Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/yJ8fOnvMuSLD4BfNZSSKt3xcdGU.roa
File: yJ8fOnvMuSLD4BfNZSSKt3xcdGU.roa (raw, json)
Hash identifier: oiZZuv0ya9n3B5NVEv6QAOa/lzx9B2liktfAGQT4Djg=
Subject key identifier: C8:9F:1F:3A:7B:CC:B9:22:C3:E0:17:CD:65:24:8A:B7:7C:5C:74:65
Certificate issuer: /CN=79b5134b11f940911f0ff315c948daa53f732ee0
Certificate serial: 019765E94CDB058B240B6E33D89BAC35CD12
Authority key identifier: 79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/yJ8fOnvMuSLD4BfNZSSKt3xcdGU.roa
Signing time: Thu 12 Jun 2025 20:51:17 +0000
ROA not before: Thu 12 Jun 2025 20:51:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52033
IP address blocks: 46.254.48.0/21 maxlen: 21
46.254.48.0/24 maxlen: 24
46.254.49.0/24 maxlen: 24
46.254.50.0/24 maxlen: 24
46.254.51.0/24 maxlen: 24
46.254.52.0/24 maxlen: 24
46.254.53.0/24 maxlen: 24
46.254.54.0/24 maxlen: 24
46.254.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:65:e9:4c:db:05:8b:24:0b:6e:33:d8:9b:ac:35:cd:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79b5134b11f940911f0ff315c948daa53f732ee0
Validity
Not Before: Jun 12 20:51:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c89f1f3a7bccb922c3e017cd65248ab77c5c7465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:66:45:9a:d3:57:0c:3b:12:ff:9e:9d:60:19:
e2:5a:fb:3e:79:07:d8:b2:44:5b:bb:60:04:70:60:
bf:e2:5a:90:5a:1b:40:98:8b:23:c0:ad:4d:d7:af:
80:4a:eb:ae:06:66:f8:6a:ae:06:12:28:99:b1:f7:
50:3d:b3:62:54:f4:28:ff:be:c6:1f:4b:64:bc:a4:
ec:b8:da:9f:bc:6f:5e:f3:c8:0d:5f:10:c6:06:59:
67:fc:cf:36:f3:b1:53:b1:8d:74:62:52:65:30:3a:
60:ac:fd:56:b9:9f:d2:ce:f2:e0:7a:80:e3:74:16:
83:54:2c:cb:25:2d:e2:24:01:13:38:84:be:b9:f6:
ca:f3:70:92:29:ec:b6:ac:ce:05:dc:f1:06:20:ea:
06:78:f9:a9:28:21:0b:53:30:82:17:4b:3b:26:ca:
b3:07:d4:1e:1f:1a:f3:f6:01:23:d7:92:a3:e0:8a:
23:70:d5:a2:5b:cd:64:b2:69:8d:97:16:9f:c0:59:
51:ae:ea:6e:11:dc:9f:e8:96:4c:ac:34:a4:4c:ad:
0a:67:cf:39:7e:36:2c:8e:9c:36:42:8e:87:8e:23:
29:73:af:9d:4d:56:c2:4d:1a:8d:bd:3b:32:97:fa:
d7:b0:28:76:2e:10:0d:d4:6a:a8:ba:85:04:12:09:
28:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9F:1F:3A:7B:CC:B9:22:C3:E0:17:CD:65:24:8A:B7:7C:5C:74:65
X509v3 Authority Key Identifier:
keyid:79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/yJ8fOnvMuSLD4BfNZSSKt3xcdGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.48.0/21
Signature Algorithm: sha256WithRSAEncryption
53:08:68:77:a4:c7:b5:87:79:f8:f7:aa:b1:7a:cd:c8:5a:11:
cf:e1:a1:d1:18:b8:5b:2d:a6:ee:5b:1f:94:e1:03:b5:db:73:
c1:f6:5b:6c:67:e8:0a:b5:a0:0d:ae:54:ea:da:cb:28:f5:9b:
10:41:f6:e4:d4:fb:8c:af:12:9f:69:6d:c6:13:3d:d7:8f:48:
11:47:3d:a9:b0:d6:47:5c:48:a9:fc:79:3e:c6:d0:0a:94:0d:
3d:9a:0d:0b:70:c1:fd:56:8e:a4:06:2e:5c:df:f6:3f:67:98:
01:1f:28:0c:8a:20:a4:6d:fc:1e:4b:2d:96:14:da:bc:d3:5b:
21:79:86:b5:31:f5:4d:f5:17:12:90:98:14:1a:ff:30:33:9d:
50:39:49:02:fc:0a:50:64:cf:86:41:31:16:46:2c:3b:36:de:
9e:83:cd:69:b3:7d:f2:bf:c8:65:17:ca:54:f1:59:93:da:25:
18:a3:2c:b1:bf:a4:2e:44:8e:85:4c:c5:7c:e2:4a:37:4b:c9:
0c:83:5d:3c:ad:af:21:f9:48:22:f3:32:07:62:97:16:8b:2e:
47:0d:0a:60:25:71:6d:06:5f:1d:02:81:1b:d4:62:35:a4:3a:
d7:dd:ff:3d:2d:ba:c4:af:cd:6f:2b:cf:7c:f9:f8:de:f8:52:
d0:45:f6:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:05:31 2025 by rpki-client