Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/ogLtMCwJpoKzIIHO5Hqw6iLRniQ.roa
File: ogLtMCwJpoKzIIHO5Hqw6iLRniQ.roa (raw, json)
Hash identifier: 0bN6k2//+dVOuBvER/ACu5N5zUNv8cz3y6BRY72oNo8=
Subject key identifier: A2:02:ED:30:2C:09:A6:82:B3:20:81:CE:E4:7A:B0:EA:22:D1:9E:24
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0197AFC525F32F0CA954851D0B5D06E3AAC3
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/ogLtMCwJpoKzIIHO5Hqw6iLRniQ.roa
Signing time: Fri 27 Jun 2025 05:03:42 +0000
ROA not before: Fri 27 Jun 2025 05:03:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 270175
IP address blocks: 45.80.83.0/24 maxlen: 24
185.216.128.0/23 maxlen: 23
201.77.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:af:c5:25:f3:2f:0c:a9:54:85:1d:0b:5d:06:e3:aa:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jun 27 05:03:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a202ed302c09a682b32081cee47ab0ea22d19e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:54:f6:0b:9f:85:90:f5:f0:78:6d:de:62:8c:
0b:5f:e4:e5:05:d2:df:db:42:c9:27:bb:a8:02:bb:
85:7c:74:97:16:52:de:e5:eb:28:30:fe:69:ca:cb:
b9:1c:da:e9:c1:ec:fa:41:1a:45:fc:c3:92:14:d9:
be:01:d8:34:cb:83:6a:e3:6c:3a:d1:b0:77:ba:a7:
67:00:a6:da:d6:64:36:23:1f:a3:fe:6d:70:2a:50:
33:27:31:8e:3e:bb:22:fe:e3:5d:0a:49:e6:9e:2f:
56:64:55:f1:f8:39:5a:a9:9a:5a:b6:a7:45:c0:70:
be:32:2b:b9:0c:64:3b:95:76:7c:fd:65:1f:cd:92:
a0:f9:3d:b1:9b:c6:5e:df:b4:1b:66:d8:44:db:76:
78:59:3c:34:92:a4:6d:f1:88:5a:99:b5:ae:e0:47:
7e:23:3d:2e:70:bb:96:73:9e:47:95:9c:ad:b0:5a:
83:1d:79:13:d2:02:63:28:d2:30:99:61:a5:1c:8c:
11:95:50:41:d3:38:c0:4a:b3:4c:24:74:a3:4b:cc:
49:5e:6c:54:60:6b:32:e5:95:1d:b9:e8:98:63:d9:
f8:fd:fe:65:14:25:42:74:4a:6e:9c:cd:7e:b4:3a:
1d:20:6e:56:dc:85:8d:86:ac:8f:2b:77:c0:95:f0:
0e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:02:ED:30:2C:09:A6:82:B3:20:81:CE:E4:7A:B0:EA:22:D1:9E:24
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/ogLtMCwJpoKzIIHO5Hqw6iLRniQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.83.0/24
185.216.128.0/23
201.77.56.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:04:ca:1c:db:d3:2d:41:7e:5e:97:38:0b:9c:ab:35:8c:c0:
c6:fd:cd:34:54:ed:ef:3e:38:04:6a:0d:e4:4f:22:c2:53:c2:
4a:05:41:56:51:5e:c2:92:66:42:f1:8b:41:d2:ee:9f:3e:ed:
ef:85:ed:e4:56:dc:95:42:01:e0:2f:e8:29:09:ac:82:d7:8f:
7f:1d:3d:1b:12:60:0f:f2:0d:f9:94:a4:66:47:62:26:43:3b:
e2:f4:82:63:10:ab:27:00:97:5a:40:c3:2f:1e:af:1f:f3:84:
da:9b:ec:9e:43:6f:74:35:4e:0b:03:56:a9:95:f7:44:e1:9f:
74:86:19:c9:83:28:74:8c:46:45:7d:8c:75:c3:5a:ff:3c:9b:
73:2b:8c:86:59:3a:b8:b1:3c:4a:36:c4:5e:26:df:af:fc:c4:
bb:58:fe:09:62:eb:84:21:0f:c1:de:8c:4b:c7:bf:5c:6a:f7:
a9:41:f7:57:1c:92:2c:bb:8f:32:ef:1b:6b:72:27:19:6b:3a:
4a:20:e4:04:8a:5a:ee:e3:c8:26:6a:50:ac:bf:04:d3:1b:36:
b6:ea:fd:76:a2:7a:e4:60:cc:78:63:f8:53:2e:ce:22:dd:ed:
c6:23:9d:0b:2d:5b:0c:dc:79:b8:0a:fd:b9:90:16:43:06:d8:
10:66:4d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 21:20:40 2025 by rpki-client