee:50:95:91:da:b5:41:86:97:2b:8c:0b:17:
6c:6a:d7:8b:78:92:95:3b:11:56:81:0c:f0:ad:45:a3:fa:90:
f6:07:1d:d8:35:f7:d1:3b:67:2f:a1:7a:71:89:99:ff:3d:1b:
48:42:61:f3:81:9c:7c:c2:4d:26:94:6c:0b:7b:94:24:3e:0f:
0d:0e:51:9c:71:d4:35:5c:4c:3d:33:00:b3:8e:70:da:c1:e9:
04:8b:9b:d0:0d:5b:c9:ef:49:5a:f2:ae:25:5e:5d:30:35:6f:
66:b5:db:94:39:0c:92:bd:a6:37:56:36:e7:2c:36:e5:ee:b2:
df:23:80:a3:d0:40:d2:1b:8f:c4:65:92:10:b3:78:c8:df:74:
e6:ef:d1:8f:51:33:74:ef:4a:b0:62:2b:c7:a9:06:0f:d3:8e:
f1:43:14:55:02:37:58:3f:a0:c4:54:42:b9:43:09:f0:2e:cc:
ce:ce:fb:91:66:2c:b8:92:e1:11:4f:f4:ed:b1:01:00:42:15:
40:2d:7d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:55:18 2025 by rpki-client