Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/cmg4VeeFHVC_UWhho_CrQbVWcC8.roa
File: cmg4VeeFHVC_UWhho_CrQbVWcC8.roa (raw, json)
Hash identifier: 1EwZCwgAmjaMM5LT34JdZWrdxMVOcyev3ayJtE5hagk=
Subject key identifier: 72:68:38:55:E7:85:1D:50:BF:51:68:61:A3:F0:AB:41:B5:56:70:2F
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 0197AA9ECA285CDAA87896C0B885E4D172DD
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/cmg4VeeFHVC_UWhho_CrQbVWcC8.roa
Signing time: Thu 26 Jun 2025 05:03:42 +0000
ROA not before: Thu 26 Jun 2025 05:03:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.149.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:aa:9e:ca:28:5c:da:a8:78:96:c0:b8:85:e4:d1:72:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Jun 26 05:03:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=72683855e7851d50bf516861a3f0ab41b556702f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a2:15:b9:60:46:aa:28:82:76:4e:c2:ab:5c:
05:c5:b6:05:1c:36:51:02:f8:4c:c7:77:78:c9:9f:
2e:b0:81:45:af:66:bd:e1:fa:10:f5:0a:31:c9:99:
ce:af:01:af:15:d8:02:2d:57:09:8e:4f:c5:8a:f4:
ba:9f:a7:85:87:80:b4:99:bd:cb:36:90:42:f7:98:
92:8c:bd:c6:07:7f:a9:2a:44:b5:cb:78:b7:8e:89:
97:57:b2:02:84:5f:b3:d2:6d:1f:75:79:b6:bd:32:
bf:05:4a:27:e5:62:d2:0a:f5:ac:3d:56:0a:1e:d3:
65:26:97:70:2e:ec:f4:fd:e0:a5:5d:77:14:29:09:
25:bc:4d:42:3a:8f:5e:33:fd:ba:5a:5a:5a:db:40:
0a:e6:48:83:cd:61:ed:56:f2:92:75:60:c0:fd:6e:
04:67:77:9d:d7:86:eb:e8:af:c0:ff:ee:e8:16:2b:
a5:c3:be:70:6c:10:16:68:f6:27:b9:dc:34:4e:df:
90:cc:fa:81:1b:03:48:60:e8:2f:9b:88:ce:1f:30:
81:c9:7e:8f:a4:46:7d:c7:9a:55:50:49:de:bd:d1:
99:cd:21:75:ff:61:35:81:4e:07:79:fa:14:b5:3c:
2a:8a:14:3a:b1:b8:d0:c4:bc:a2:18:77:42:c3:6f:
73:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:68:38:55:E7:85:1D:50:BF:51:68:61:A3:F0:AB:41:B5:56:70:2F
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/cmg4VeeFHVC_UWhho_CrQbVWcC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.164.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:93:a3:6a:56:73:11:58:02:a6:49:c4:07:f0:e3:ce:5c:00:
85:ad:09:d6:58:72:05:cd:bb:20:4d:b7:93:12:ec:e4:8b:53:
9d:59:66:fd:39:ff:9d:36:8f:87:92:1c:92:ad:b4:a5:77:1d:
b3:fe:09:20:8b:4a:fd:8f:6c:35:24:f5:79:b4:31:41:af:43:
fe:67:57:fc:7e:04:89:3f:3f:d5:99:7d:0d:59:f7:ab:4d:be:
4f:e1:03:5e:c5:c8:07:34:8d:a0:f2:a2:9f:5f:48:65:86:f0:
c0:fe:0a:c9:a8:14:b8:8c:cb:c7:fe:f0:b6:75:19:97:5e:f3:
45:37:2e:75:39:1e:21:26:23:e4:46:bf:18:8e:32:d7:b8:ce:
eb:58:18:82:ea:60:2b:18:c4:61:5c:eb:2b:3a:29:74:94:99:
14:81:e4:63:0f:3d:95:de:16:15:15:c1:79:65:01:f5:6a:09:
94:7d:84:a5:13:55:d3:9b:b0:ac:d3:a1:c2:50:52:b1:28:27:
b0:6e:17:da:5e:9b:80:1e:a2:ab:d9:9a:0e:9f:5c:12:b2:cf:
3c:af:3f:14:55:7e:7d:f7:d7:97:97:1c:98:42:08:89:35:7a:
ee:92:11:70:f9:b5:f6:e9:53:35:73:53:e6:ba:21:29:fd:4f:
d0:12:5c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 03:24:37 2025 by rpki-client