Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/O4RlPCfgl-wI2yPMHVLS-MLqMa0.roa
File: O4RlPCfgl-wI2yPMHVLS-MLqMa0.roa (raw, json)
Hash identifier: ngljM71URX1Q8hRId0/GjY6piSTkb/VTzttfIxq9FJc=
Subject key identifier: 3B:84:65:3C:27:E0:97:EC:08:DB:23:CC:1D:52:D2:F8:C2:EA:31:AD
Certificate issuer: /CN=ee28d94d484033f77e6f9381a02da3e242167dae
Certificate serial: 019792428928886C8FE17AA4BE2EBD5ECA8F
Authority key identifier: EE:28:D9:4D:48:40:33:F7:7E:6F:93:81:A0:2D:A3:E2:42:16:7D:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/O4RlPCfgl-wI2yPMHVLS-MLqMa0.roa
Signing time: Sat 21 Jun 2025 11:32:03 +0000
ROA not before: Sat 21 Jun 2025 11:32:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215419
IP address blocks: 45.156.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:92:42:89:28:88:6c:8f:e1:7a:a4:be:2e:bd:5e:ca:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee28d94d484033f77e6f9381a02da3e242167dae
Validity
Not Before: Jun 21 11:32:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b84653c27e097ec08db23cc1d52d2f8c2ea31ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fe:da:58:92:b6:89:f6:87:ac:64:c1:37:92:
f7:81:dd:7f:2e:44:c9:c3:c9:a9:75:0a:3a:45:df:
84:9a:e4:61:8c:0c:14:17:9b:4b:0b:41:39:8b:b3:
2b:8c:1e:26:ff:34:68:09:a8:38:17:c1:0a:b2:6e:
30:64:49:3e:f4:9f:51:d3:cf:da:eb:e3:88:f6:ad:
a1:27:39:c3:b2:5d:58:23:55:4a:e7:b1:e6:33:3d:
c7:42:6a:19:65:b2:c1:c9:ee:84:74:2c:4f:60:32:
7e:22:05:fd:c4:22:37:48:2f:40:42:4c:2f:38:ec:
7e:d2:5e:fc:36:5c:66:86:98:c2:5c:fd:e2:00:29:
d4:3e:1b:10:2c:73:9a:31:86:c1:91:60:33:e9:0f:
33:0c:f3:8a:04:3c:25:88:5b:43:ba:e1:f8:24:11:
11:7e:2a:84:ec:1e:81:3e:be:6a:ae:9d:a5:bf:1c:
15:ec:bf:76:5f:93:41:1b:e4:a6:ec:b3:87:e7:75:
21:f8:aa:d7:88:f7:34:b0:bc:fd:e5:4e:32:11:c1:
ba:f3:bd:28:c6:9f:57:f3:a7:87:a6:1b:fa:4f:4a:
dd:f3:c6:ee:c0:5e:6c:bb:14:81:05:64:8e:90:ec:
b2:a0:a1:70:99:f0:14:68:b7:dc:6e:9e:3d:df:ff:
da:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:84:65:3C:27:E0:97:EC:08:DB:23:CC:1D:52:D2:F8:C2:EA:31:AD
X509v3 Authority Key Identifier:
keyid:EE:28:D9:4D:48:40:33:F7:7E:6F:93:81:A0:2D:A3:E2:42:16:7D:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/O4RlPCfgl-wI2yPMHVLS-MLqMa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.116.0/24
Signature Algorithm: sha256WithRSAEncryption
00:14:75:a2:c3:b9:c6:a3:bf:1b:db:9a:27:98:bf:9d:68:0e:
1c:d1:3f:9c:be:e8:d5:6b:6f:b7:55:c5:97:74:d5:25:1c:4c:
