Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/orAKfjl1fXW4_m23ZUuKco1b-BY.roa
File: orAKfjl1fXW4_m23ZUuKco1b-BY.roa (raw, json)
Hash identifier: SPzJt2ubmkoDTY2BGadUCK43CwJNkqbV55KtpGnjnsE=
Subject key identifier: A2:B0:0A:7E:39:75:7D:75:B8:FE:6D:B7:65:4B:8A:72:8D:5B:F8:16
Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Certificate serial: 01977B9825B4818E8FC67C4061CE4472C095
Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/orAKfjl1fXW4_m23ZUuKco1b-BY.roa
Signing time: Tue 17 Jun 2025 01:54:18 +0000
ROA not before: Tue 17 Jun 2025 01:54:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211736
IP address blocks: 92.63.197.0/24 maxlen: 24
185.156.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 13:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7b:98:25:b4:81:8e:8f:c6:7c:40:61:ce:44:72:c0:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Validity
Not Before: Jun 17 01:54:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2b00a7e39757d75b8fe6db7654b8a728d5bf816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:21:c9:a8:12:5d:8e:d9:f1:78:f0:40:1c:b9:
8a:55:ae:73:91:b7:8b:bd:68:39:0a:38:bf:be:6e:
68:63:ab:0c:ce:ba:9b:77:d4:29:a9:25:a9:60:40:
44:3c:e7:f5:77:a1:ee:6f:ef:3b:d0:60:5d:01:58:
b5:29:f8:7d:c6:2b:6e:e0:b2:22:b2:a7:75:50:a6:
e7:8c:bd:bd:cf:5d:b5:86:b9:54:aa:71:c3:6f:af:
6b:04:56:fe:7d:28:22:96:36:91:91:f9:c5:b6:9d:
28:82:d1:1d:dd:1c:60:ea:f9:3a:bd:8a:2f:02:4c:
c1:ef:ae:95:9a:76:eb:2e:2d:cc:fa:5d:fd:72:8b:
52:86:e5:bb:9a:0d:cc:e5:da:83:f6:9a:68:cd:fb:
9b:5f:fc:bd:0b:07:7a:2d:b1:3d:a4:91:ed:ae:73:
05:20:f1:0a:ea:73:a9:9e:71:95:95:b9:5d:87:63:
c2:f8:db:06:11:60:17:10:98:a8:8b:84:67:b6:80:
b7:38:34:27:59:ea:b0:4f:22:1b:6e:99:2b:9b:94:
1d:67:90:c2:07:df:42:98:db:88:ce:cb:6b:3c:bb:
1e:ef:bf:bc:a1:65:2b:b9:52:54:03:81:c3:12:91:
0a:54:d6:71:e9:f8:1b:75:d6:a7:2d:49:d3:c2:37:
6d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B0:0A:7E:39:75:7D:75:B8:FE:6D:B7:65:4B:8A:72:8D:5B:F8:16
X509v3 Authority Key Identifier:
keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/orAKfjl1fXW4_m23ZUuKco1b-BY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.63.197.0/24
185.156.73.0/24
Signature Algorithm: sha256WithRSAEncryption
23:93:a3:fe:92:cb:e2:a2:c5:c4:f0:d5:f1:fc:d9:4e:d6:02:
c5:57:9e:79:fd:fb:8c:1c:4e:a4:77:4a:f2:c5:29:ec:f7:d8:
e9:a4:18:3c:59:35:7e:dc:79:25:24:88:fd:c9:00:12:a9:87:
af:b9:a1:b6:93:55:51:41:40:49:0f:c3:91:29:a9:a3:d6:47:
ac:f7:4b:82:be:07:6f:a6:41:67:51:5e:38:cd:00:ca:c0:d8:
64:60:e2:31:d0:1d:b7:6c:ba:60:6a:10:5c:59:ee:00:47:0c:
b8:92:14:ab:bf:d7:f1:c0:4e:84:7c:e3:e9:e5:6a:95:0b:a9:
32:a4:23:86:39:01:98:b4:c6:65:50:f1:ed:33:43:e8:23:8e:
90:02:7d:41:43:72:32:e8:ab:c6:f1:b5:d2:04:b4:42:fd:a7:
f8:aa:7c:10:c1:c6:f8:f9:f8:23:1c:9e:bf:9f:f2:3c:4f:e7:
22:63:ce:2c:73:31:3f:f6:fd:b3:16:48:82:85:9f:a5:1c:27:
8e:83:17:94:00:b4:7e:0c:4c:92:79:e5:ce:a4:de:1c:fa:11:
5a:a5:2e:2e:66:0d:e1:82:12:31:7d:38:4b:82:67:ba:27:19:
72:da:a3:d9:44:b9:11:9f:6a:a0:ce:1a:84:ee:09:43:b0:0c:
cb:4e:af:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 21:45:18 2025 by rpki-client