Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/jOqd2wJBuE3wT3pRawlL9knhjV8.roa
File: jOqd2wJBuE3wT3pRawlL9knhjV8.roa (raw, json)
Hash identifier: pvOd4te8ScnLLx0JwvYK3xwrNCWYubvf6Z+FLbM/DCM=
Subject key identifier: 8C:EA:9D:DB:02:41:B8:4D:F0:4F:7A:51:6B:09:4B:F6:49:E1:8D:5F
Certificate issuer: /CN=d04265fb11c2a220bc350718673e0704d1edadde
Certificate serial: 01978891743590AD1366A1041B1B67ED2B59
Authority key identifier: D0:42:65:FB:11:C2:A2:20:BC:35:07:18:67:3E:07:04:D1:ED:AD:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/jOqd2wJBuE3wT3pRawlL9knhjV8.roa
Signing time: Thu 19 Jun 2025 14:22:03 +0000
ROA not before: Thu 19 Jun 2025 14:22:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48678
IP address blocks: 45.11.96.0/24 maxlen: 24
45.11.97.0/24 maxlen: 24
45.11.98.0/24 maxlen: 24
45.11.99.0/24 maxlen: 24
62.106.94.0/24 maxlen: 24
134.255.199.0/24 maxlen: 24
149.3.171.0/24 maxlen: 24
178.211.130.0/24 maxlen: 24
188.93.141.0/24 maxlen: 24
2a0c:6d40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:91:74:35:90:ad:13:66:a1:04:1b:1b:67:ed:2b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04265fb11c2a220bc350718673e0704d1edadde
Validity
Not Before: Jun 19 14:22:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8cea9ddb0241b84df04f7a516b094bf649e18d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:73:f4:19:f2:e0:81:54:07:d2:7d:0e:34:9c:
c3:72:26:61:e1:24:18:ac:1f:4e:c7:aa:fe:be:e0:
07:48:14:bc:ea:46:bd:42:5d:4c:16:c3:3e:a0:87:
97:67:cd:85:33:fa:8d:d6:b1:0c:c5:5b:97:2b:fe:
2b:87:5b:b0:c9:df:b8:0c:64:ce:b6:a0:de:09:6d:
b2:7f:0b:de:e0:df:93:e9:50:ea:18:cc:85:ac:9e:
ff:a4:b8:f7:57:73:e8:0c:d1:c6:e2:71:c4:00:8e:
d4:9d:74:63:55:b1:22:a3:84:22:fa:77:e9:32:25:
4e:fc:19:2e:0e:d6:4a:75:d9:41:07:47:9a:6a:d4:
86:24:a3:3c:a4:64:1a:0b:e1:44:fe:76:ab:d3:05:
f6:5f:9f:c4:4e:bb:2c:fb:0e:97:43:17:2d:f5:50:
16:74:0d:b9:75:ed:9d:4e:56:ac:9c:f0:73:2c:23:
90:d0:f7:de:d6:be:06:06:2c:47:3f:5c:43:05:dc:
09:63:73:a8:43:20:d5:02:90:98:8e:b2:43:c1:74:
2e:7c:09:7e:6b:e2:7e:b2:71:71:00:21:f9:80:02:
a7:07:f3:f4:2a:a6:ef:06:6a:8e:e2:5b:77:8e:7e:
39:83:67:f5:2a:ad:e6:c5:4b:5b:e5:4c:31:5e:72:
1d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:EA:9D:DB:02:41:B8:4D:F0:4F:7A:51:6B:09:4B:F6:49:E1:8D:5F
X509v3 Authority Key Identifier:
keyid:D0:42:65:FB:11:C2:A2:20:BC:35:07:18:67:3E:07:04:D1:ED:AD:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/jOqd2wJBuE3wT3pRawlL9knhjV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.96.0/22
62.106.94.0/24
134.255.199.0/24
149.3.171.0/24
178.211.130.0/24
188.93.141.0/24
IPv6:
2a0c:6d40::/29
Signature Algorithm: sha256WithRSAEncryption
c3:5c:db:33:9f:58:93:b5:59:5c:12:00:65:17:6b:2a:ce:b0:
1f:0f:c4:68:20:0c:94:90:40:8b:e1:ab:4b:b6:08:42:30:9f:
1a:47:a6:b4:e0:ae:80:09:78:2c:55:49:2d:b1:64:0f:d0:50:
7f:55:15:00:5f:46:6a:cb:6c:21:6d:a9:f5:78:5f:43:12:8e:
4b:cc:27:2e:3d:09:22:d9:56:39:07:ab:57:0d:02:61:ab:87:
62:0d:de:a3:b4:70:91:91:ce:c6:2e:ac:6b:71:b3:95:67:7c:
50:b6:dc:3d:ae:91:6d:0c:9e:1b:0a:f1:95:27:d0:69:ce:f4:
7b:98:63:6d:60:0b:55:5f:ab:2a:29:84:7f:6a:4b:97:73:77:
e7:35:cf:b5:7e:f7:5b:43:50:f6:e1:81:03:ba:9f:1a:e8:d0:
67:bc:81:bf:b5:a9:77:03:bc:ac:0d:b5:c7:b6:c7:6f:9b:dc:
95:2d:88:04:cb:94:f1:57:d7:2c:6a:6c:cf:5d:35:e3:b0:32:
89:39:8a:84:a7:c9:7f:49:89:f5:5c:65:cf:9d:21:31:af:1b:
b5:44:16:31:ac:4a:a7:c3:bb:03:e3:c6:8a:4d:7e:1d:e8:23:
03:00:30:ce:0b:f5:10:1e:d6:b7:94:82:d6:b5:fb:76:f7:1b:
80:41:c2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:49:10 2025 by rpki-client