Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/0Om0y2WJnxnezCkTIkUnB1aduws.roa
File: 0Om0y2WJnxnezCkTIkUnB1aduws.roa (raw, json)
Hash identifier: /h/ZFV7Tyfw4gvX/rM0qUi+sUrGWiAq4SLLKFNedki0=
Subject key identifier: D0:E9:B4:CB:65:89:9F:19:DE:CC:29:13:22:45:27:07:56:9D:BB:0B
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 0198AA1428D77A9B3AABC719FC58825A625A
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/0Om0y2WJnxnezCkTIkUnB1aduws.roa
Signing time: Thu 14 Aug 2025 19:35:04 +0000
ROA not before: Thu 14 Aug 2025 19:35:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401922
IP address blocks: 45.149.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:aa:14:28:d7:7a:9b:3a:ab:c7:19:fc:58:82:5a:62:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Aug 14 19:35:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0e9b4cb65899f19decc291322452707569dbb0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:49:4f:b2:34:b9:fe:c2:ce:c9:29:b1:c7:da:
a7:7f:2e:f9:27:5d:36:c0:5c:03:0e:c8:1e:8e:ad:
b9:53:e3:c6:aa:72:35:34:53:96:57:75:91:84:fa:
af:3d:78:de:c2:15:27:1e:40:d2:26:af:be:46:d9:
64:0e:27:18:90:ee:e6:bd:02:b4:e2:c9:ca:96:cb:
79:36:bd:46:2c:f0:e8:a4:d3:15:1a:18:ef:8b:69:
d7:41:f5:b1:66:54:2d:a6:e4:96:8a:7d:f0:4b:1a:
5f:80:99:92:93:da:97:9b:c8:18:d0:e0:54:4c:1f:
f0:94:ff:ff:23:bb:cb:90:32:94:6d:61:2f:c9:cf:
bc:51:92:4f:11:4b:9c:40:96:1b:00:0e:6b:70:f3:
6e:49:a8:5f:ae:13:d0:7a:bf:4b:bc:56:a4:fb:81:
a1:ad:76:32:a4:f9:d1:7b:00:c3:a7:71:85:ca:fa:
4c:5c:0a:07:41:a6:9d:1f:1d:4a:c6:e1:1d:1e:aa:
c8:3a:35:ef:4a:05:08:2d:06:03:a4:f7:2e:ae:03:
e4:63:4c:98:57:9b:a8:24:4b:40:f9:72:29:f5:34:
0d:bc:a8:9d:70:f5:b6:1b:79:0d:3d:6d:49:1c:30:
f9:59:cf:7f:7b:27:d0:b6:d7:66:16:21:a8:b5:05:
d2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E9:B4:CB:65:89:9F:19:DE:CC:29:13:22:45:27:07:56:9D:BB:0B
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/0Om0y2WJnxnezCkTIkUnB1aduws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.4.0/24
Signature Algorithm: sha256WithRSAEncryption
63:5d:4d:44:63:dd:6a:09:43:25:99:e3:a7:7e:5c:69:f8:37:
c1:26:16:20:66:31:2d:64:cb:db:99:e8:5e:3a:47:84:1e:41:
93:1a:24:f5:6f:58:80:44:64:65:c1:c4:c5:e9:64:35:ca:64:
6a:cc:ad:32:cb:fd:0d:d9:07:7c:84:3b:8b:60:67:41:d6:1c:
d7:56:8c:f8:70:55:c0:cb:66:5c:ab:91:df:e5:d9:1b:1e:47:
e1:32:b3:a5:73:e0:61:22:11:b9:bc:97:77:31:29:51:cc:47:
ed:f9:13:8c:7b:74:b5:bb:f1:16:07:23:85:75:c6:22:d9:61:
48:d8:2a:c1:2a:30:8e:0f:96:4d:5d:87:22:0c:07:c6:19:d8:
ad:15:d9:95:c1:b4:54:95:0e:fd:95:ae:62:2c:68:ef:31:a4:
f3:e4:59:95:fc:d9:3e:75:a4:b2:a4:53:41:a2:6b:7d:e2:a8:
6c:ab:00:27:c6:ab:53:d9:8a:a9:fc:b5:e5:68:de:37:01:2e:
45:53:66:41:e8:dd:fa:86:8d:7b:46:57:cf:ee:41:89:f0:25:
a1:92:d2:f3:5c:b4:11:56:62:79:cd:33:b4:72:a1:a6:98:66:
94:87:21:98:1c:3f:e5:cc:7b:59:59:fc:56:4d:80:00:03:fb:
16:03:89:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:05:22 2025 by rpki-client