Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/VujtY7H_gm-rimsabFgd1S_Wzb4.roa
File: VujtY7H_gm-rimsabFgd1S_Wzb4.roa (raw, json)
Hash identifier: LJsG/sKpKfqvPPgnoMQJf8dj2kvx8RJGuxIDjxxsbGs=
Subject key identifier: 56:E8:ED:63:B1:FF:82:6F:AB:8A:6B:1A:6C:58:1D:D5:2F:D6:CD:BE
Certificate issuer: /CN=28c6800d74bc4105b40e77ea085ba026dbeec35f
Certificate serial: 01978DC4A31E504C5A6681031BF7CD6777EE
Authority key identifier: 28:C6:80:0D:74:BC:41:05:B4:0E:77:EA:08:5B:A0:26:DB:EE:C3:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMaADXS8QQW0DnfqCFugJtvuw18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/VujtY7H_gm-rimsabFgd1S_Wzb4.roa
Signing time: Fri 20 Jun 2025 14:36:03 +0000
ROA not before: Fri 20 Jun 2025 14:36:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401776
IP address blocks: 45.145.234.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.mft
rsync://rpki.ripe.net/repository/DEFAULT/KMaADXS8QQW0DnfqCFugJtvuw18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8d:c4:a3:1e:50:4c:5a:66:81:03:1b:f7:cd:67:77:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28c6800d74bc4105b40e77ea085ba026dbeec35f
Validity
Not Before: Jun 20 14:36:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56e8ed63b1ff826fab8a6b1a6c581dd52fd6cdbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:aa:af:69:01:f4:be:e8:fc:9b:40:10:04:97:
54:29:a1:d1:54:58:46:c4:49:f7:3e:fa:74:99:63:
69:b9:13:7f:7a:7b:e2:f7:77:bf:84:d0:b4:1c:a6:
01:66:ea:f5:b7:b3:2f:04:5e:17:eb:57:58:ec:3b:
15:45:48:a5:04:52:9d:12:49:24:90:a6:2f:a6:f3:
5c:50:d4:e6:ca:1b:86:e1:d5:f2:87:c5:5a:66:a1:
d5:28:58:bc:cc:e5:5c:2c:97:4d:a5:9c:e6:82:1f:
a9:11:81:ab:a5:65:c7:32:af:fc:b5:05:66:e3:95:
78:20:e8:1e:f0:d9:fc:2f:b7:37:1e:b6:39:7f:b0:
da:0e:03:21:d8:bb:03:c6:bd:15:4e:5c:01:0e:5d:
2e:62:52:be:1b:b0:9d:bf:e9:b5:90:e6:79:0e:53:
ab:24:01:d2:65:fd:d2:cd:a8:1d:93:77:76:fd:e2:
41:c4:83:5a:e9:31:e1:3a:a3:cf:d2:32:fc:5d:b8:
13:43:f0:1a:5a:2f:97:34:8d:9e:85:34:6e:e9:11:
7b:5b:de:14:a2:61:e5:04:d4:8f:70:46:0f:8f:9c:
47:eb:b5:4e:2e:95:b3:c7:9c:f6:01:e5:10:04:72:
e6:10:a9:ec:5b:3b:e7:0b:92:7d:04:15:91:32:46:
1d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E8:ED:63:B1:FF:82:6F:AB:8A:6B:1A:6C:58:1D:D5:2F:D6:CD:BE
X509v3 Authority Key Identifier:
keyid:28:C6:80:0D:74:BC:41:05:B4:0E:77:EA:08:5B:A0:26:DB:EE:C3:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMaADXS8QQW0DnfqCFugJtvuw18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/VujtY7H_gm-rimsabFgd1S_Wzb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.234.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:9a:c0:52:86:02:56:42:38:6f:3a:e0:65:55:0e:8e:23:71:
12:d7:21:34:0f:5d:38:1d:33:78:11:c0:3c:ee:0f:a7:96:51:
f9:1e:3b:dd:35:20:8e:46:90:46:15:29:20:15:19:02:3a:25:
bb:59:2a:ef:91:49:2c:a9:c9:c6:a8:72:d4:5a:e4:81:24:57:
f0:f0:2a:56:57:53:f3:6d:96:b7:f3:a4:64:f3:e8:26:eb:a8:
7b:c1:15:5a:ad:fd:cb:51:9a:af:81:59:cf:34:fd:ec:3f:b5:
8c:86:0a:23:7a:a4:e4:a0:32:5c:2b:65:9c:f6:bf:97:e2:4f:
92:3d:0f:47:ec:78:30:73:52:c1:21:36:53:c2:df:09:99:10:
2a:43:69:86:16:16:1c:64:ab:1f:b7:93:e7:72:5a:dc:19:6c:
f2:d2:34:4a:31:fd:9f:d7:db:87:00:8f:b0:c5:15:79:48:77:
e5:24:27:1c:42:67:1f:44:6e:01:90:a5:7e:9c:e9:d5:d3:75:
0a:9b:c9:4d:d5:bb:7e:6f:d9:f7:f9:08:17:4c:ff:69:71:9c:
59:96:29:f8:c1:90:ee:53:50:04:7c:c1:ac:fe:46:91:2c:78:
07:a0:ad:1e:11:de:07:4e:d3:36:31:30:60:52:c4:14:12:e8:
32:3d:0f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:21:57 2025 by rpki-client