Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/9VB1aXOxh3eNHmC250hMI5AYYc4.roa
File: 9VB1aXOxh3eNHmC250hMI5AYYc4.roa (raw, json)
Hash identifier: g7OAsEuuCakaPKvYwJw3TuKmx4U4hqcFPU7PCZgyfGA=
Subject key identifier: F5:50:75:69:73:B1:87:77:8D:1E:60:B6:E7:48:4C:23:90:18:61:CE
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 019791DCE9479525827EB5157D32D3DD8912
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/9VB1aXOxh3eNHmC250hMI5AYYc4.roa
Signing time: Sat 21 Jun 2025 09:41:03 +0000
ROA not before: Sat 21 Jun 2025 09:41:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51847
IP address blocks: 45.146.232.0/23 maxlen: 23
45.146.232.0/24 maxlen: 24
45.146.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:91:dc:e9:47:95:25:82:7e:b5:15:7d:32:d3:dd:89:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Jun 21 09:41:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f550756973b187778d1e60b6e7484c23901861ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7f:23:db:f9:a3:c1:2c:90:27:10:ae:ac:fd:
8b:0c:34:40:5d:18:d5:d3:92:64:d0:3a:21:e2:dd:
8d:97:7c:4f:b3:68:26:8d:7e:1f:f8:fe:04:18:26:
3f:84:c5:95:a4:a7:1c:93:b2:18:cc:d6:c7:f8:73:
13:ed:44:17:89:ff:51:db:67:7c:8a:88:3f:7f:08:
ab:dc:66:fa:59:8a:38:f8:ed:25:8d:1d:51:c8:37:
4a:17:1e:b1:0c:02:5e:b5:9f:67:65:28:4d:eb:93:
49:32:14:38:cf:93:1c:c0:11:97:a7:48:21:ed:02:
70:8e:97:46:af:2f:47:70:2e:d8:23:8d:63:d3:69:
55:da:51:d6:a1:3b:a2:42:04:88:8c:b4:80:01:ef:
2b:ef:33:06:e0:fd:42:30:43:22:3f:09:bb:29:0e:
d4:ca:87:85:a8:3d:aa:30:02:ab:e7:72:5b:d2:f7:
60:3d:3d:5f:e3:fa:6c:14:58:19:c9:42:bf:ba:01:
b6:c3:53:4d:67:77:1f:f8:92:dc:4c:d6:02:ea:a3:
27:b3:d9:ae:da:bf:a9:e2:39:ff:06:fe:92:18:95:
75:b2:9f:0a:1e:51:e6:d4:dc:dc:5d:e6:2d:62:1d:
22:9e:a3:19:e9:65:95:8f:d0:98:18:9a:db:2b:10:
07:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:50:75:69:73:B1:87:77:8D:1E:60:B6:E7:48:4C:23:90:18:61:CE
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/9VB1aXOxh3eNHmC250hMI5AYYc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.232.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:75:51:ee:98:1c:19:31:11:81:62:7b:65:1e:dd:42:31:d0:
75:f8:08:9b:72:62:fe:43:39:1b:e7:27:b4:ce:25:b4:97:ea:
6f:2b:66:52:9d:5d:5b:09:f7:53:2f:9d:be:a1:3a:08:f8:79:
c1:2f:25:1e:db:e3:5b:41:2a:83:d9:89:b3:16:5e:18:5a:e1:
85:72:66:9f:63:66:ce:0a:65:80:9c:be:ed:98:32:6a:a0:a4:
97:50:1c:0e:d6:70:1c:6c:bb:2b:e0:b4:61:d2:23:ab:38:de:
61:2a:c6:0b:f1:e2:30:71:8e:bc:e5:1a:0e:df:0c:23:d2:e6:
6b:47:3b:4f:4f:3c:eb:f0:28:39:31:10:f2:08:96:58:49:c6:
78:de:3f:ba:7b:b7:c1:d6:4d:83:13:7d:7b:5c:78:ac:30:e8:
43:b3:d9:6f:78:b5:7f:46:00:3d:e5:74:db:b5:70:d2:24:21:
29:dc:f7:b6:99:d3:ed:61:5d:c4:76:05:b5:34:a9:6b:16:48:
f0:d1:f2:98:bc:f2:20:e2:26:d8:9b:8f:75:86:e6:05:d7:10:
8e:bd:ab:43:b8:c0:7e:e2:3a:23:b1:4d:52:92:5d:d5:07:4f:
a1:b5:65:2f:73:9f:5a:d6:8d:ce:be:63:9c:94:67:72:0f:37:
86:e3:0c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:59:40 2025 by rpki-client