cd:d2:42:4a:37:17:83:2c:94:59:59:6e:34:f2:34:00:08:0e:
ec:b4:39:79:e0:43:95:1a:36:cc:a4:df:4b:d1:91:39:e1:0b:
78:8f:87:cf:c9:95:8c:1d:5f:b1:22:cb:5b:e0:b8:dc:0a:fe:
97:e9:20:6a:4e:d4:e3:e1:b6:30:29:3d:68:61:3b:34:7e:17:
e7:bb:ad:75:f0:06:11:2f:fb:ee:dc:c2:16:87:8d:85:3a:5a:
84:ca:76:f9:35:d7:a8:87:41:fc:a5:4a:21:f1:c1:b9:03:74:
0b:ed:a1:c1:5b:a5:a4:0b:29:8c:a1:a0:15:09:07:f5:6b:e3:
7b:49:8c:51:28:c1:47:26:03:9e:45:dc:28:8d:60:6e:8d:01:
07:9d:25:cf:64:30:f9:76:72:c5:42:9c:3a:c6:c4:87:20:ec:
ba:db:e6:e7:0a:be:9d:28:f2:8d:b6:d7:9e:2b:ff:5b:16:6c:
2f:db:c9:5a:dc:a1:26:b4:17:85:df:6a:da:e0:97:da:f4:8c:
52:ae:1c:9c:c4:ca:46:49:57:82:02:87:3e:14:df:43:bb:89:
7e:36:5d:20
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZeSQokoiGyP4Xqkvi69XsqPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMjhkOTRkNDg0MDMzZjc3ZTZmOTM4MWEwMmRhM2UyNDIx
NjdkYWUwHhcNMjUwNjIxMTEzMjAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjg0NjUzYzI3ZTA5N2VjMDhkYjIzY2MxZDUyZDJmOGMyZWEzMWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0P7aWJK2ifaHrGTBN5L3gd1/LkTJ
w8mpdQo6Rd+EmuRhjAwUF5tLC0E5i7MrjB4m/zRoCag4F8EKsm4wZEk+9J9R08/a
6+OI9q2hJznDsl1YI1VK57HmMz3HQmoZZbLBye6EdCxPYDJ+IgX9xCI3SC9AQkwv
OOx+0l78NlxmhpjCXP3iACnUPhsQLHOaMYbBkWAz6Q8zDPOKBDwliFtDuuH4JBER
fiqE7B6BPr5qrp2lvxwV7L92X5NBG+Sm7LOH53Uh+KrXiPc0sLz95U4yEcG6870o
xp9X86eHphv6T0rd88buwF5suxSBBWSOkOyyoKFwmfAUaLfcbp493//aiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDuEZTwn4JfsCNsjzB1S0vjC6jGtMB8GA1UdIwQY
MBaAFO4o2U1IQDP3fm+TgaAto+JCFn2uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2lqWlRVaEFNX2QtYjVPQm9DMmo0a0lXZmE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9lYWRiZjgtOGU0NC00MjcxLWE3MmIt
MGM3NTZmZDI0OGM4LzEvTzRSbFBDZmdsLXdJMnlQTUhWTFMtTUxxTWEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9lYWRiZjgtOGU0NC00MjcxLWE3MmItMGM3NTZmZDI0OGM4
LzEvN2lqWlRVaEFNX2QtYjVPQm9DMmo0a0lXZmE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZx0MA0G
CSqGSIb3DQEBCwUAA4IBAQAAFHWiw7nGo78b25onmL+daA4c0T+cvujVa2+3VcWX
dNUlHEzN0kJKNxeDLJRZWW408jQACA7stDl54EOVGjbMpN9L0ZE54Qt4j4fPyZWM
HV+xIstb4LjcCv6X6SBqTtTj4bYwKT1oYTs0fhfnu6118AYRL/vu3MIWh42FOlqE
ynb5Ndeoh0H8pUoh8cG5A3QL7aHBW6WkCymMoaAVCQf1a+N7SYxRKMFHJgOeRdwo
jWBujQEHnSXPZDD5dnLFQpw6xsSHIOy62+bnCr6dKPKNtteeK/9bFmwv28la3KEm
tBeF32ra4Jfa9IxSrhycxMpGSVeCAoc+FN9Du4l+Nl0g
-----END CERTIFICATE-----
Generated at Sun Jun 29 00:29:14 2025 by rpki-client