Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/h7Gclrhu6SOaWvFbiHElhAwE2xc.roa
File: h7Gclrhu6SOaWvFbiHElhAwE2xc.roa (raw, json)
Hash identifier: hHmeLevnWBoLoCenM/A/c8Y0QgQSSX5DM+SnErFkEgU=
Subject key identifier: 87:B1:9C:96:B8:6E:E9:23:9A:5A:F1:5B:88:71:25:84:0C:04:DB:17
Certificate issuer: /CN=6832c32d2259013991260d530d9120031aaefcd0
Certificate serial: 0197823C46F2505636791017A423757FE619
Authority key identifier: 68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/h7Gclrhu6SOaWvFbiHElhAwE2xc.roa
Signing time: Wed 18 Jun 2025 08:51:17 +0000
ROA not before: Wed 18 Jun 2025 08:51:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 145.46.160.0/24 maxlen: 24
145.46.161.0/24 maxlen: 24
145.46.162.0/24 maxlen: 24
145.46.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:3c:46:f2:50:56:36:79:10:17:a4:23:75:7f:e6:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6832c32d2259013991260d530d9120031aaefcd0
Validity
Not Before: Jun 18 08:51:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87b19c96b86ee9239a5af15b887125840c04db17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:49:56:f0:78:76:fa:ed:94:ec:e0:6c:b1:c1:
4b:8f:4d:f5:d9:0b:cc:ac:ec:6f:b2:b9:83:bd:42:
cc:94:31:95:cf:14:00:a4:72:95:fb:68:78:3d:3f:
5e:1d:99:73:e7:6c:a0:53:f9:3c:b9:51:2d:41:bf:
58:b6:d1:d2:59:98:b6:b6:51:96:2f:e8:05:b4:27:
14:fd:27:b6:88:77:13:e5:7f:a2:3a:bb:fb:30:13:
63:49:fb:72:4f:5a:1b:76:e0:91:04:a0:ef:68:73:
de:b8:5f:1b:4d:35:8f:60:dc:52:01:16:01:6c:9a:
76:43:54:f5:04:a1:d2:ce:49:17:e6:8c:de:bb:ba:
d3:d2:89:44:8a:a3:1e:b5:d6:26:45:b5:87:5b:91:
2d:4f:54:53:fe:02:1e:35:58:b9:81:68:fe:42:07:
4b:ed:9f:03:b5:64:ad:fe:34:db:dd:e6:b7:0e:0e:
9b:66:79:6d:73:f9:20:7e:d4:44:6d:dd:a7:67:b3:
ca:4f:73:f0:f6:5d:04:b2:77:ae:83:d2:80:8a:68:
9d:8c:ba:6f:73:db:5c:56:1e:0e:c7:86:fd:39:72:
fa:6b:e6:5f:b0:98:8e:f0:77:b7:1d:bb:76:fc:7d:
d3:33:50:87:51:dc:cb:d2:41:1b:85:2d:cc:85:15:
ca:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B1:9C:96:B8:6E:E9:23:9A:5A:F1:5B:88:71:25:84:0C:04:DB:17
X509v3 Authority Key Identifier:
keyid:68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/h7Gclrhu6SOaWvFbiHElhAwE2xc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.46.160.0/22
Signature Algorithm: sha256WithRSAEncryption
38:d2:d9:f9:f9:87:bf:bf:35:a0:90:da:73:9d:7c:87:1f:5c:
f1:4f:87:47:56:ac:62:ac:8d:26:be:e8:7e:61:c4:ca:a2:fc:
65:e7:d6:e5:7c:50:33:39:74:30:b6:25:6a:cd:c2:ee:f6:a9:
1f:bf:f8:c2:89:f2:ca:e9:78:d8:00:47:a9:08:76:0b:65:40:
5b:8f:30:7c:7c:13:f6:c1:a7:c6:bb:4c:c6:ef:53:cd:16:7b:
73:0e:0b:61:21:16:45:7b:28:10:78:19:7b:5b:55:f9:80:9e:
91:f3:30:53:da:08:ca:71:7f:6c:f4:1d:8c:55:a4:cd:b4:d2:
10:e8:23:89:d1:cd:87:7a:65:9a:71:f1:8f:e8:f4:a1:a5:8b:
2a:a6:52:18:47:21:e6:da:a6:e4:09:31:23:0e:b8:f2:fe:fb:
56:bb:35:7d:f1:78:77:4b:ac:20:4c:ff:56:92:2d:5d:bd:76:
1a:52:f5:73:9c:fd:5a:b0:dc:f3:57:89:19:41:f1:56:2e:f1:
ac:97:94:a8:6f:94:90:1d:39:f5:40:b2:da:fd:77:8a:d0:d5:
fd:57:e9:83:28:0a:de:d0:b4:77:33:ef:4f:3c:96:ad:e5:e4:
32:06:87:6a:ff:d7:a8:9b:41:25:6f:77:77:38:b2:c0:c7:08:
1b:e1:8e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:27:32 2025 by rpki-client