Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/mXHR7ScCmT3dnn5vv0tk182fF3g.roa
File: mXHR7ScCmT3dnn5vv0tk182fF3g.roa (raw, json)
Hash identifier: OFlpJMZpuFapWbBFSXwWryllwCbd0zaJoZ2Mp3F6KTA=
Subject key identifier: 99:71:D1:ED:27:02:99:3D:DD:9E:7E:6F:BF:4B:64:D7:CD:9F:17:78
Certificate issuer: /CN=c1d369e66cdbe30d7b3aff6081f20c17a98fdc5b
Certificate serial: 01979C634E8A14F551E2789AA5F75D2C6742
Authority key identifier: C1:D3:69:E6:6C:DB:E3:0D:7B:3A:FF:60:81:F2:0C:17:A9:8F:DC:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/mXHR7ScCmT3dnn5vv0tk182fF3g.roa
Signing time: Mon 23 Jun 2025 10:44:03 +0000
ROA not before: Mon 23 Jun 2025 10:44:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210895
IP address blocks: 45.66.11.0/24 maxlen: 24
185.224.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9c:63:4e:8a:14:f5:51:e2:78:9a:a5:f7:5d:2c:67:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1d369e66cdbe30d7b3aff6081f20c17a98fdc5b
Validity
Not Before: Jun 23 10:44:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9971d1ed2702993ddd9e7e6fbf4b64d7cd9f1778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:18:2b:7d:57:53:68:2c:b7:66:91:bb:27:96:
dd:6a:12:59:00:32:69:b7:f7:0f:73:6d:5c:42:f2:
66:8b:99:a3:fb:5b:59:54:83:81:d4:81:26:ec:89:
27:6a:22:ec:62:13:86:b9:48:76:ce:c3:f6:12:00:
68:cb:6c:1f:c8:20:fe:57:0e:e6:d4:71:64:50:20:
d0:91:65:3b:7d:c0:60:0c:2c:db:fa:2f:57:50:44:
26:0d:67:0e:91:c5:1b:e3:ce:80:83:5a:fd:7e:35:
a8:1d:19:e9:d3:7c:9b:be:0c:77:c6:3f:04:8d:77:
1b:c8:1f:43:61:19:00:45:91:80:b2:dd:d5:7d:43:
41:71:c1:4c:d8:81:2e:d7:3a:1f:01:49:8f:21:d1:
30:76:ef:20:25:c7:e4:f5:6c:24:9c:b9:f1:4c:2d:
0b:d2:d3:dd:74:12:47:0e:2a:27:64:12:bb:bb:27:
9d:51:34:5a:7b:4e:f1:5e:4b:75:4b:08:e9:92:fe:
e4:81:05:ac:34:91:87:69:b4:63:b6:49:b0:e3:2f:
82:1e:7a:3c:7f:b8:86:3d:6a:15:47:23:a7:d5:a9:
3d:ec:6b:36:0a:ae:24:9a:22:ee:c2:50:74:02:de:
a1:2c:c5:5e:ef:69:b5:29:2c:90:0c:4e:94:a9:cf:
be:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:71:D1:ED:27:02:99:3D:DD:9E:7E:6F:BF:4B:64:D7:CD:9F:17:78
X509v3 Authority Key Identifier:
keyid:C1:D3:69:E6:6C:DB:E3:0D:7B:3A:FF:60:81:F2:0C:17:A9:8F:DC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/mXHR7ScCmT3dnn5vv0tk182fF3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.11.0/24
185.224.132.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:0a:b7:ae:50:1e:39:ef:9b:6f:0d:f6:7e:66:21:99:d2:aa:
a2:99:98:59:ca:b4:79:3d:c8:d3:c2:44:ab:5b:d8:a1:02:ec:
38:d9:2d:fe:2e:4e:3c:dd:cf:1f:db:61:c2:e7:a3:7a:14:ba:
cc:cc:10:b9:c4:d2:b1:a9:3d:9e:ff:96:58:10:27:b3:4e:32:
96:b9:aa:a9:e7:79:29:a7:be:a0:a3:77:74:75:2f:88:9a:ca:
3a:3e:7a:07:18:a2:c4:9f:7f:41:82:1e:ba:51:ee:6d:9f:7e:
bf:e4:07:1c:98:c9:49:fb:d7:d2:b9:09:97:b7:be:ce:78:75:
6d:e6:a8:14:41:ba:be:16:3b:33:b4:a6:fb:68:00:a5:e6:90:
1e:e5:9b:24:48:46:6c:d3:2f:0f:dc:55:4d:9c:a8:ce:f9:66:
c2:16:d0:92:73:c8:7d:af:4c:18:25:87:35:26:3b:ed:7d:ec:
5b:92:9e:44:3d:af:9b:cb:2b:80:eb:39:3a:b5:fe:f3:90:3f:
fd:11:9a:34:e5:e4:19:43:3e:c4:c4:67:3b:3a:0b:23:a4:56:
b7:02:70:ba:ee:11:cb:65:ab:b4:54:07:e6:eb:8c:c2:ab:58:
da:ca:81:0c:89:ff:3d:36:c9:aa:7b:da:7e:0e:93:88:9b:26:
c8:8d:93:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 05:13:44 2025 by rpki-client