Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/itajyg60Fy-YtG-bgA7SaOu7xmM.roa
File: itajyg60Fy-YtG-bgA7SaOu7xmM.roa (raw, json)
Hash identifier: RYmFcUyM9mk+QpNBXNwcMyPDxmlxhiZ1g3pUUgUmVKM=
Subject key identifier: 8A:D6:A3:CA:0E:B4:17:2F:98:B4:6F:9B:80:0E:D2:68:EB:BB:C6:63
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01975A54D42FACC9A4FD4FCECA8C759BD040
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/itajyg60Fy-YtG-bgA7SaOu7xmM.roa
Signing time: Tue 10 Jun 2025 14:53:18 +0000
ROA not before: Tue 10 Jun 2025 14:53:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198154
IP address blocks: 85.133.199.0/24 maxlen: 24
85.133.221.0/24 maxlen: 24
85.133.248.0/24 maxlen: 24
85.133.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:54:d4:2f:ac:c9:a4:fd:4f:ce:ca:8c:75:9b:d0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jun 10 14:53:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ad6a3ca0eb4172f98b46f9b800ed268ebbbc663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e4:49:1c:db:a3:fd:cc:08:a9:e8:28:95:60:
fa:87:25:bb:4e:d8:c3:8c:89:10:73:2e:52:9c:0b:
5e:8e:a1:cf:1d:b3:b0:24:87:b8:25:e9:7c:d0:df:
df:89:74:80:d2:39:91:5a:1a:33:f8:2d:dc:f3:3a:
05:e6:74:47:be:6c:fb:0c:e7:f0:3c:80:0c:3a:6f:
35:76:01:e6:d8:4d:93:5c:97:f2:ce:c6:08:89:7c:
7d:36:15:64:76:a9:21:50:14:71:9b:ae:8a:e6:a5:
d2:40:18:eb:8a:55:c1:ae:40:5b:12:2c:48:bd:97:
ec:d6:f9:4a:9b:30:12:03:e4:02:02:5e:5a:5a:93:
e8:8e:d3:b6:75:81:51:6a:90:97:89:57:0c:c1:29:
6f:86:60:e5:48:0c:ad:bb:de:07:c9:79:9a:d8:84:
7b:1e:e4:bf:3b:0e:33:95:73:57:d1:22:f1:1e:6b:
0c:aa:98:8b:36:db:84:94:c2:4d:a9:08:ed:b6:37:
12:5b:34:b6:07:81:6a:0b:0c:b5:f8:b0:13:76:bd:
da:c5:40:a7:48:0b:dc:ed:de:ae:47:04:dd:71:bf:
7d:9c:08:c6:0b:dd:16:df:5d:35:3c:ef:4d:e0:9e:
ea:34:14:48:dc:0f:55:78:c8:78:19:ca:02:e2:2b:
2e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D6:A3:CA:0E:B4:17:2F:98:B4:6F:9B:80:0E:D2:68:EB:BB:C6:63
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/itajyg60Fy-YtG-bgA7SaOu7xmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.199.0/24
85.133.221.0/24
85.133.248.0/24
85.133.250.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:77:96:1f:10:54:fa:9b:27:6e:87:34:b1:f9:08:73:de:5c:
6d:41:da:7c:78:04:5c:55:51:14:3d:f4:2b:80:4b:11:6a:36:
da:e2:40:71:08:cf:08:a9:d1:bb:52:9d:bd:f5:96:b6:69:de:
5d:06:e8:7e:7b:48:11:f8:34:25:48:00:d5:6c:77:57:48:c4:
55:38:b1:ae:1b:85:79:b5:ab:ef:80:dc:ed:f4:63:ca:1b:93:
67:ea:75:73:76:ce:e1:39:e4:12:85:cc:b4:37:a7:99:b0:a8:
c3:e0:18:bc:ab:cf:25:61:47:e5:0e:01:76:76:89:3a:62:7e:
83:f2:0b:61:25:8a:99:1b:c4:5c:95:92:b8:c7:0b:4d:2c:1f:
cf:86:4c:a9:9a:a9:6a:07:78:a0:6e:7d:76:f7:40:52:43:9a:
e5:14:68:4d:bc:1c:ce:99:a1:03:2f:2b:48:b9:98:ed:5f:84:
49:61:a3:4e:3a:7d:79:67:71:94:db:6c:ac:18:81:5d:ce:b9:
d7:28:e6:e7:00:fc:2f:b3:68:d8:84:ee:01:01:4a:f7:ea:75:
54:a0:9d:85:21:0a:dd:03:be:4c:e8:f9:33:59:58:94:63:2d:
5a:88:30:b3:06:62:5c:5a:6f:c1:76:6a:e8:ab:29:da:39:5d:
84:7e:a2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:27:01 2025 by rpki-client