Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/d9zp6AZxGUIdUrJzz8idXxXqkvw.roa
File: d9zp6AZxGUIdUrJzz8idXxXqkvw.roa (raw, json)
Hash identifier: FfoXAw9lK5hBRkyqnfyBrRUYHwvSIXzUheL45ZXlndI=
Subject key identifier: 77:DC:E9:E8:06:71:19:42:1D:52:B2:73:CF:C8:9D:5F:15:EA:92:FC
Certificate issuer: /CN=a52f6524085fa10e8c098ac2b5828a1f88c6913c
Certificate serial: 019788A3C38E7F619B4293B84CB9F77E9340
Authority key identifier: A5:2F:65:24:08:5F:A1:0E:8C:09:8A:C2:B5:82:8A:1F:88:C6:91:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/d9zp6AZxGUIdUrJzz8idXxXqkvw.roa
Signing time: Thu 19 Jun 2025 14:42:03 +0000
ROA not before: Thu 19 Jun 2025 14:42:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208734
IP address blocks: 45.84.116.0/22 maxlen: 22
45.84.116.0/24 maxlen: 24
45.84.117.0/24 maxlen: 24
45.84.118.0/24 maxlen: 24
45.84.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:a3:c3:8e:7f:61:9b:42:93:b8:4c:b9:f7:7e:93:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a52f6524085fa10e8c098ac2b5828a1f88c6913c
Validity
Not Before: Jun 19 14:42:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77dce9e8067119421d52b273cfc89d5f15ea92fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:20:ab:ef:8e:ef:5f:a1:8b:27:c8:7b:c4:ba:
db:15:bb:18:61:6f:ac:af:be:9c:f6:8f:be:84:b6:
4e:24:ab:d2:57:4f:aa:f3:01:be:58:2b:0b:43:4d:
79:30:b2:03:dd:ea:a2:ef:ce:3f:d4:ed:15:4f:07:
c5:41:64:5b:81:e0:cc:eb:c1:01:63:a4:1e:ab:66:
a3:44:4c:25:0f:bd:03:d4:5b:31:5f:00:ca:6b:c0:
26:58:03:4e:44:5a:84:a0:81:61:4e:f2:69:6a:fa:
42:85:1c:1d:57:fe:1e:0e:ee:32:4d:54:d8:f6:8c:
f8:7e:b6:b4:dd:19:f1:ce:84:d7:fa:56:4e:d9:7e:
eb:4e:a2:2f:12:02:11:01:fe:c7:e9:b8:3c:4b:c4:
4a:b7:b4:13:49:79:91:9d:69:d9:16:f8:e3:31:14:
42:00:7a:c7:fb:88:b3:b8:db:cd:67:80:d6:7d:d2:
ae:ef:b1:e2:c0:a8:bf:ae:3d:d9:49:fd:09:3e:fa:
b8:1a:4f:f6:47:c8:0e:63:e7:71:0d:65:66:38:28:
f4:4d:5d:ff:04:ef:26:fb:3d:ce:be:6f:00:4d:1b:
b2:cc:c3:2f:8f:ca:e6:e8:34:43:ed:0a:74:5a:1e:
1d:b7:7e:34:8b:d6:aa:07:6e:dd:12:e7:07:39:4b:
35:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:DC:E9:E8:06:71:19:42:1D:52:B2:73:CF:C8:9D:5F:15:EA:92:FC
X509v3 Authority Key Identifier:
keyid:A5:2F:65:24:08:5F:A1:0E:8C:09:8A:C2:B5:82:8A:1F:88:C6:91:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/d9zp6AZxGUIdUrJzz8idXxXqkvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.116.0/22
Signature Algorithm: sha256WithRSAEncryption
74:92:28:cc:90:7a:9d:38:4b:47:8d:d4:bb:9a:85:69:55:fa:
2a:d6:7e:2d:01:33:96:92:12:45:4a:fa:55:e9:06:ac:6f:f3:
c1:77:36:fa:8d:a0:56:af:16:d4:29:9a:70:1d:4d:2b:83:3b:
5d:a9:9e:af:ea:75:80:3d:86:63:43:78:96:1b:0e:d9:02:4c:
1f:a5:3a:06:d0:c9:c5:f0:c7:2e:e9:07:a5:0b:08:82:2e:63:
04:fb:71:12:2d:76:fe:96:c9:f7:17:76:c8:68:cf:d7:85:ce:
31:10:85:8a:17:a4:0a:c3:e0:89:8e:49:3e:d0:75:d2:b7:1a:
f8:a7:26:f1:1b:20:aa:f9:60:9a:98:51:0f:d5:e8:42:70:04:
c4:7a:72:ee:77:20:8c:8d:e5:b8:43:70:b4:76:a7:4b:c5:34:
11:94:88:90:4a:9c:2c:34:59:f5:e3:bb:25:f7:ae:19:d3:47:
96:7a:4e:45:9d:da:7e:c7:ba:c7:7c:26:92:b1:c3:db:b2:10:
12:3a:30:bb:d2:05:78:78:5d:14:4f:fc:e2:e2:6a:b0:db:7c:
49:45:dd:bf:b8:54:9e:e4:4e:95:cf:ef:69:96:bc:28:7c:c8:
c5:70:e8:a9:12:e3:56:b4:36:b6:76:31:1d:50:8c:51:8b:20:
24:ce:1b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 16:24:10 2025 by rpki-client