Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/VCfHhX5Zpnl0Y2XOIeutbk9ry2Y.roa
File: VCfHhX5Zpnl0Y2XOIeutbk9ry2Y.roa (raw, json)
Hash identifier: /OMk5hYfz73f+gT4u/HXEFPm2FQfd11tpPBzeU/kkHU=
Subject key identifier: 54:27:C7:85:7E:59:A6:79:74:63:65:CE:21:EB:AD:6E:4F:6B:CB:66
Certificate issuer: /CN=b45addcd579648fc3f6124e558479ef0b07f018c
Certificate serial: 0197B1DAE6C22CA88498953304D404EC90A5
Authority key identifier: B4:5A:DD:CD:57:96:48:FC:3F:61:24:E5:58:47:9E:F0:B0:7F:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFrdzVeWSPw_YSTlWEee8LB_AYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/VCfHhX5Zpnl0Y2XOIeutbk9ry2Y.roa
Signing time: Fri 27 Jun 2025 14:46:42 +0000
ROA not before: Fri 27 Jun 2025 14:46:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215024
IP address blocks: 45.148.64.0/24 maxlen: 24
2a14:48c7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFrdzVeWSPw_YSTlWEee8LB_AYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b1:da:e6:c2:2c:a8:84:98:95:33:04:d4:04:ec:90:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45addcd579648fc3f6124e558479ef0b07f018c
Validity
Not Before: Jun 27 14:46:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5427c7857e59a679746365ce21ebad6e4f6bcb66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f0:0e:71:6d:44:1f:a1:55:58:ce:64:be:72:
70:35:62:7d:3e:89:53:ec:24:1c:69:30:92:83:0d:
be:8e:d9:99:f9:f0:be:23:57:36:78:da:c3:f5:ad:
bf:09:67:34:a3:2f:f2:34:36:ec:7e:aa:f5:66:51:
d0:e1:5d:51:af:0c:bc:0d:5e:27:da:54:3b:af:fc:
f7:c7:59:e2:51:bf:76:0a:d8:4e:c2:42:7f:a5:64:
1c:cb:c3:a3:04:ec:b7:a3:cd:1a:4e:38:07:c0:16:
4f:ad:70:10:9c:36:4f:bd:96:79:5a:5a:26:94:eb:
c2:29:6c:92:b5:ec:43:55:31:ec:e3:00:42:36:1f:
29:29:78:d5:39:cb:0c:fd:7f:dd:57:62:41:1e:5b:
42:b0:9d:1b:fd:51:b2:a7:f0:3e:c6:06:6f:ac:3f:
4e:8c:1b:5e:86:41:b1:1c:f7:3b:78:cb:a7:25:0b:
9a:91:07:3c:e8:97:cf:c2:c8:62:db:58:e2:13:82:
56:26:ec:3c:15:d8:af:f6:c7:4a:25:3b:8b:de:a9:
89:10:bb:4b:6d:cd:47:2b:ba:35:db:6c:69:ed:3e:
73:ff:bb:6e:e7:d2:95:8d:12:b9:27:52:f1:88:81:
3b:38:31:f5:72:5c:82:d6:9e:05:e8:c6:8a:cd:00:
27:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:27:C7:85:7E:59:A6:79:74:63:65:CE:21:EB:AD:6E:4F:6B:CB:66
X509v3 Authority Key Identifier:
keyid:B4:5A:DD:CD:57:96:48:FC:3F:61:24:E5:58:47:9E:F0:B0:7F:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFrdzVeWSPw_YSTlWEee8LB_AYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/VCfHhX5Zpnl0Y2XOIeutbk9ry2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.64.0/24
IPv6:
2a14:48c7::/48
Signature Algorithm: sha256WithRSAEncryption
3d:73:73:19:49:57:9c:a8:b1:ff:a0:1b:8b:92:41:32:62:d5:
49:c7:2c:0b:05:3a:a3:a3:c7:53:32:5d:25:e1:68:f6:39:ec:
88:d7:63:dd:4b:25:9e:99:3b:10:cd:8b:4f:2b:10:ba:ba:32:
f5:23:cd:e8:86:2d:2d:d4:e7:f4:76:ee:b3:49:5a:b7:01:a6:
b4:04:3d:c6:9b:6d:e8:1e:73:f9:fd:b1:a8:19:2d:30:98:af:
14:91:a9:1b:0d:1a:9b:e7:9f:a4:a7:d7:a2:22:fa:8c:70:a6:
1d:03:04:12:3d:e7:5f:a9:5f:39:c7:49:6d:ce:89:df:28:6f:
9e:6f:20:57:63:66:12:84:41:11:2d:fd:c8:03:a4:74:04:36:
58:a5:cc:80:c3:bd:06:b4:e2:cb:04:ed:7e:69:12:34:41:b8:
a1:dc:f0:10:1d:05:37:03:6f:ed:c4:3c:47:03:66:a1:02:85:
b7:4c:5a:2d:b7:83:aa:c3:8c:49:61:1c:ab:f8:50:8a:28:0b:
db:5f:da:37:23:94:84:4e:04:43:ae:40:a2:0d:dc:d2:00:97:
bb:c3:85:cf:97:52:b9:45:90:f8:9b:13:4f:bd:49:96:d5:93:
34:3b:59:49:6f:ac:58:24:20:dd:ab:ae:95:e2:7a:78:8c:78:
75:c2:e3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 03:54:09 2025 by rpki-client