Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/dqoXOmYtLktadt9t77Vga0oZ3ak.roa
File: dqoXOmYtLktadt9t77Vga0oZ3ak.roa (raw, json)
Hash identifier: chC6NGbZZNFg9HQVBofvVOgVsfGvh3dG96OgkPCj2TI=
Subject key identifier: 76:AA:17:3A:66:2D:2E:4B:5A:76:DF:6D:EF:B5:60:6B:4A:19:DD:A9
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 0197A6A316B3C97DEC20C4348554720B28C5
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/dqoXOmYtLktadt9t77Vga0oZ3ak.roa
Signing time: Wed 25 Jun 2025 10:29:55 +0000
ROA not before: Wed 25 Jun 2025 10:29:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.140.58.0/24 maxlen: 24
212.81.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a6:a3:16:b3:c9:7d:ec:20:c4:34:85:54:72:0b:28:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Jun 25 10:29:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=76aa173a662d2e4b5a76df6defb5606b4a19dda9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7d:85:16:63:e8:83:57:96:48:d8:a0:3f:4c:
8d:cd:24:86:2a:b7:23:3a:0b:36:62:c5:5a:30:5c:
11:2f:2a:33:8c:47:24:37:f3:04:44:29:42:99:5e:
e3:57:56:b6:fd:13:a2:7f:ef:56:d0:75:bc:14:75:
8e:a2:97:08:58:34:ef:d8:f7:fc:da:36:fe:04:f9:
e0:ab:87:5d:e9:3e:87:3e:9f:87:08:1b:da:c1:9e:
29:25:22:4e:8f:3e:71:58:cd:c3:c9:dd:96:9a:0a:
32:13:13:bd:8a:77:97:66:9c:bf:d9:cc:3a:87:f7:
90:74:c4:31:95:f1:b8:9e:c3:a0:9a:94:e3:d9:0a:
e0:4e:b0:fc:74:e0:d2:0f:88:f8:d9:18:97:ea:00:
b1:7b:50:89:95:c9:d2:48:63:cc:f9:14:9b:75:1c:
e5:38:96:a6:0b:61:37:0d:62:a0:87:dd:b7:5a:1b:
78:b1:89:6a:ae:a9:9f:b4:db:7b:2d:c7:f9:79:d3:
dd:32:0d:41:2e:db:45:da:e2:3e:76:87:96:23:a0:
9a:2c:1e:80:22:bb:e3:7c:be:b0:e2:44:91:f0:98:
13:11:52:c5:6b:7c:a1:51:eb:4b:15:fe:92:ed:68:
9c:6b:e1:df:c4:1c:06:4d:de:2a:5f:7e:63:ad:8f:
db:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:AA:17:3A:66:2D:2E:4B:5A:76:DF:6D:EF:B5:60:6B:4A:19:DD:A9
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/dqoXOmYtLktadt9t77Vga0oZ3ak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.58.0/24
212.81.45.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:f6:42:c0:ff:df:cb:e6:11:ca:05:a3:f7:f1:50:71:09:94:
ae:12:b1:f3:8d:70:a1:5b:cc:66:b5:7d:59:7f:42:e7:70:cc:
bc:92:87:ef:d4:29:f8:51:6c:94:d9:b8:62:e8:d6:2c:0a:40:
17:5f:43:70:eb:4b:a6:5e:7c:76:4e:bb:fe:a0:36:7c:ae:c3:
9d:5a:0a:78:1d:ab:01:da:56:a0:a5:4c:e4:75:6f:53:e9:02:
08:f5:1c:fe:cb:70:f8:c0:57:c1:21:e0:b3:a7:3d:0d:a3:81:
c4:91:86:bb:23:a4:63:5a:f5:27:e1:c0:ce:f4:8f:fa:98:47:
bc:9d:84:58:4c:d6:3d:1a:75:b5:07:86:72:af:d8:17:43:a6:
2b:44:b8:1e:ce:83:e3:90:08:08:cc:55:8b:cb:1d:d3:bc:66:
a4:da:ab:50:7d:17:b0:1b:5d:ac:d4:33:78:89:81:d7:ad:4f:
77:0a:1d:56:a3:27:8c:72:7a:f8:9b:96:3b:27:58:be:23:b5:
2e:b5:09:ce:3b:43:d7:c2:45:64:5a:d2:db:03:c5:31:65:61:
60:c3:a2:02:ba:02:9f:ff:bd:cb:ba:97:6c:b4:4d:37:44:26:
9c:9c:21:ec:ed:e5:d0:6e:6d:b3:7d:3e:f2:99:08:32:25:95:
60:bc:28:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:45:28 2025 by rpki-client