Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/8woUP6r-ibcD8Si8xgPKnYyWtls.roa
File: 8woUP6r-ibcD8Si8xgPKnYyWtls.roa (raw, json)
Hash identifier: cizwexdio5wbMFSxOZP/v1aL4yXiU7uHgqRe6ZRnDlI=
Subject key identifier: F3:0A:14:3F:AA:FE:89:B7:03:F1:28:BC:C6:03:CA:9D:8C:96:B6:5B
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 01977516CD094CAF2D0D44167B9189C223FD
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/8woUP6r-ibcD8Si8xgPKnYyWtls.roa
Signing time: Sun 15 Jun 2025 19:35:17 +0000
ROA not before: Sun 15 Jun 2025 19:35:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198584
IP address blocks: 45.152.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:75:16:cd:09:4c:af:2d:0d:44:16:7b:91:89:c2:23:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Jun 15 19:35:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f30a143faafe89b703f128bcc603ca9d8c96b65b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c2:99:55:47:9b:ea:d8:10:11:4b:fc:d9:b5:
26:61:9d:e4:7d:3b:1c:fa:18:f6:20:b9:69:6a:d8:
08:c1:6c:e2:46:ad:cc:a1:01:9f:68:73:46:98:a3:
f9:b9:0b:ed:01:26:3e:a5:1d:4a:e4:7e:c5:0e:a5:
17:57:87:56:f7:d5:8c:46:7e:d8:77:60:d7:45:f1:
30:77:48:23:4c:ee:1b:a3:dd:43:36:24:99:d2:58:
c1:05:f6:cf:25:d7:48:d0:ae:04:1f:d1:d4:28:f2:
e5:84:d0:9b:9b:d4:f6:b2:01:1d:65:74:cd:8e:21:
18:d4:7e:22:42:93:2a:3b:a0:95:94:8c:1f:0d:01:
53:ed:a9:90:a7:34:37:10:d2:a0:cd:6d:e6:b3:9e:
16:71:11:30:bb:0b:73:7d:23:ee:bc:2a:d8:43:b9:
95:0f:be:a5:90:f4:93:3f:0a:ee:62:ef:3e:20:e9:
dc:53:66:82:44:6b:7e:25:b1:f6:1e:71:79:6b:cd:
fe:0d:34:c4:b0:d4:0d:20:5e:02:6a:9b:0f:6b:ee:
b2:65:38:f6:13:36:38:67:62:15:e7:a6:4d:33:e0:
98:70:92:56:6a:2f:e1:6b:07:f4:05:39:7c:d2:bc:
b7:8a:41:bd:da:9b:af:a4:81:4a:3a:cc:c4:94:a9:
d5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:0A:14:3F:AA:FE:89:B7:03:F1:28:BC:C6:03:CA:9D:8C:96:B6:5B
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/8woUP6r-ibcD8Si8xgPKnYyWtls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.164.0/24
Signature Algorithm: sha256WithRSAEncryption
62:34:8d:51:5b:83:37:9a:71:d8:02:ce:b0:45:10:4b:13:f2:
4e:a6:a1:ed:26:e2:f7:80:0a:55:00:36:e0:3b:46:35:a5:71:
9b:aa:9d:29:eb:f4:85:c6:61:51:9c:98:72:07:bf:2d:b7:0e:
45:78:b6:b9:de:8d:7c:cd:bf:99:06:66:a5:b9:43:be:93:f0:
3e:7d:ed:ab:4f:c3:47:04:06:01:b1:77:13:36:94:63:7c:ad:
c4:bf:38:d2:e6:e9:fb:10:81:ba:b7:a6:7b:66:f6:81:c7:bf:
a9:84:4f:a6:d5:a0:55:a3:1e:e4:3e:11:7c:e2:66:24:7e:95:
37:3f:ea:aa:57:78:b5:00:55:ff:cb:5a:3b:1d:bf:7d:5f:02:
2a:35:6c:47:e5:f5:12:b2:fb:f9:ea:3f:44:1d:1c:3e:97:f7:
85:30:82:5d:94:3c:79:66:3d:b5:da:53:c8:0e:fa:b4:44:a1:
6b:90:2c:be:e4:7d:71:fd:ef:fa:ff:1b:b8:05:36:b7:f3:75:
17:e1:6d:cf:a9:40:4f:11:50:ad:8e:b1:7d:0c:34:48:70:74:
1a:f1:7c:66:4a:c9:3d:18:95:d9:df:1f:20:62:e9:57:eb:49:
a4:34:9f:45:00:ad:bf:ad:3c:a1:ae:34:a7:aa:06:96:f8:58:
19:5c:8f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:17:39 2025 by rpki-client