Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/2DYYZr5-BDpFRdIGrLqIqOTJUZ8.roa
File: 2DYYZr5-BDpFRdIGrLqIqOTJUZ8.roa (raw, json)
Hash identifier: HaZyJ3c6+hfM8W+BKUdnY7LGov4U1+gMMUVbUDft1gE=
Subject key identifier: D8:36:18:66:BE:7E:04:3A:45:45:D2:06:AC:BA:88:A8:E4:C9:51:9F
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 0197881A71147B3A2AB26E72251B999647A4
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/2DYYZr5-BDpFRdIGrLqIqOTJUZ8.roa
Signing time: Thu 19 Jun 2025 12:12:03 +0000
ROA not before: Thu 19 Jun 2025 12:12:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213541
IP address blocks: 45.43.166.0/24 maxlen: 24
104.239.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:1a:71:14:7b:3a:2a:b2:6e:72:25:1b:99:96:47:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jun 19 12:12:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d8361866be7e043a4545d206acba88a8e4c9519f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9c:20:a3:29:ab:3b:c4:d7:15:d4:d1:63:c4:
fc:e5:b6:06:81:b0:5d:39:ce:73:ab:aa:c2:b0:b2:
03:a6:8d:61:ad:d0:03:0b:d0:c3:f7:81:47:07:24:
cf:7f:c8:58:d3:2a:2d:c0:70:4d:0a:13:de:22:60:
95:fa:da:90:59:bf:fc:7e:bb:16:fb:f3:ab:ee:06:
cc:6d:17:f3:43:a6:06:d6:e1:38:e7:d0:fc:da:03:
2d:27:e6:4c:08:f4:4a:24:53:ef:3c:bb:b0:7f:b5:
b2:f0:1d:e1:2a:2a:e4:f7:35:b8:2d:96:65:a2:67:
e6:6f:98:53:0b:ae:5f:db:b2:96:da:4a:a3:bc:b5:
c6:0c:64:4d:46:e9:9e:9c:9e:71:9d:13:97:bf:71:
67:9c:77:53:4d:59:80:57:8d:fa:6c:fe:d3:86:b0:
72:55:ed:b6:50:39:f6:e2:c8:40:c7:8e:77:43:a7:
86:2f:8c:9d:f8:29:dc:ce:a2:61:94:59:19:71:c0:
b7:0b:5d:a3:ab:29:5b:e7:cd:4e:4f:c2:f6:3a:c4:
9c:c7:57:8c:38:b2:3d:07:7d:b2:e4:52:cc:42:2b:
83:da:ee:e8:cd:0e:80:7f:ab:5e:09:71:70:00:a3:
d1:68:8f:f9:2f:ee:34:8e:88:c9:c4:e7:de:2a:dd:
ca:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:36:18:66:BE:7E:04:3A:45:45:D2:06:AC:BA:88:A8:E4:C9:51:9F
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/2DYYZr5-BDpFRdIGrLqIqOTJUZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.166.0/24
104.239.15.0/24
Signature Algorithm: sha256WithRSAEncryption
20:e0:a9:17:25:7c:1c:98:bf:5f:9a:5d:88:84:a5:af:24:83:
71:30:d0:fb:82:7e:61:c2:3a:da:f8:1e:e7:95:35:0a:d6:41:
af:f6:09:b3:13:66:c6:66:c1:19:91:cd:a6:58:d5:cc:0b:f8:
85:33:8b:fd:a3:c1:3c:c9:ea:3e:ac:a6:71:78:82:b7:cd:92:
2d:9b:8c:a3:fd:b6:54:b3:50:39:4e:02:9a:c4:6f:3e:18:b9:
4b:cc:f0:8e:d9:b6:d3:95:c0:4e:15:15:ea:73:ea:49:66:fc:
08:75:4b:53:b4:48:1b:a9:48:54:b8:0b:bb:91:37:e4:60:59:
b4:f4:9e:83:7e:9b:6f:a9:c3:53:b5:00:cc:1f:cc:42:d7:62:
08:2b:27:1c:5d:be:cb:db:00:f2:67:13:70:ae:47:1f:be:50:
8e:d9:b6:97:bb:e9:94:64:80:93:f8:96:60:92:45:2d:7e:75:
05:74:36:34:bc:58:9c:71:cf:c6:cf:cf:a8:5a:0e:0b:84:9c:
30:60:96:7d:61:8c:f2:51:8f:ce:86:cc:b2:4f:63:d6:b3:d2:
67:f0:1a:2b:65:b5:92:49:f7:08:89:4a:92:d3:42:31:e4:75:
c4:4d:01:79:f8:9f:63:60:20:ea:ae:8d:31:26:fb:38:bd:5e:
f9:95:d9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:34:37 2025 by rpki-client