Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/RT4hJokxpydF_fCNi2NvZ3eX2J0.roa
File: RT4hJokxpydF_fCNi2NvZ3eX2J0.roa (raw, json)
Hash identifier: iCQFwGHFjtRxNZPTLfuEyqvuxoPxCwEHsmqgL0/Zrkg=
Subject key identifier: 45:3E:21:26:89:31:A7:27:45:FD:F0:8D:8B:63:6F:67:77:97:D8:9D
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 0197B58F63F704E0A3E02115FD870DD2DF32
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/RT4hJokxpydF_fCNi2NvZ3eX2J0.roa
Signing time: Sat 28 Jun 2025 08:02:42 +0000
ROA not before: Sat 28 Jun 2025 08:02:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 274044
IP address blocks: 45.145.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:8f:63:f7:04:e0:a3:e0:21:15:fd:87:0d:d2:df:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jun 28 08:02:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=453e21268931a72745fdf08d8b636f677797d89d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3b:c3:6a:a7:8f:0b:9d:b0:ee:52:cf:4f:f0:
60:6d:4b:e8:b3:f9:62:7a:1e:a9:eb:f3:73:3e:69:
0d:0b:cb:b1:e0:e3:f7:77:dc:28:8c:9b:2f:bf:03:
23:33:c6:84:4e:57:a3:bc:07:ed:97:94:48:5a:af:
b5:61:39:d4:f9:a7:2f:fd:68:2a:81:5b:70:3d:8d:
d5:38:76:84:88:fc:b8:e0:ef:36:6b:77:d9:2a:3d:
f6:b1:3e:a5:45:7e:2f:4b:7d:49:34:8c:b1:b6:7e:
e5:a5:4a:54:8f:15:f9:0c:a7:59:dc:fe:63:c3:be:
bf:7f:8f:4c:39:70:58:bc:eb:8d:d3:a1:4b:4b:b7:
ff:39:e9:0c:4d:b3:a3:1e:d7:80:69:4c:7a:a3:df:
41:83:bb:78:c9:bf:28:3d:6b:79:a8:7d:aa:4c:4f:
65:b4:6a:80:64:87:89:50:f6:9a:a6:23:ee:2b:e5:
fa:d9:b5:00:8d:0f:aa:4b:8b:50:7f:15:c2:3c:04:
ca:9a:a1:90:8d:39:79:a3:32:ba:16:79:76:8d:a5:
bc:b2:68:e7:84:e8:a8:9a:04:4e:cd:4e:9a:aa:08:
1d:72:2a:ad:4b:c7:d9:12:13:e8:5b:17:cf:49:b1:
e8:e1:4b:2f:8d:df:d6:9c:5a:8e:87:64:65:43:62:
ff:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:3E:21:26:89:31:A7:27:45:FD:F0:8D:8B:63:6F:67:77:97:D8:9D
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/RT4hJokxpydF_fCNi2NvZ3eX2J0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.248.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:b6:38:07:83:cb:bb:b4:26:fc:b6:73:8f:01:0b:59:bd:55:
70:c4:52:d3:17:7f:21:39:e2:f9:0c:a3:cd:2f:d2:b6:14:32:
5d:1d:6a:f5:91:22:e2:13:fd:18:6a:87:d7:44:e4:87:5e:54:
6a:e5:ab:f4:17:9d:e5:1b:6d:a9:b8:86:fa:7c:9a:26:19:55:
1b:ab:f2:e4:c5:d4:21:d8:e7:a1:9d:f8:b9:fc:3f:98:6b:02:
b3:0e:29:7a:b4:73:d9:71:5f:5b:31:8d:c0:4c:97:3c:8c:c5:
fc:74:94:06:6d:76:b6:0b:11:31:2d:dc:b5:dc:23:ef:55:70:
3e:1f:0b:a4:c6:58:b3:1c:8d:20:2a:66:fb:ad:81:ce:04:3b:
03:54:df:9f:fe:f7:4a:2f:ad:85:d1:b8:61:d5:6d:f6:f0:38:
ae:20:62:10:dc:4a:48:7d:2e:1c:22:79:53:c5:d0:ed:71:dc:
dc:f3:1c:10:ec:95:52:78:08:e6:ce:24:b6:8f:7c:79:f7:d9:
40:03:70:a2:08:ca:4c:aa:07:95:3b:83:bd:56:26:7a:16:7e:
99:4f:e1:ba:92:9a:00:73:30:80:91:73:2f:f9:a9:3e:b1:a9:
00:5c:95:ff:13:90:e1:61:a5:96:46:ea:56:7d:a4:53:9a:82:
ae:40:72:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 12:16:13 2025 by rpki-client