Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/F1vVjwqvkH9ygu2v4ODcolpET5A.roa
File: F1vVjwqvkH9ygu2v4ODcolpET5A.roa (raw, json)
Hash identifier: EIsQkZZnnLn7p0guSRHFNlvPxEqKaH546HpcdUDztcM=
Subject key identifier: 17:5B:D5:8F:0A:AF:90:7F:72:82:ED:AF:E0:E0:DC:A2:5A:44:4F:90
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 01967B8EAE4101FEDCE6598EFA9C0BE10D3B
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/F1vVjwqvkH9ygu2v4ODcolpET5A.roa
Signing time: Mon 28 Apr 2025 08:41:10 +0000
ROA not before: Mon 28 Apr 2025 08:41:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210673
IP address blocks: 45.157.116.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:8e:ae:41:01:fe:dc:e6:59:8e:fa:9c:0b:e1:0d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Apr 28 08:41:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=175bd58f0aaf907f7282edafe0e0dca25a444f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ba:c2:1a:55:a3:1d:e0:64:ae:55:e9:28:d6:
a6:95:3b:b7:90:9a:da:c3:a0:1f:ea:ee:cd:68:67:
d3:db:9d:42:f3:48:ed:58:16:a5:d7:a7:a9:0d:b2:
ed:f8:57:e7:bd:58:91:35:f7:9f:ce:5e:7c:2a:7e:
26:67:ff:9c:e8:ce:d5:b0:39:4c:97:cf:5a:da:36:
20:c4:21:c8:3d:d4:48:69:61:fb:74:c4:7c:dd:53:
bc:d4:c7:ea:1c:d4:58:95:e9:36:4b:5b:a1:07:78:
d2:39:77:41:54:b0:54:cd:df:50:1e:03:0f:6f:92:
df:27:9f:10:09:6b:5c:13:13:27:36:b2:0a:92:e2:
fb:5f:0e:5b:1b:d4:bb:fe:17:65:09:6b:3d:ab:95:
8d:3f:b8:10:82:ec:aa:31:d4:24:cf:23:7c:ee:dd:
8a:4e:66:bd:36:8f:99:60:a3:57:97:37:5d:bc:35:
eb:92:cd:99:63:81:4e:63:33:dc:34:02:0c:52:23:
bd:64:45:45:4c:3c:67:a6:27:36:26:43:ee:c2:ee:
4e:d7:e4:47:e6:b8:b5:b8:78:18:54:21:c8:6b:4a:
fb:2e:e4:f2:2e:ec:8a:8b:38:34:7f:fd:5e:ed:c0:
21:67:7a:eb:64:99:a3:1e:5f:22:6b:68:d7:27:0c:
2f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:5B:D5:8F:0A:AF:90:7F:72:82:ED:AF:E0:E0:DC:A2:5A:44:4F:90
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/F1vVjwqvkH9ygu2v4ODcolpET5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.116.0/23
Signature Algorithm: sha256WithRSAEncryption
36:d2:64:08:54:c7:92:72:27:81:05:5f:3a:f4:89:c9:8a:39:
f1:17:6f:70:66:73:ba:0e:ef:bf:21:0d:58:e5:84:fb:c3:d5:
52:a7:82:c1:7f:68:4f:4b:54:03:3d:d5:b1:ac:84:65:10:26:
81:30:f8:fd:61:bd:1f:ae:37:9e:22:e9:1b:a6:c7:7e:24:a9:
68:09:10:84:91:cc:d8:99:55:5e:18:b7:27:6d:2d:d5:5a:fd:
9a:24:bb:4c:c9:cf:8f:b1:9c:50:0d:cb:5f:2d:7a:2c:10:af:
a5:40:c2:0b:6a:af:e0:82:bc:29:8d:61:49:27:4e:cd:5b:17:
08:f3:cd:b7:bd:d7:05:a5:62:be:fb:a3:24:ad:1b:79:ca:0d:
57:4b:d8:bf:5c:68:d8:9c:6d:26:a3:04:71:e2:e8:01:01:1f:
ab:98:56:01:b5:67:65:3d:65:e7:df:58:7b:0f:d0:c3:4d:51:
b0:80:e7:bf:09:15:5c:e9:0d:1c:66:26:e6:d1:12:ee:78:1f:
6f:ee:6a:0a:c6:4a:23:49:4d:e2:7c:26:76:9d:54:6a:53:89:
9f:b0:f1:bc:40:cb:c7:c8:bb:68:e6:d7:38:a0:01:12:ea:5e:
3f:0a:37:25:df:a6:8d:9e:75:a4:ee:6b:df:e3:0e:38:2d:f0:
57:ff:d4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 07:38:35 2025 by rpki-client