Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/vUShAZte6-FyS_z1ZHA8pp_yhZ0.roa
File: vUShAZte6-FyS_z1ZHA8pp_yhZ0.roa (raw, json)
Hash identifier: xo65L9dd/IOsk/VqJuYcHR7YE9s3h7aIvSnNg7LOHIw=
Subject key identifier: BD:44:A1:01:9B:5E:EB:E1:72:4B:FC:F5:64:70:3C:A6:9F:F2:85:9D
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0197565F563B051B7F5CF86F2126EF581E8A
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/vUShAZte6-FyS_z1ZHA8pp_yhZ0.roa
Signing time: Mon 09 Jun 2025 20:26:17 +0000
ROA not before: Mon 09 Jun 2025 20:26:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133398
IP address blocks: 85.208.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:56:5f:56:3b:05:1b:7f:5c:f8:6f:21:26:ef:58:1e:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jun 9 20:26:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd44a1019b5eebe1724bfcf564703ca69ff2859d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e8:90:82:49:60:05:bd:48:85:4c:68:e6:99:
ac:eb:32:0e:da:de:94:df:97:53:0a:d9:05:84:8f:
a3:52:77:5e:57:5d:7c:55:62:32:02:25:e9:de:b6:
9e:f9:0a:96:06:46:a5:71:82:96:69:67:22:5c:bc:
04:d3:84:61:45:a9:ce:2d:1a:5d:96:77:ee:38:c5:
52:0d:22:f9:d6:54:90:65:2f:9c:45:6a:fb:9f:a5:
4f:6e:5b:a4:aa:b5:41:ac:7c:4a:24:fb:45:48:9d:
a9:01:62:72:be:4f:ad:d6:93:7f:03:69:48:91:71:
e4:b3:1f:0b:4b:09:85:50:94:cf:7d:8c:8f:e2:ed:
f0:e2:ab:38:19:4d:d8:c1:b5:2a:74:45:31:2c:3c:
e4:2a:3c:4d:41:6e:28:f2:a2:97:4f:49:b0:73:52:
5a:7f:40:f4:4f:6d:73:25:ef:98:f6:80:d3:cc:5e:
a4:12:12:d0:93:b4:0b:0e:46:43:9c:ba:ad:19:28:
72:4d:61:11:ce:6b:11:8a:0a:9f:da:85:76:7f:e0:
ae:e7:37:ac:7e:de:d7:2c:80:07:56:ef:94:73:bc:
57:41:f3:b9:8f:6d:a0:8f:7a:2b:9b:38:35:61:a2:
5a:7b:01:c8:40:70:4b:95:61:5d:d9:9e:3e:75:24:
2d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:44:A1:01:9B:5E:EB:E1:72:4B:FC:F5:64:70:3C:A6:9F:F2:85:9D
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/vUShAZte6-FyS_z1ZHA8pp_yhZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.106.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:24:5a:f1:0f:18:cf:4f:a9:b6:7e:e7:09:51:84:7f:88:19:
e1:a3:1d:64:e4:48:c0:f8:30:35:f9:cd:82:4f:1c:86:03:ae:
02:33:3d:b0:65:08:13:d5:17:6b:d7:33:dd:bf:97:05:cd:ea:
d5:2f:68:78:70:3f:82:45:9a:c7:d8:fe:20:75:b7:aa:1f:6d:
88:7d:0d:df:c9:1b:60:d8:04:f5:63:b1:a8:85:49:bd:70:ec:
cd:06:f5:dd:55:41:8f:9c:d6:b6:c7:81:87:39:6f:3c:2e:88:
7f:ca:0a:99:a7:86:cf:1e:e5:1b:2e:32:d0:99:20:8c:b7:d4:
e5:39:92:42:26:a1:84:82:c7:f2:47:81:60:1b:75:b4:9f:d2:
49:13:d2:9b:bb:6b:6e:82:2a:4b:b5:f1:95:4a:99:b9:ea:b5:
73:05:48:d9:2d:54:49:b3:04:79:14:d8:05:1e:41:15:8e:89:
dc:f2:f1:7a:a0:40:9f:87:58:9d:c4:9e:6f:59:6b:45:8f:61:
b6:a0:5e:74:9c:c4:b2:1d:20:62:2f:4f:34:91:55:99:96:90:
9a:7b:d0:35:97:68:b7:37:d8:c6:e0:e5:44:4b:52:16:af:32:
2f:1f:d6:c3:1e:a7:64:6d:4c:82:ef:4e:fd:54:6e:c3:b3:b4:
8e:c2:4a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:07:45 2025 by rpki-client