Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/TbBjC4Bw3nO-ILPEKTXEigZdy-w.roa
File: TbBjC4Bw3nO-ILPEKTXEigZdy-w.roa (raw, json)
Hash identifier: Boqfnv/51CYQGV9Ytt9sRwLVzN1pDn6I3foblViCbHA=
Subject key identifier: 4D:B0:63:0B:80:70:DE:73:BE:20:B3:C4:29:35:C4:8A:06:5D:CB:EC
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 019745227E3C9EE2DD8022ACC2D3B902769F
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/TbBjC4Bw3nO-ILPEKTXEigZdy-w.roa
Signing time: Fri 06 Jun 2025 12:06:17 +0000
ROA not before: Fri 06 Jun 2025 12:06:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4755
IP address blocks: 45.152.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:22:7e:3c:9e:e2:dd:80:22:ac:c2:d3:b9:02:76:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jun 6 12:06:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4db0630b8070de73be20b3c42935c48a065dcbec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a2:bb:05:67:4c:24:bf:60:4e:fb:89:e5:32:
af:9e:d9:aa:23:dc:d3:c9:f9:72:b0:4e:5a:17:96:
2f:8d:a8:9d:a6:bc:9a:0f:0d:e1:fd:86:bd:5c:6b:
dd:62:2d:7c:00:92:a8:78:26:57:f4:4f:f0:42:77:
2c:ae:5a:a2:fb:50:da:df:13:7a:65:3c:4d:b6:93:
0b:7d:92:cf:49:f8:4d:02:c0:9a:29:69:37:fc:8e:
48:72:3e:af:58:16:8f:26:11:d5:9d:a1:e0:2c:e9:
e1:e4:53:7e:4d:c4:e5:e8:af:05:79:df:4d:ab:29:
d0:b2:a5:04:54:cf:9f:bb:8b:44:a3:b8:2e:7f:89:
b4:64:d3:89:70:fc:df:56:18:45:40:ef:ff:67:a0:
29:6e:ad:66:e0:1f:47:7c:16:d8:76:5e:15:0b:ba:
aa:56:a0:8d:24:64:ac:52:74:58:33:f5:a2:f9:96:
79:85:83:3a:f9:82:fb:c2:13:21:5f:be:fc:3d:fb:
97:ce:65:e2:b0:7c:3a:6b:e9:0a:e9:96:6f:b2:fc:
e5:8e:f6:b5:a1:4f:7c:55:05:30:c7:ba:e6:30:8f:
db:c2:e3:e1:42:96:a1:41:df:10:8e:5e:70:e7:93:
bb:3d:b5:c3:80:66:71:4d:a4:13:b9:4f:05:52:75:
48:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B0:63:0B:80:70:DE:73:BE:20:B3:C4:29:35:C4:8A:06:5D:CB:EC
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/TbBjC4Bw3nO-ILPEKTXEigZdy-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.56.0/22
Signature Algorithm: sha256WithRSAEncryption
26:2d:3e:79:1c:6f:18:78:b1:99:13:1e:cb:08:7c:16:e4:9c:
20:01:ca:b7:43:06:24:28:bd:c2:f6:40:0a:d9:c8:bc:95:0b:
33:8f:bb:b2:e5:ea:59:32:b9:ce:fb:47:6e:1e:9b:80:6d:85:
10:cc:9e:d6:69:2b:da:15:b6:ce:72:eb:91:0d:44:ff:eb:45:
ff:12:db:25:eb:68:4e:02:31:6f:ba:85:3b:e4:40:0a:77:70:
00:f9:aa:0a:e4:fd:90:d6:17:21:82:83:fb:3d:51:5f:fb:59:
fc:42:1b:00:c1:e8:3c:b8:aa:6d:86:70:9f:1d:87:c1:03:f0:
00:62:b1:71:04:0d:7b:a0:29:10:9e:50:4d:f2:c6:d5:87:e3:
19:f4:f3:89:01:e1:89:18:a0:74:fc:ad:cf:b3:31:f1:ec:be:
18:33:4d:a5:b7:57:6d:9d:16:8f:ac:f4:41:06:ec:69:de:50:
9c:40:dc:3a:1d:48:77:c6:dc:be:6f:bc:84:b6:30:1e:dd:1b:
b9:a7:40:36:fa:76:9b:65:1b:fa:c8:23:81:6f:f4:75:e3:e3:
a8:6e:4d:e1:eb:57:ad:1a:ff:26:d2:ca:bb:8e:0b:b8:2a:4e:
35:6d:62:c2:25:79:3d:39:c4:4a:d5:ee:50:fb:36:92:f7:60:
a7:1d:cf:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 19:24:35 2025 by rpki-client