Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/i37S93TaktE02JjUP5APRm1uGhA.roa
File: i37S93TaktE02JjUP5APRm1uGhA.roa (raw, json)
Hash identifier: 3ieD+Yqt9bbdsi6c5MtKtLCaudx9BsLyU5xdqIHq/ug=
Subject key identifier: 8B:7E:D2:F7:74:DA:92:D1:34:D8:98:D4:3F:90:0F:46:6D:6E:1A:10
Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial: 0197C42893D8EEA85DE81AF8C65DEA3F1A0F
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/i37S93TaktE02JjUP5APRm1uGhA.roa
Signing time: Tue 01 Jul 2025 04:04:42 +0000
ROA not before: Tue 01 Jul 2025 04:04:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215287
IP address blocks: 45.65.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft
rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 04:04:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:28:93:d8:ee:a8:5d:e8:1a:f8:c6:5d:ea:3f:1a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Validity
Not Before: Jul 1 04:04:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b7ed2f774da92d134d898d43f900f466d6e1a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:68:45:7f:a2:da:9f:66:c1:52:0a:5b:4d:af:
f8:e8:2a:a7:96:e0:09:5c:82:76:54:f9:6f:f7:98:
56:8c:4f:95:7d:0c:93:e7:85:b1:5e:6a:a5:86:e8:
0f:a9:36:b8:47:57:13:69:f6:bd:8a:8e:37:c6:80:
14:4c:d4:92:61:72:1a:31:42:38:16:34:7d:03:fc:
fb:3c:09:01:0b:c1:c8:c6:9f:ef:b5:85:46:64:8d:
ac:65:e6:98:c7:78:dc:2c:9d:b7:72:33:16:34:fc:
26:65:85:9b:ed:a5:94:6f:7d:45:35:6e:02:a0:90:
1d:8a:c3:71:fc:31:75:28:1b:77:0c:d2:40:83:df:
d6:96:e0:48:5c:f1:22:5c:71:88:99:bd:52:13:4c:
c2:46:1c:75:5a:45:ff:6c:c6:76:05:53:62:29:29:
fa:31:de:51:9f:db:6e:f6:eb:98:5d:ac:c6:03:ac:
67:09:f0:25:df:0f:28:a3:57:45:6e:1f:3e:4c:e2:
d4:f8:8c:27:36:ca:8e:a1:d9:5b:dd:97:9c:b3:6e:
79:91:70:61:48:16:0c:5e:45:01:5c:47:f6:da:d1:
24:ad:46:5c:33:53:d2:fe:35:1c:7f:b6:42:21:38:
4b:e1:9f:8d:fa:a3:b8:a2:c5:84:8c:27:60:85:3a:
f3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:7E:D2:F7:74:DA:92:D1:34:D8:98:D4:3F:90:0F:46:6D:6E:1A:10
X509v3 Authority Key Identifier:
keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/i37S93TaktE02JjUP5APRm1uGhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.113.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:7a:e0:27:5a:ae:7a:14:2c:5b:ac:fc:23:d5:d1:9a:de:d2:
06:f0:a5:88:d6:32:a1:e0:88:da:d9:58:f1:24:43:6d:7b:cb:
f4:da:30:4f:e7:ad:db:08:50:aa:0c:3b:15:2d:46:25:88:8d:
f8:ab:fb:c0:6f:d1:fe:73:1a:dd:fe:9f:7e:98:6f:bf:fb:89:
67:2d:15:d2:1e:5e:c5:b9:71:91:fd:0b:bb:c3:87:59:62:20:
4d:b8:d3:c3:a3:81:72:76:e1:17:d1:52:81:f8:d5:e0:ec:d1:
2d:80:b5:84:50:dc:0c:67:1d:d4:8b:79:32:e0:9e:d1:c7:d5:
5f:22:e6:38:de:ef:a6:31:e1:02:f2:a2:ca:57:df:d4:c6:24:
5d:e4:39:77:10:dd:7d:3c:0c:56:32:ee:19:bd:72:eb:c0:78:
86:bc:36:00:d0:96:d5:03:a8:9f:ba:ff:38:52:39:b3:30:9b:
c9:4b:0c:5e:d2:08:21:00:fa:f5:ab:cb:8a:6d:7b:90:fe:73:
af:13:76:92:3a:7b:64:6d:a7:5a:20:e5:f2:67:83:50:29:c7:
3b:18:64:4c:5d:43:6c:43:15:09:6b:75:15:7c:14:4c:0d:c5:
a4:ee:19:e1:58:43:05:cc:79:dd:52:ac:b0:7d:f3:90:d3:91:
2c:6e:83:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 11:44:20 2025 by rpki-client