Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/OTY8rK-yLZ7a-0utKcz6mGB9nCk.roa
File: OTY8rK-yLZ7a-0utKcz6mGB9nCk.roa (raw, json)
Hash identifier: U0jw6V2qSgwniOo9qoj/s7C4gbrXFECu1kCbMv1fjgg=
Subject key identifier: 39:36:3C:AC:AF:B2:2D:9E:DA:FB:4B:AD:29:CC:FA:98:60:7D:9C:29
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01979C12BF0576D1E43753BD2C106286055C
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/OTY8rK-yLZ7a-0utKcz6mGB9nCk.roa
Signing time: Mon 23 Jun 2025 09:16:03 +0000
ROA not before: Mon 23 Jun 2025 09:16:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211484
IP address blocks: 5.180.48.0/24 maxlen: 24
45.8.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9c:12:bf:05:76:d1:e4:37:53:bd:2c:10:62:86:05:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jun 23 09:16:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39363cacafb22d9edafb4bad29ccfa98607d9c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:79:08:08:e4:31:9a:45:bc:20:f4:e8:69:03:
d5:54:d4:4b:17:66:b2:78:82:bf:82:35:6b:da:b9:
37:53:89:57:e7:46:f0:a0:7f:55:73:89:8d:86:e3:
52:1e:cc:db:6a:20:80:28:9c:58:48:0d:29:c9:59:
93:3d:e2:73:04:46:dc:93:46:e1:89:db:07:5b:ae:
c6:91:8a:37:e7:a7:a0:08:41:83:c7:05:c0:15:8c:
4d:5a:94:9a:09:0c:de:09:7f:c6:4e:88:8a:fd:f1:
04:39:93:94:f6:61:25:30:ab:9d:fe:a9:3a:95:c2:
01:38:3f:8c:6b:df:be:f1:aa:2c:27:5d:f8:8a:36:
e2:24:cb:5b:32:ed:52:18:45:9b:d0:09:c9:58:84:
14:95:3a:1e:b8:db:0f:1d:82:9b:78:61:42:74:06:
eb:75:3c:03:11:ab:6b:df:f0:e8:1c:bd:84:5f:8b:
ea:db:01:48:42:57:e0:a3:c2:2c:60:82:05:a7:10:
34:49:80:d8:85:b8:18:5a:f5:f5:f8:10:b4:c1:6a:
03:f1:5f:2e:f0:9d:6e:70:95:90:62:ca:85:0b:8a:
9e:a4:e5:f5:e1:19:f7:b8:44:d3:c6:64:5d:70:28:
86:3a:c0:f9:29:bf:9f:f5:ab:c9:22:0d:6e:93:01:
a8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:36:3C:AC:AF:B2:2D:9E:DA:FB:4B:AD:29:CC:FA:98:60:7D:9C:29
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/OTY8rK-yLZ7a-0utKcz6mGB9nCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.48.0/24
45.8.200.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:e6:80:fb:a4:e8:34:a5:d2:f6:f0:7d:40:b5:71:80:aa:de:
fc:83:68:2d:10:41:30:e1:2d:24:58:f2:e1:05:bb:d5:7e:71:
43:45:27:1f:af:e2:33:41:40:0c:fd:cd:17:5e:1c:d8:ef:70:
80:5f:c5:b5:f2:83:26:21:42:0a:e4:38:d8:15:4b:c7:2d:80:
6f:9a:c1:3c:9b:e3:db:1c:c1:31:6f:9b:b1:15:27:13:aa:d6:
80:81:ac:f8:66:89:db:00:fd:26:0b:f9:7a:e6:ff:dc:f6:d1:
8e:f7:b5:52:45:e5:7a:08:57:d6:37:1b:1c:ca:e6:c0:de:fe:
67:85:b9:9c:e6:da:9a:1e:92:ff:7e:e5:e1:ff:87:08:87:cb:
dc:03:72:0b:68:a8:a1:e2:91:71:8e:0f:25:a3:57:ae:42:a4:
bf:0d:93:33:a4:72:81:76:f8:e9:9b:8e:3a:8e:35:ba:cb:8b:
9e:94:1c:95:08:b6:d4:37:df:24:a5:2b:5a:3c:71:5f:ff:4f:
93:26:17:4b:74:19:e1:01:32:d9:bc:4c:c2:a8:69:0b:89:1e:
17:46:83:2f:c5:2a:03:dc:6a:c2:03:53:cd:01:9d:0d:a4:0b:
a9:0e:e8:6f:4d:05:6d:58:bb:98:a4:4f:7f:a8:25:af:ed:9d:
9c:9f:75:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 02:00:27 2025 by rpki-client