Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1GGGOKIFjEKTlbd5KeEm6ceF2FU.roa
File: 1GGGOKIFjEKTlbd5KeEm6ceF2FU.roa (raw, json)
Hash identifier: XKjwIFf19RDjQA4kWahL4MHEnsOJGscJao6IPr2rP+k=
Subject key identifier: D4:61:86:38:A2:05:8C:42:93:95:B7:79:29:E1:26:E9:C7:85:D8:55
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01975EF49B055ED2FB9D8AB5DA6E7FF1A256
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1GGGOKIFjEKTlbd5KeEm6ceF2FU.roa
Signing time: Wed 11 Jun 2025 12:26:18 +0000
ROA not before: Wed 11 Jun 2025 12:26:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209101
IP address blocks: 45.151.91.0/24 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 13:38:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:f4:9b:05:5e:d2:fb:9d:8a:b5:da:6e:7f:f1:a2:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 11 12:26:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4618638a2058c429395b77929e126e9c785d855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3e:28:e0:af:11:ce:5b:da:e4:20:8e:0a:88:
f1:f3:03:5b:61:ff:15:68:9f:53:6f:3e:47:41:cb:
15:d2:a7:6e:a5:53:07:7f:bf:cb:1b:d3:b0:2b:a0:
ec:82:a1:25:83:b0:3e:5c:cd:f0:b2:ca:7f:ef:90:
dd:39:30:5c:0a:72:1b:4c:a1:a2:30:d2:df:d3:9f:
55:a9:d8:72:a1:7e:53:d1:df:e1:8f:c9:1b:a3:7a:
50:8f:cf:de:5a:14:c7:95:36:75:a6:96:50:29:42:
4a:30:cb:9f:2f:e4:4c:b6:24:ff:94:73:76:49:ef:
81:9d:13:20:bb:11:e5:ac:bd:d9:fc:20:3b:8a:da:
38:a4:11:1f:36:f1:79:ba:67:80:49:11:dc:d6:34:
c3:8b:a2:3b:dd:6f:72:8b:8f:93:7f:9c:6c:4b:cd:
c8:26:9b:01:0a:2f:a9:b1:96:10:b8:fc:e3:9f:9d:
3f:cf:7c:e3:5f:3c:c1:0c:39:a0:33:64:09:0f:88:
8c:43:39:8d:46:62:1a:7e:9b:cd:b6:25:33:36:df:
65:d4:96:00:b4:00:86:63:b8:4c:8c:12:9c:5f:a3:
16:5d:82:b1:69:57:fe:82:a7:f2:3c:0e:b9:9d:9b:
ca:fd:62:a0:cb:8d:94:42:79:0e:96:3e:2a:9d:94:
9d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:61:86:38:A2:05:8C:42:93:95:B7:79:29:E1:26:E9:C7:85:D8:55
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1GGGOKIFjEKTlbd5KeEm6ceF2FU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.91.0/24
94.154.161.0/24
94.154.172.0/24
Signature Algorithm: sha256WithRSAEncryption
71:a6:fc:f6:a6:75:26:fb:f3:71:cf:98:95:60:0b:ad:69:ca:
22:16:32:36:33:ef:a1:38:1e:e7:f6:e2:9d:7e:04:66:f7:15:
d1:61:dd:18:b6:32:d5:f3:be:ad:73:f2:19:80:59:46:24:e6:
f1:00:13:2d:70:1f:61:05:c3:30:60:41:d2:ab:b8:f2:97:e0:
6b:3a:c4:c0:ee:f1:d8:e7:9e:ea:61:a0:60:50:a2:cc:19:5e:
ec:ed:f0:57:e8:df:6b:24:57:ff:cf:bd:22:5a:09:14:7f:69:
9e:ec:d6:79:b6:e2:e6:78:59:26:7c:25:21:9b:22:a4:7f:56:
06:54:7d:e2:0e:f5:0b:ef:d4:a2:88:e3:97:18:4a:f1:ac:f8:
07:95:5a:12:39:cd:0e:67:c9:d6:df:a4:f2:5a:34:c2:97:d4:
0b:6c:53:cb:64:1d:49:6e:f3:b8:04:4a:f6:be:16:0e:da:9a:
08:33:8a:88:8b:82:35:9e:72:e7:a3:69:b9:38:80:f5:22:db:
1b:a0:01:90:c8:63:d5:9a:ed:62:94:e7:e5:cd:0a:f9:56:6a:
9e:2c:10:73:21:7e:4d:42:95:f1:3d:17:36:83:87:20:f1:5d:
65:71:26:9e:60:90:dc:97:d9:44:4c:b5:10:f6:23:f8:44:7b:
4d:d1:fb:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:47:45 2025 by rpki-client