Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/O0m6rpxbshw5KyfbV3Df-u5gpAw.roa
File: O0m6rpxbshw5KyfbV3Df-u5gpAw.roa (raw, json)
Hash identifier: K3VIPCSpjhR1Ioq4yukkhoTaNVjKptpkSTwyxyPzC1Y=
Subject key identifier: 3B:49:BA:AE:9C:5B:B2:1C:39:2B:27:DB:57:70:DF:FA:EE:60:A4:0C
Certificate issuer: /CN=1662cfd26eccf289757399cc99c17d1cb4357535
Certificate serial: 01969B7619B6F145663189B73B11C4785338
Authority key identifier: 16:62:CF:D2:6E:CC:F2:89:75:73:99:CC:99:C1:7D:1C:B4:35:75:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/O0m6rpxbshw5KyfbV3Df-u5gpAw.roa
Signing time: Sun 04 May 2025 13:22:10 +0000
ROA not before: Sun 04 May 2025 13:22:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30766
IP address blocks: 45.148.218.0/23 maxlen: 23
178.132.68.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 19:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9b:76:19:b6:f1:45:66:31:89:b7:3b:11:c4:78:53:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1662cfd26eccf289757399cc99c17d1cb4357535
Validity
Not Before: May 4 13:22:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b49baae9c5bb21c392b27db5770dffaee60a40c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2a:22:93:52:2c:9e:c8:4a:6f:9e:0e:f2:af:
98:18:4c:e3:62:28:85:c8:73:70:5d:51:2b:f4:df:
88:5a:fe:12:39:2b:66:20:8a:e2:1c:bb:69:c4:67:
07:22:06:f9:40:a8:9c:37:58:5b:48:92:4b:be:3a:
3f:6c:fb:26:39:96:63:4e:74:e3:2b:95:e7:5d:f7:
5f:90:e6:c1:60:06:6a:fc:6b:d3:7f:a2:76:eb:ab:
69:ea:7d:0d:e2:5b:48:ea:e9:34:21:64:db:50:e4:
66:89:43:e8:b2:f3:1d:c7:0f:4b:cf:83:30:14:33:
ac:1d:18:a3:18:56:9f:0e:80:55:00:3b:4e:74:f9:
ef:dc:e4:4c:aa:fc:84:7e:3f:e9:3c:71:05:1c:5a:
ee:71:3c:86:7e:a2:cc:25:7d:ae:12:ef:22:87:dc:
e6:84:54:24:64:a8:d8:0d:5f:4a:b5:62:84:8f:98:
63:16:1f:9d:2a:41:d1:c3:0d:cf:73:7d:51:6a:db:
1d:38:70:68:8c:da:95:3e:b9:73:4e:e7:25:60:2d:
ea:63:d2:6b:79:2b:66:94:ef:64:ec:c9:da:d1:f0:
56:69:18:ce:82:48:c7:3d:8f:20:2b:7c:ab:65:a7:
6c:2e:0b:1c:00:66:c4:a9:94:a0:1d:e3:73:e4:7b:
8f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:49:BA:AE:9C:5B:B2:1C:39:2B:27:DB:57:70:DF:FA:EE:60:A4:0C
X509v3 Authority Key Identifier:
keyid:16:62:CF:D2:6E:CC:F2:89:75:73:99:CC:99:C1:7D:1C:B4:35:75:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/O0m6rpxbshw5KyfbV3Df-u5gpAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.218.0/23
178.132.68.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:86:93:ec:13:ce:5d:db:3d:00:35:3e:86:86:00:58:b6:15:
7e:51:c6:84:f6:dd:8b:b7:ce:2d:a5:60:37:3e:aa:0d:f6:6f:
ff:6f:8f:77:2a:c7:4f:34:e2:23:87:91:04:7c:87:4f:78:1b:
f8:af:d0:71:44:57:0d:46:2a:4d:17:f6:27:03:ec:5c:ce:b7:
d0:0d:fc:c8:33:a0:54:98:11:30:9e:a3:93:08:fa:e1:4e:24:
a5:f0:50:a1:f2:f3:b4:d9:fe:24:ca:1a:bc:4d:a0:28:06:a2:
51:d7:2c:f7:b7:f5:cc:44:f8:ac:bc:5a:5e:ef:56:80:27:31:
c6:e1:2d:ef:21:dc:9a:aa:0d:e1:57:de:a0:7e:3f:ca:c4:c2:
cc:b3:d4:cc:ae:d0:33:72:66:f0:32:9a:ee:4f:6e:f6:d1:ee:
fa:e5:c6:a5:fc:93:26:ad:d0:a2:64:ba:07:3d:06:3c:b7:6c:
da:82:db:7b:7c:ed:b6:97:c2:12:65:ae:5d:ef:bb:37:fc:6d:
19:6a:86:e3:14:f9:1f:a0:17:18:6b:4b:74:d9:6a:11:0e:81:
d1:4a:61:01:57:93:d5:9a:57:80:d1:c3:ea:db:78:87:ca:1d:
7f:4e:10:cd:d5:66:4c:1f:19:51:1f:93:c1:f6:2a:20:96:a3:
48:fd:26:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 04:16:08 2025 by rpki-client