Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/15i89b2ooCC5Wqcsjg2SBUg3A40.roa
File: 15i89b2ooCC5Wqcsjg2SBUg3A40.roa (raw, json)
Hash identifier: lZ5oTep+frYUK0lIlk9v0/P+KqGOWHdfH+9b58myH+w=
Subject key identifier: D7:98:BC:F5:BD:A8:A0:20:B9:5A:A7:2C:8E:0D:92:05:48:37:03:8D
Certificate issuer: /CN=bd19d4535c7e62b921e859e6557b821f278e716a
Certificate serial: 0198A8A2496041F738090A3214556D6B5EF4
Authority key identifier: BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/15i89b2ooCC5Wqcsjg2SBUg3A40.roa
Signing time: Thu 14 Aug 2025 12:51:04 +0000
ROA not before: Thu 14 Aug 2025 12:51:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401838
IP address blocks: 45.134.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a8:a2:49:60:41:f7:38:09:0a:32:14:55:6d:6b:5e:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd19d4535c7e62b921e859e6557b821f278e716a
Validity
Not Before: Aug 14 12:51:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d798bcf5bda8a020b95aa72c8e0d92054837038d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fd:75:41:fb:3f:ae:91:b9:09:c0:57:f7:bf:
ef:e8:ff:33:90:aa:cf:9e:8f:41:f6:19:db:25:c3:
b6:3c:a3:10:e7:3f:51:f5:6f:c2:e5:28:9e:b9:c5:
7f:e0:d0:42:bb:b6:37:81:cb:ea:b4:b5:25:b4:3b:
06:f0:a2:a8:05:c7:00:e7:23:66:9c:2e:05:7c:d6:
62:fe:e7:07:4b:fb:ad:ac:e0:f4:11:c6:68:61:e7:
78:ed:66:89:37:ed:d7:b5:01:9e:80:2f:bd:54:8e:
f0:80:7d:0e:ef:d0:96:0f:a7:b9:c0:16:a1:85:70:
d9:47:88:c1:de:76:ab:e5:7e:c1:b2:72:66:28:eb:
1e:ff:3b:b2:8d:42:e0:27:56:b1:13:d5:0d:96:5d:
b8:b0:25:79:4b:7e:f3:a0:c1:18:3c:e2:c8:41:1f:
ee:92:2c:4e:15:0b:3c:72:df:35:58:e9:de:d6:82:
19:f9:e2:5d:eb:9e:82:a4:a9:6f:43:19:f5:69:26:
1b:6d:b7:8d:83:a6:29:20:78:12:98:21:39:95:22:
50:40:ac:79:44:6a:da:79:48:1e:dd:7c:22:b9:95:
36:a9:a2:63:32:fa:ff:92:0d:bf:d5:d5:69:26:b5:
fd:fd:e0:c6:7f:f0:51:b8:b3:b0:c5:4f:30:8a:03:
ec:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:98:BC:F5:BD:A8:A0:20:B9:5A:A7:2C:8E:0D:92:05:48:37:03:8D
X509v3 Authority Key Identifier:
keyid:BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/15i89b2ooCC5Wqcsjg2SBUg3A40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.8.0/24
Signature Algorithm: sha256WithRSAEncryption
64:85:4b:56:95:29:32:bc:c8:54:30:3c:21:8d:68:23:30:45:
10:9d:83:79:57:00:6f:c1:7a:ab:48:ae:d9:c4:c4:30:f1:34:
2a:e4:3d:f2:d4:26:d6:5e:59:13:7b:92:89:08:e0:c3:66:34:
c8:56:ff:82:57:4f:0b:7d:00:3e:02:4a:08:71:78:3d:be:32:
99:e0:2c:53:5d:26:ae:e3:44:1f:52:cf:39:25:b4:f5:e5:f2:
7a:74:96:2b:69:5a:8e:ba:39:14:61:32:06:e4:0c:41:86:c1:
14:7d:ce:97:ce:df:aa:44:29:92:3b:c9:c1:24:1a:5d:62:e2:
2e:d0:b9:94:1c:60:d0:54:ce:22:c8:f0:ed:4a:9c:26:e2:de:
a7:e2:96:b4:0a:db:0f:b6:e2:40:fe:80:aa:b5:28:53:67:21:
57:41:25:d7:0a:64:ca:58:a4:cf:97:b0:22:26:25:a3:47:a9:
c5:5d:ab:1b:71:86:5b:26:ba:a2:b6:cb:81:ef:2d:60:ce:c8:
b0:a1:df:3c:af:c9:20:fd:8f:e8:8b:b5:0f:f9:37:b6:c2:8a:
e1:e7:d6:f0:35:a5:05:27:cf:19:15:f6:89:22:1f:17:0c:33:
a4:57:32:fc:2e:a0:64:68:d4:3a:8b:75:1b:b5:81:3c:04:e1:
89:f1:6e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:50:04 2025 by rpki-client