Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/6KabiYJe0e9305D3iUHIu7Zsamo.roa
File: 6KabiYJe0e9305D3iUHIu7Zsamo.roa (raw, json)
Hash identifier: geSyDJcwY3E7P0CJY8Kf5IkkCEpNWhOfE3AfE/GLYe8=
Subject key identifier: E8:A6:9B:89:82:5E:D1:EF:77:D3:90:F7:89:41:C8:BB:B6:6C:6A:6A
Certificate issuer: /CN=ee28d94d484033f77e6f9381a02da3e242167dae
Certificate serial: 0197924288C282C4E452BA4F15E632EA3E0D
Authority key identifier: EE:28:D9:4D:48:40:33:F7:7E:6F:93:81:A0:2D:A3:E2:42:16:7D:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/6KabiYJe0e9305D3iUHIu7Zsamo.roa
Signing time: Sat 21 Jun 2025 11:32:03 +0000
ROA not before: Sat 21 Jun 2025 11:32:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208485
IP address blocks: 45.156.118.0/24 maxlen: 24
45.156.119.0/24 maxlen: 24
91.228.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:92:42:88:c2:82:c4:e4:52:ba:4f:15:e6:32:ea:3e:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee28d94d484033f77e6f9381a02da3e242167dae
Validity
Not Before: Jun 21 11:32:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8a69b89825ed1ef77d390f78941c8bbb66c6a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:45:5a:69:1d:47:63:71:59:26:9e:a1:1c:be:
33:fb:ba:49:ac:ca:c9:2b:5b:98:d2:02:95:7d:aa:
41:2d:2a:51:8a:ad:fd:0a:22:ca:b7:e3:a4:70:ae:
df:16:94:0a:40:39:cd:93:4a:47:2b:6e:40:63:81:
ef:42:82:ed:85:65:d8:44:6b:4e:e8:4d:d0:49:ff:
ed:6c:7e:d8:09:48:9a:f4:33:19:32:aa:32:1d:90:
1b:e1:cf:65:a8:97:a4:ff:d9:37:68:30:29:18:d3:
75:32:af:5e:ff:20:11:d9:d1:15:65:8a:06:b8:0a:
92:d5:52:0c:0c:ca:7c:1d:2f:10:51:be:6f:ea:f9:
58:3b:99:35:57:14:67:89:ba:dc:40:e0:3a:58:85:
3c:a5:f7:36:bd:06:7f:aa:59:3d:e6:ed:e9:37:54:
54:62:28:96:ec:4d:ef:22:85:b5:11:cd:06:4b:16:
67:69:f1:3e:0e:f7:9a:66:da:a9:df:2c:2f:64:95:
41:da:6d:6a:1c:d5:af:d1:d6:48:ea:99:fa:7e:1c:
bb:5b:17:01:09:b2:2c:fb:10:97:ea:c1:48:d0:df:
fc:6e:13:17:5e:4a:98:66:6e:ba:63:95:99:fd:00:
01:36:1c:71:32:83:cd:03:32:28:76:72:b9:de:a9:
6c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A6:9B:89:82:5E:D1:EF:77:D3:90:F7:89:41:C8:BB:B6:6C:6A:6A
X509v3 Authority Key Identifier:
keyid:EE:28:D9:4D:48:40:33:F7:7E:6F:93:81:A0:2D:A3:E2:42:16:7D:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/6KabiYJe0e9305D3iUHIu7Zsamo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.118.0/23
91.228.168.0/24
Signature Algorithm: sha256WithRSAEncryption
61:6c:f0:8a:64:fd:c5:7e:74:f4:a9:79:e8:c0:65:6d:b1:b5:
05:10:31:5c:13:ec:3b:8d:02:1a:e6:1f:0d:ce:a0:f3:1b:d1:
91:8d:59:a3:28:40:fe:40:37:bc:aa:08:01:eb:49:6b:03:1f:
a2:2f:18:53:69:02:b3:dd:74:89:98:5a:3c:17:1a:8f:01:fc:
02:c1:45:a4:5f:99:e5:93:34:f2:34:f6:a1:6a:a4:d7:25:b3:
24:84:f6:64:5e:b1:3f:7c:c8:c9:8c:b2:9e:b8:2c:ee:80:e0:
a1:25:06:f4:c2:0b:68:d7:fa:fc:82:ac:a3:b5:85:e4:86:39:
04:2b:fe:a0:af:60:15:50:53:0f:c1:24:f1:9e:c0:c9:3c:38:
52:dd:9e:26:9b:22:08:57:05:81:58:83:b5:ad:4c:0f:18:51:
74:e6:7b:5b:b9:64:80:8f:7e:71:60:49:89:a3:f6:26:1a:e7:
9a:64:f3:38:c0:d4:97:80:10:b5:3f:64:f9:33:f8:f1:17:cf:
c3:33:93:3a:92:1e:1b:62:53:30:20:81:3c:f5:8d:c4:05:12:
70:c8:92:2b:13:ff:26:d0:60:3d:24:48:95:05:61:88:f0:60:
ec:0d:99:53:16:a6:2c:d7:4f:b8:68:c7:7a:14:6c:10:09:16:
84:f4:d0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 21:19:00 2025 by rpki-client