Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/hsQ4udqhd3CDOiPfjyr8JgPJyXc.roa
File: hsQ4udqhd3CDOiPfjyr8JgPJyXc.roa (raw, json)
Hash identifier: oPELY5Sl7Y5XVMhOoMTrOYox06ROymGc0Scauk3hTBg=
Subject key identifier: 86:C4:38:B9:DA:A1:77:70:83:3A:23:DF:8F:2A:FC:26:03:C9:C9:77
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 0197A0B284B8CAB755B24A62CD256D3463C9
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/hsQ4udqhd3CDOiPfjyr8JgPJyXc.roa
Signing time: Tue 24 Jun 2025 06:49:03 +0000
ROA not before: Tue 24 Jun 2025 06:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.155.240.0/24 maxlen: 24
45.155.241.0/24 maxlen: 24
45.155.242.0/24 maxlen: 24
194.143.205.0/24 maxlen: 24
194.143.206.0/23 maxlen: 24
194.143.210.0/24 maxlen: 24
194.143.217.0/24 maxlen: 24
194.143.218.0/24 maxlen: 24
194.143.221.0/24 maxlen: 24
195.114.192.0/24 maxlen: 24
195.114.195.0/24 maxlen: 24
195.114.197.0/24 maxlen: 24
195.114.198.0/24 maxlen: 24
195.114.203.0/24 maxlen: 24
213.220.2.0/24 maxlen: 24
213.220.4.0/24 maxlen: 24
213.220.5.0/24 maxlen: 24
213.220.9.0/24 maxlen: 24
213.220.20.0/24 maxlen: 24
213.220.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a0:b2:84:b8:ca:b7:55:b2:4a:62:cd:25:6d:34:63:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Jun 24 06:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=86c438b9daa17770833a23df8f2afc2603c9c977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1b:b8:85:52:cb:df:d8:2b:72:d8:a0:94:28:
4b:e5:56:58:7e:53:75:4d:47:f9:e4:73:d0:0a:3a:
42:5c:ec:d5:23:c8:36:57:af:00:aa:c0:a3:fe:d0:
6e:ec:8d:f0:80:97:27:32:78:b1:00:65:de:2c:a9:
87:73:d7:2d:65:d8:d3:ad:28:f7:74:39:96:fa:34:
2d:2d:ee:8c:39:68:4b:5e:56:1c:d1:62:2a:34:70:
58:01:2d:96:30:a1:d5:56:95:64:4d:09:77:7b:7a:
56:98:3a:4a:6f:ac:78:4e:dd:87:8a:f0:bd:a8:00:
e4:2b:d9:78:27:85:0f:d0:0b:ff:18:40:16:a5:d2:
72:0b:48:a1:d4:1b:9f:26:56:c7:59:a7:ec:7b:bc:
32:6c:9c:b9:51:c2:71:d7:25:e6:2a:7f:e7:4f:96:
43:cd:74:ad:83:34:a9:4c:8c:31:74:f0:a0:ae:4f:
32:ab:a6:8f:de:b5:41:91:ce:2a:22:a7:3b:a1:86:
79:be:74:e8:43:44:5d:b0:c6:4a:1c:2a:35:44:4d:
44:12:4a:05:6f:4f:58:8d:cc:d7:9e:e6:f9:a2:9a:
6d:a1:31:c7:8d:94:30:b4:c9:1a:b2:77:28:56:81:
90:98:bd:41:7c:66:3e:25:ac:75:b8:58:58:b6:cb:
55:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C4:38:B9:DA:A1:77:70:83:3A:23:DF:8F:2A:FC:26:03:C9:C9:77
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/hsQ4udqhd3CDOiPfjyr8JgPJyXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.240.0-45.155.242.255
194.143.205.0-194.143.207.255
194.143.210.0/24
194.143.217.0-194.143.218.255
194.143.221.0/24
195.114.192.0/24
195.114.195.0/24
195.114.197.0-195.114.198.255
195.114.203.0/24
213.220.2.0/24
213.220.4.0/23
213.220.9.0/24
213.220.20.0/24
213.220.62.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:9c:eb:aa:2b:7f:90:14:fb:80:d4:9e:01:ac:e8:f0:fa:99:
d9:c7:5a:de:27:06:a5:11:77:c1:7a:98:3d:45:86:2e:ed:b4:
e3:69:76:a3:9b:88:3b:ab:4f:aa:57:7d:c7:5e:f3:12:43:13:
90:41:c1:a8:53:a5:b0:21:34:48:22:61:15:17:c9:ac:5c:01:
b5:d4:25:da:0c:f6:58:f6:9c:55:77:ea:f8:24:1c:cb:a0:d4:
bd:86:f9:16:6d:55:17:ff:b0:08:ee:b4:65:c8:9e:f4:41:2b:
82:36:3d:d6:cc:48:a5:27:ec:27:c1:c9:f0:50:6e:70:7f:84:
35:21:a6:c6:54:7d:5c:e3:72:7d:16:f9:ab:55:ad:2c:0f:cd:
42:83:d6:44:34:04:b4:cf:89:df:8b:64:19:cc:d4:89:1a:50:
b1:d2:79:73:c3:1b:07:87:7e:a4:43:a2:06:d7:ec:d1:2b:37:
9e:6b:10:34:de:59:9e:d4:2e:26:ae:9a:76:16:f7:99:49:75:
85:51:59:8e:f8:8f:7f:b1:33:f5:44:b9:40:2b:c4:73:19:9c:
54:d4:58:29:bb:5f:d4:76:86:39:0d:0f:47:11:58:01:d9:29:
30:e9:f4:c3:88:24:2a:c0:fd:1f:89:aa:90:84:ba:1e:2d:7b:
a3:d5:5b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:37:06 2025 by rpki-client