Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/jXQtN0_lH1jMkgeFoBItsFqK9sA.roa
File: jXQtN0_lH1jMkgeFoBItsFqK9sA.roa (raw, json)
Hash identifier: CEWMWhf6Wo0twHsiVnqhdkBQ3a5xIOWXXq6UQo1OqpU=
Subject key identifier: 8D:74:2D:37:4F:E5:1F:58:CC:92:07:85:A0:12:2D:B0:5A:8A:F6:C0
Certificate issuer: /CN=cab936b35f92cdec5e90df33bdc508661c27b455
Certificate serial: 01977EC6F64281FA35469C32B44BC7F91C60
Authority key identifier: CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/jXQtN0_lH1jMkgeFoBItsFqK9sA.roa
Signing time: Tue 17 Jun 2025 16:44:17 +0000
ROA not before: Tue 17 Jun 2025 16:44:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201746
IP address blocks: 45.94.100.0/24 maxlen: 24
45.94.101.0/24 maxlen: 24
45.94.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:c6:f6:42:81:fa:35:46:9c:32:b4:4b:c7:f9:1c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab936b35f92cdec5e90df33bdc508661c27b455
Validity
Not Before: Jun 17 16:44:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d742d374fe51f58cc920785a0122db05a8af6c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c5:bb:6a:1b:1d:c6:54:82:0d:14:e9:8e:8b:
59:65:b0:ca:38:77:34:e6:7d:dd:6e:4b:c4:e7:19:
61:6f:ce:c0:5b:d2:0f:7d:49:12:83:f8:53:45:f3:
b6:94:aa:0e:d1:6b:e7:71:6a:28:0e:df:9c:df:d3:
26:85:cc:ae:3e:89:3a:33:84:73:0f:6a:7e:d0:79:
ad:31:20:1a:79:67:a8:87:c0:2e:a8:50:29:c5:e2:
44:1b:79:50:90:fb:0c:a4:45:cf:a1:f4:6a:9b:44:
7b:68:27:e9:bc:95:2c:ff:c4:9a:eb:53:27:23:0f:
5e:af:4f:92:3b:7e:0f:a9:42:65:f3:12:9e:f3:cb:
fe:85:e5:3d:a9:e5:4f:a9:5c:8d:07:34:8d:5f:0c:
df:c4:e3:ff:ae:37:af:b0:77:9e:9f:87:5b:1f:a1:
47:c1:85:86:f8:c2:12:ca:bc:94:bb:81:fb:0e:20:
6d:a9:69:96:cf:bc:e5:c4:cf:47:17:46:70:48:7d:
26:1b:13:ab:c6:4d:b4:b9:71:24:dd:16:24:78:65:
12:7f:11:7b:9f:8c:1c:d6:97:8e:a6:9a:b5:d1:02:
b8:7c:a7:f9:c4:a4:59:0b:24:a8:b6:01:f2:9b:44:
4c:48:ff:7e:59:9a:25:c9:5c:2a:29:68:a2:13:5c:
47:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:74:2D:37:4F:E5:1F:58:CC:92:07:85:A0:12:2D:B0:5A:8A:F6:C0
X509v3 Authority Key Identifier:
keyid:CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/jXQtN0_lH1jMkgeFoBItsFqK9sA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.100.0-45.94.102.255
Signature Algorithm: sha256WithRSAEncryption
9f:21:e4:78:db:1b:7b:5d:9c:7d:01:d8:d3:a5:fd:76:4c:a2:
ab:60:46:01:57:e5:ba:f7:e3:46:28:43:a6:2b:35:48:ff:d1:
ff:df:36:71:9e:7c:58:26:9b:2e:42:9d:ca:b7:64:26:7e:97:
12:40:c6:37:3d:c5:10:13:d6:14:ca:ce:17:38:8e:37:1f:14:
79:68:c0:3d:ff:fc:14:00:4b:b3:e7:af:d9:44:c6:05:c2:00:
24:58:c8:dc:4e:b8:90:73:0d:12:c3:62:c6:ee:5e:b9:9a:f0:
eb:5b:88:a2:54:f2:34:4c:29:fa:be:fd:c5:0d:c4:6d:7b:7e:
36:9c:50:ca:d2:67:ad:46:f1:d9:49:13:c9:33:d8:82:08:5b:
79:1f:60:22:1b:cc:50:08:14:3a:e2:b4:21:dc:9b:23:fa:86:
81:cf:0c:38:cc:57:e1:8c:45:0e:83:a0:de:77:c1:6a:bf:78:
77:67:ba:06:de:e3:32:fe:1f:de:80:c3:80:46:07:13:b5:ff:
09:a3:96:7a:b5:3d:f3:0d:41:27:2b:18:f4:ce:9a:93:31:9b:
92:75:3f:5c:da:ac:0b:7c:20:98:34:49:1c:51:81:8a:1d:b2:
75:d8:67:44:09:31:04:9b:b5:96:80:e7:e0:fd:98:36:ca:c3:
04:8f:81:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:52:41 2025 by rpki-client