Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/y6hP7kuPwRoCfO_VgxhQcdqEk7M.roa
File: y6hP7kuPwRoCfO_VgxhQcdqEk7M.roa (raw, json)
Hash identifier: XZaRGsLb2Sz0+AGDV34ogY11w4ESXYjUg8EFRz7uqz8=
Subject key identifier: CB:A8:4F:EE:4B:8F:C1:1A:02:7C:EF:D5:83:18:50:71:DA:84:93:B3
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01973A29A9EDF3E0CB362E0A3E93C45F5C3A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/y6hP7kuPwRoCfO_VgxhQcdqEk7M.roa
Signing time: Wed 04 Jun 2025 08:58:18 +0000
ROA not before: Wed 04 Jun 2025 08:58:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 18811
IP address blocks: 217.60.0.0/21 maxlen: 24
217.60.12.0/22 maxlen: 24
217.60.24.0/22 maxlen: 24
217.60.60.0/22 maxlen: 24
217.60.188.0/22 maxlen: 24
217.60.192.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3a:29:a9:ed:f3:e0:cb:36:2e:0a:3e:93:c4:5f:5c:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 4 08:58:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cba84fee4b8fc11a027cefd583185071da8493b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:01:b9:0a:3c:ee:8f:5f:ae:a3:66:3b:e4:6e:
54:dd:44:21:78:ce:15:a7:b6:c1:74:17:90:ea:6e:
2a:b9:91:b0:16:c7:34:da:c5:9a:15:60:9e:b9:e8:
11:60:df:7b:bc:e0:ba:a4:7b:8c:ff:4e:89:4b:0f:
bc:f2:a6:cf:05:84:96:4f:2a:d7:b1:b5:3e:4e:ec:
af:21:47:0d:86:1d:72:d2:1f:1a:4d:31:4b:f3:23:
c6:13:fa:f1:16:20:c4:9e:40:d1:b8:90:37:8c:49:
60:5a:9c:29:98:48:a4:9f:d0:04:67:a0:e9:19:c7:
98:8a:6d:89:95:8b:1e:5e:c7:f2:dc:72:4a:1d:6c:
23:b7:27:ed:c1:50:3d:09:13:05:bc:80:fb:ba:58:
19:aa:f3:0f:97:80:d6:01:20:b1:a9:85:ac:f2:22:
fd:d7:50:bd:a3:a6:f5:e1:0a:14:06:e8:a9:ab:3c:
42:8a:86:92:27:a0:28:0e:31:c8:69:b3:9b:37:f6:
52:41:94:76:0c:5b:08:16:5b:5b:8e:98:81:22:0e:
7f:4a:29:5f:c5:1d:9e:45:a4:30:6a:a7:8c:e7:22:
98:ec:21:2a:ea:ec:2b:36:f7:8f:46:b9:31:f7:08:
0c:2b:be:70:6c:0a:5e:3b:9e:25:ff:0d:a3:9c:04:
93:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A8:4F:EE:4B:8F:C1:1A:02:7C:EF:D5:83:18:50:71:DA:84:93:B3
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/y6hP7kuPwRoCfO_VgxhQcdqEk7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.0.0/21
217.60.12.0/22
217.60.24.0/22
217.60.60.0/22
217.60.188.0-217.60.195.255
Signature Algorithm: sha256WithRSAEncryption
39:40:34:e0:69:51:c8:17:b9:3b:ad:67:a8:91:0d:60:5e:9a:
43:34:c3:99:c2:f9:b2:bc:39:1e:12:16:e1:64:f8:b2:9c:07:
f8:57:7f:b6:18:4a:6f:c8:83:4b:96:6e:63:e2:ca:30:51:63:
31:6a:27:5b:1c:1b:55:52:4f:59:a1:96:d9:5d:2d:83:b4:84:
c2:11:dd:32:15:76:29:8e:72:fb:b5:2c:7b:ea:23:ee:f8:90:
76:92:1d:ea:74:25:aa:ee:a0:22:c1:08:15:9d:8c:be:cf:95:
06:29:59:25:02:e0:5f:b4:0b:2b:23:54:f5:ea:1b:0b:36:b0:
5b:9b:de:8b:dc:ee:eb:e4:27:32:fb:23:90:ed:d5:e4:9d:71:
77:0b:49:ab:52:9c:13:da:46:85:b8:99:27:ab:29:91:20:f0:
eb:a7:1b:c2:8f:10:32:ae:3c:ff:f0:2b:9e:dd:23:07:e6:84:
02:1d:c5:96:18:c5:58:6e:b8:32:33:cc:6d:29:39:80:5f:f4:
93:c8:f3:4d:8a:7f:68:8f:42:85:9d:a0:54:93:c4:e1:7e:46:
0d:6c:23:31:ed:5e:a9:70:72:64:47:4d:98:8b:5a:bd:99:75:
60:9b:ff:0e:7c:6b:83:7b:77:a2:e4:86:35:dc:b8:91:5a:6a:
18:bb:bf:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:57:09 2025 by rpki-client