Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/ByGHodkRngTWyaxrywBx9HU_pgo.roa
File: ByGHodkRngTWyaxrywBx9HU_pgo.roa (raw, json)
Hash identifier: +PGhvckml5x5MT6xt2SMtvcfa7zw9W0WZ25LYIkA+NY=
Subject key identifier: 07:21:87:A1:D9:11:9E:04:D6:C9:AC:6B:CB:00:71:F4:75:3F:A6:0A
Certificate issuer: /CN=0e51516767d9a8508c6e14d58deeffbfab8080dd
Certificate serial: 0198999B8BBF27CD3FDB77B02665FDDD1BFE
Authority key identifier: 0E:51:51:67:67:D9:A8:50:8C:6E:14:D5:8D:EE:FF:BF:AB:80:80:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DlFRZ2fZqFCMbhTVje7_v6uAgN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/ByGHodkRngTWyaxrywBx9HU_pgo.roa
Signing time: Mon 11 Aug 2025 14:49:24 +0000
ROA not before: Mon 11 Aug 2025 14:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56372
IP address blocks: 91.224.122.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DlFRZ2fZqFCMbhTVje7_v6uAgN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:99:9b:8b:bf:27:cd:3f:db:77:b0:26:65:fd:dd:1b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e51516767d9a8508c6e14d58deeffbfab8080dd
Validity
Not Before: Aug 11 14:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=072187a1d9119e04d6c9ac6bcb0071f4753fa60a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7a:48:a6:27:7d:52:66:4e:f3:c1:20:8e:0f:
5a:c6:57:7c:e3:cd:df:70:2d:46:2b:e0:df:3c:fb:
88:7d:d0:8d:6d:26:4d:81:c9:84:f6:ee:52:52:59:
20:a1:0c:d8:37:b7:20:b2:0e:57:e2:49:76:7e:6b:
26:a8:0a:2a:3f:aa:d2:52:40:00:d0:ea:d2:63:9d:
6a:75:04:93:50:79:eb:64:90:9b:6a:e7:d4:8b:66:
bb:a7:8b:ef:80:27:a1:e4:e7:43:5e:d1:d4:b5:a1:
c2:4c:4f:ef:f6:ff:32:59:a5:87:41:47:e6:97:9f:
e1:99:ff:5a:13:be:ce:68:f8:a4:48:8a:3c:3e:0e:
7a:fb:0f:3e:a0:19:1c:e1:5f:48:bd:9b:45:d7:aa:
d1:67:c0:3b:64:84:65:5a:42:b8:23:30:8c:1c:ed:
60:58:a3:47:38:4b:88:4a:5b:d0:fa:f8:d2:1f:be:
1f:25:17:67:27:db:d9:ad:55:6b:6e:e9:7f:d0:f3:
0b:5a:8b:89:68:9c:2d:01:8e:13:70:26:b1:7f:5d:
f9:f2:80:5f:4e:15:5a:ed:66:e9:98:0b:56:9f:41:
c2:64:73:59:b4:f1:4f:5a:90:48:87:a2:d1:b2:04:
1f:bf:de:10:20:97:e3:ee:7f:10:a7:6d:49:b5:73:
fc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:21:87:A1:D9:11:9E:04:D6:C9:AC:6B:CB:00:71:F4:75:3F:A6:0A
X509v3 Authority Key Identifier:
keyid:0E:51:51:67:67:D9:A8:50:8C:6E:14:D5:8D:EE:FF:BF:AB:80:80:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DlFRZ2fZqFCMbhTVje7_v6uAgN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/ByGHodkRngTWyaxrywBx9HU_pgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.122.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:ca:b9:a6:1a:98:20:7a:6f:f6:0c:ef:73:75:3e:d4:75:57:
eb:3f:39:a9:2d:7e:89:df:d0:17:06:37:24:bb:a7:0a:66:4e:
a1:0d:3d:d0:ac:4c:71:9c:4f:06:53:40:6a:ea:2b:66:c1:80:
42:39:69:4d:2e:17:43:3e:d0:b1:80:68:78:d5:d5:7b:a7:1f:
c6:82:ba:fd:c8:46:e7:4c:de:db:36:77:37:40:61:66:02:13:
2c:29:ac:27:c1:0e:67:62:c2:bb:db:58:62:49:34:f6:df:55:
2c:58:b9:d4:f8:bc:e8:df:42:30:61:2f:9d:bf:e4:92:f3:ac:
fe:9a:eb:e2:ad:67:8a:db:e0:86:4d:a8:94:f0:06:0b:d0:d2:
34:21:27:44:60:6b:fe:0b:de:7d:91:11:35:95:e9:20:95:dc:
99:b6:fb:4e:9b:0b:bb:3f:74:d0:e2:8d:b0:66:d7:c6:3d:ce:
8d:72:85:42:73:df:4a:2c:bb:9a:39:23:2e:7b:0e:f6:57:28:
71:1c:3e:74:66:4b:8d:c7:32:cd:d5:dc:26:95:7e:1c:3c:cc:
40:1d:9e:e4:56:59:c3:1c:99:3a:77:a1:26:8b:d9:7f:67:2f:
01:d5:bb:de:ff:30:b6:7c:36:b3:b7:5d:4e:5d:78:75:5e:0e:
83:d2:c6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:58:59 2025 by rpki-client