Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/y1gORlfxMjjmiRqnRqP0_vdo8AM.roa
File: y1gORlfxMjjmiRqnRqP0_vdo8AM.roa (raw, json)
Hash identifier: mY1qaQp/3A3LYYKd1Y/STnbqtWTy7aMARdixpsDD5/A=
Subject key identifier: CB:58:0E:46:57:F1:32:38:E6:89:1A:A7:46:A3:F4:FE:F7:68:F0:03
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 019779F12BAC426CF73A8768A87321528159
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/y1gORlfxMjjmiRqnRqP0_vdo8AM.roa
Signing time: Mon 16 Jun 2025 18:12:17 +0000
ROA not before: Mon 16 Jun 2025 18:12:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214526
IP address blocks: 178.239.144.0/24 maxlen: 24
178.239.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 10:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:f1:2b:ac:42:6c:f7:3a:87:68:a8:73:21:52:81:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jun 16 18:12:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb580e4657f13238e6891aa746a3f4fef768f003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fd:40:33:18:d3:3b:8d:c1:ac:05:95:f3:b9:
6c:e5:cb:06:95:af:eb:24:fd:04:b2:a1:e2:aa:12:
a8:41:9c:dc:b9:39:c9:59:ce:52:99:2b:01:f6:5b:
b0:f4:ce:18:9b:19:9a:99:1d:65:44:05:bd:27:88:
62:27:4d:57:b0:81:a6:3c:f8:1e:e2:25:cf:54:dd:
e6:df:d9:0a:62:f9:83:d9:ec:01:d2:41:1f:4f:07:
e3:03:72:e8:20:37:74:3e:03:5a:e9:a4:b5:97:60:
e1:85:a9:00:8d:73:5e:2f:bb:d0:66:d9:73:7b:86:
24:7c:27:66:76:8c:34:c8:3b:d7:ef:63:06:01:d2:
7d:29:80:af:40:d3:d0:2f:d2:2b:dd:3f:d9:ac:d2:
a8:ee:2d:0d:70:ad:9b:14:38:c5:38:a6:36:9e:2a:
ef:ef:2b:a1:f8:fe:4c:d7:da:29:d1:87:e6:5e:26:
2f:64:03:fe:d7:62:0e:a4:e9:8d:c0:48:31:44:dd:
c8:72:47:49:c4:ba:f0:c6:5b:5a:45:2f:bc:59:f3:
fa:fa:d3:c3:ac:8a:03:4d:96:7d:d5:a3:66:d7:79:
f9:eb:9c:33:6f:35:05:f8:37:d8:f8:f7:61:83:c2:
50:2b:f9:4b:e8:4b:bb:6d:e6:a3:27:b4:9e:b0:9d:
a4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:58:0E:46:57:F1:32:38:E6:89:1A:A7:46:A3:F4:FE:F7:68:F0:03
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/y1gORlfxMjjmiRqnRqP0_vdo8AM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.144.0/24
178.239.157.0/24
Signature Algorithm: sha256WithRSAEncryption
97:56:93:26:03:5c:1a:f9:b9:fc:a8:35:a2:26:f6:6f:da:3f:
71:39:49:cb:3f:a3:fe:56:29:19:66:93:fa:23:5f:a3:22:ca:
02:26:a4:43:e7:ff:e3:5e:77:aa:3b:20:9f:ed:65:b3:94:dc:
35:bc:dd:bd:cf:91:44:db:84:d0:e7:79:2b:a7:e0:03:09:92:
29:88:f9:5b:dc:73:4b:f7:b0:51:d4:16:6e:c6:9f:6b:23:8d:
cf:d5:64:8d:9f:dd:00:59:6d:a8:d6:f5:29:a0:b4:5b:6c:72:
21:52:c5:e8:32:80:2b:32:a1:1f:4c:b7:35:83:20:88:38:de:
2e:f3:59:52:02:c5:3e:6e:77:83:94:53:b1:ce:5e:f5:01:e6:
18:be:a9:5a:fb:54:af:e1:5c:eb:c2:ac:76:a9:0f:a0:53:df:
d9:d0:64:89:19:bd:e1:b3:b6:f5:e7:9e:0e:55:e8:14:0b:b9:
18:9a:70:61:ca:ff:a1:fe:c0:9f:49:9e:5b:3e:c1:53:bc:d0:
3e:47:3d:8e:fb:f7:41:34:35:db:d2:ed:46:d2:9f:67:d2:11:
a5:0f:6e:53:42:5e:81:13:ca:65:60:39:e7:bb:dc:c7:d6:59:
23:e7:73:33:d7:84:d0:b1:56:52:41:fe:ba:2d:1d:eb:f7:d8:
10:d9:e5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 20:55:17 2025 by rpki-client