Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/ttd53oOqNzSh1Mtdf5yOWTGPq-E.roa
File: ttd53oOqNzSh1Mtdf5yOWTGPq-E.roa (raw, json)
Hash identifier: EumygL53WWGsQCEg1Lem1grWf0oIkvDK9ERz5W1pGI8=
Subject key identifier: B6:D7:79:DE:83:AA:37:34:A1:D4:CB:5D:7F:9C:8E:59:31:8F:AB:E1
Certificate issuer: /CN=65bdcff77bf060d5da12de45e2072e1cff4560a7
Certificate serial: 01978C31CCE18F1DF65E08B722B901654CB8
Authority key identifier: 65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/ttd53oOqNzSh1Mtdf5yOWTGPq-E.roa
Signing time: Fri 20 Jun 2025 07:16:03 +0000
ROA not before: Fri 20 Jun 2025 07:16:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212500
IP address blocks: 45.152.50.0/23 maxlen: 24
45.152.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8c:31:cc:e1:8f:1d:f6:5e:08:b7:22:b9:01:65:4c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65bdcff77bf060d5da12de45e2072e1cff4560a7
Validity
Not Before: Jun 20 07:16:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6d779de83aa3734a1d4cb5d7f9c8e59318fabe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9f:b6:d6:8f:6c:08:58:15:80:ad:bf:a8:a7:
ae:bc:56:da:86:45:0a:84:97:bd:e8:4a:5e:96:44:
1d:64:ad:9f:eb:40:5e:f7:2d:58:61:b7:3f:45:a3:
00:8a:66:c1:f1:f1:73:f4:a3:e8:34:89:09:51:e6:
fd:5c:47:58:66:21:75:73:b5:32:a3:ef:b0:f1:27:
e3:0a:d8:cd:25:1d:ee:14:90:df:da:ae:a9:6a:c4:
3b:9d:2e:68:f4:b4:b1:57:d6:8c:16:4f:4e:14:e0:
73:82:19:1f:3f:97:d6:f0:ac:dc:bf:25:c1:55:8f:
3f:2a:76:3c:f0:33:1d:f4:b6:55:a0:88:2b:a1:12:
b1:f0:81:5a:03:cd:14:40:ac:fa:2f:d5:cb:64:d2:
5d:2c:b3:5f:4c:53:cd:cf:c0:84:5f:73:09:fa:af:
bd:4f:17:4c:cc:9b:f4:25:24:ba:dd:d2:70:20:97:
a9:f1:13:51:7f:1b:81:07:52:34:e6:61:19:4c:a2:
01:67:6c:1f:77:4d:38:92:e7:67:00:e6:59:3b:a0:
ac:eb:b3:1a:17:a2:d0:c1:19:d3:e5:1a:70:4d:65:
86:7c:18:b1:54:52:85:4b:65:fd:69:0b:c6:47:ec:
39:28:e4:24:91:6d:17:90:60:ea:03:44:2a:aa:51:
b3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D7:79:DE:83:AA:37:34:A1:D4:CB:5D:7F:9C:8E:59:31:8F:AB:E1
X509v3 Authority Key Identifier:
keyid:65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/ttd53oOqNzSh1Mtdf5yOWTGPq-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.50.0/23
Signature Algorithm: sha256WithRSAEncryption
55:d0:97:dc:4a:4c:fd:4d:38:19:fd:13:10:bf:04:37:77:3f:
7a:a8:8f:35:c2:36:c4:c7:dd:90:79:00:69:d4:c8:8b:b7:86:
84:6d:a9:d1:c2:9d:e4:6d:20:2a:fa:d0:b3:38:12:a7:9b:b7:
e4:b5:61:8f:ae:8a:8c:38:e1:2f:46:df:4c:75:d1:b0:8e:6a:
e8:77:72:45:a7:69:fc:63:c1:fe:b3:94:53:b5:4e:2a:de:df:
9a:b8:2b:02:aa:2f:97:cd:3f:8d:ad:4f:fd:74:30:56:0e:5f:
36:13:a9:a6:49:39:89:4f:1f:14:75:14:2c:e7:1d:d8:bb:f5:
3d:50:60:f0:45:3d:e4:55:3d:30:97:a0:04:13:70:1a:2b:34:
88:0c:06:f2:4d:f2:7f:98:3c:b0:e6:13:ba:b1:33:a1:d6:e2:
9f:70:3c:0b:d8:66:96:ae:ea:29:9e:b9:80:b1:54:39:7b:6a:
53:3e:46:89:41:11:14:31:78:ff:78:14:62:f4:49:38:a7:cf:
0e:7c:da:8a:d5:c2:ec:be:c8:3d:3a:c3:72:aa:30:76:3e:d2:
19:b0:66:59:2e:2b:a4:44:f2:14:62:84:77:00:76:ce:eb:99:
7b:2a:c7:e7:cc:6c:07:1d:f9:31:a7:e7:95:13:a5:4b:c5:e0:
32:53:ef:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:24:29 2025 by rpki-client