Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/Q2MesakL4wOUDdiOpBozWd6gdnM.roa
File: Q2MesakL4wOUDdiOpBozWd6gdnM.roa (raw, json)
Hash identifier: tXWkD4N02YWbZORs7ww39paS9Kn8PNja9zWTQGbiVK0=
Subject key identifier: 43:63:1E:B1:A9:0B:E3:03:94:0D:D8:8E:A4:1A:33:59:DE:A0:76:73
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 0197881A71A353658C1F3BD11541B1A235AE
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/Q2MesakL4wOUDdiOpBozWd6gdnM.roa
Signing time: Thu 19 Jun 2025 12:12:03 +0000
ROA not before: Thu 19 Jun 2025 12:12:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215391
IP address blocks: 45.43.143.0/24 maxlen: 24
104.238.21.0/24 maxlen: 24
104.238.23.0/24 maxlen: 24
216.173.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:1a:71:a3:53:65:8c:1f:3b:d1:15:41:b1:a2:35:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jun 19 12:12:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43631eb1a90be303940dd88ea41a3359dea07673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:5b:41:e2:17:2d:0c:1e:57:de:d3:cc:d2:30:
ef:75:aa:aa:0c:63:e4:bd:a3:20:a3:87:0e:1c:07:
19:0d:b4:9a:79:f3:00:37:5e:5d:7e:40:49:88:48:
21:cb:20:7d:39:f8:d2:e8:77:1a:f9:fc:b3:f1:a5:
f6:5e:16:76:0b:cd:94:09:de:93:92:2f:e9:b4:b3:
f1:5f:eb:31:41:b5:a7:25:9e:a6:67:e3:c5:22:45:
b8:da:4f:37:04:b2:f1:4f:f1:fe:f5:d2:f2:fc:74:
ed:39:81:9a:c2:aa:42:93:a1:18:77:d8:14:52:cb:
54:e2:a4:97:b4:97:fb:e7:59:dc:88:d9:ea:4e:54:
87:b7:a0:fe:97:4c:5d:64:ae:ef:ef:c6:f5:69:0c:
1b:6c:35:1c:f8:07:46:90:35:a8:31:30:72:e4:f7:
17:ac:7b:1a:30:70:46:38:42:ae:4a:b0:ed:42:56:
05:fb:9f:33:7a:b2:db:b3:77:3b:14:17:4a:b9:b1:
11:df:bb:28:ba:ff:74:bc:1e:cf:a9:9e:31:ee:19:
c1:d5:93:17:80:55:8f:17:1b:76:22:b2:65:9a:08:
f1:a2:3c:c4:f5:c9:a4:48:d2:47:83:10:f3:ca:52:
13:5f:e4:48:a3:44:59:34:4d:d3:95:01:19:ab:53:
df:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:63:1E:B1:A9:0B:E3:03:94:0D:D8:8E:A4:1A:33:59:DE:A0:76:73
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/Q2MesakL4wOUDdiOpBozWd6gdnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.143.0/24
104.238.21.0/24
104.238.23.0/24
216.173.108.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:04:a5:2a:c4:bd:da:c9:c0:34:9c:c8:cb:1b:f1:48:f8:f4:
a8:61:a7:2f:02:1d:d8:47:bf:75:9d:a3:02:ce:a8:b9:be:f9:
5b:1d:8f:e9:0e:14:8c:a3:85:76:b8:ef:e1:73:30:36:08:50:
cb:51:6e:0d:87:4f:87:63:9b:b5:cd:c8:c0:cf:c2:03:03:e9:
39:54:69:99:7c:80:9c:7d:c7:9c:32:53:50:12:81:84:ae:7f:
3b:78:4a:fc:a0:97:a7:04:de:a5:1e:20:f0:54:cd:cd:61:38:
fe:53:82:c7:9c:8b:5d:93:a4:49:af:9a:e4:b8:6f:d9:ab:42:
af:b1:a7:e3:68:62:94:4a:0e:8c:59:5c:d7:d1:01:23:fe:9f:
37:6c:83:2d:ca:73:13:5e:2a:3b:49:5b:56:8d:85:fe:c0:37:
83:ab:0d:58:a4:d7:20:3d:11:43:c8:09:18:04:32:b1:90:22:
3a:69:64:06:51:72:8c:0d:31:ea:e6:bc:0b:b9:36:fd:d1:ec:
3d:34:84:5c:4f:de:b0:e7:26:aa:ff:d6:60:e6:a8:3f:03:8d:
d4:24:ca:7e:7c:7e:67:9b:7a:46:fa:b8:0f:0e:7f:b6:13:83:
28:3c:33:77:0f:26:30:ac:9d:90:dc:5e:85:86:9c:e9:ed:37:
03:58:c2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 22:34:19 2025 by rpki-client