Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/fElevQMeA66EYnX4TOah6qZ4orc.roa
File: fElevQMeA66EYnX4TOah6qZ4orc.roa (raw, json)
Hash identifier: l0dvNWLa/5diDG7joAf6hbFYEzJbHt8QAqtqLdD7N0Q=
Subject key identifier: 7C:49:5E:BD:03:1E:03:AE:84:62:75:F8:4C:E6:A1:EA:A6:78:A2:B7
Certificate issuer: /CN=4413bdf4dc7435faf51ba934d65570f71c21731a
Certificate serial: 01976A49E75B705B0ECE91B054D15F3A305D
Authority key identifier: 44:13:BD:F4:DC:74:35:FA:F5:1B:A9:34:D6:55:70:F7:1C:21:73:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBO99Nx0Nfr1G6k01lVw9xwhcxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/fElevQMeA66EYnX4TOah6qZ4orc.roa
Signing time: Fri 13 Jun 2025 17:15:17 +0000
ROA not before: Fri 13 Jun 2025 17:15:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43648
IP address blocks: 45.131.236.0/22 maxlen: 24
185.78.16.0/22 maxlen: 24
2a05:6680::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RBO99Nx0Nfr1G6k01lVw9xwhcxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:49:e7:5b:70:5b:0e:ce:91:b0:54:d1:5f:3a:30:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4413bdf4dc7435faf51ba934d65570f71c21731a
Validity
Not Before: Jun 13 17:15:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c495ebd031e03ae846275f84ce6a1eaa678a2b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:73:44:9a:86:14:65:49:5b:fd:20:10:a4:72:
d3:b0:ed:04:a2:6c:46:8a:ca:23:87:b6:1c:c1:df:
1f:a3:a4:7b:29:12:fb:d2:66:35:41:a4:be:ad:ee:
3f:94:1a:6d:1a:0a:da:7a:3c:54:83:d2:9b:5d:24:
5c:0c:b0:1a:bc:e9:cc:7e:c0:94:5d:37:ea:f6:65:
af:f3:fc:c5:02:96:4e:eb:4b:90:9f:3b:69:48:bb:
a2:f9:39:8a:35:88:65:be:8c:f0:d5:a5:39:ac:71:
24:f7:ab:4c:de:d9:3f:a1:c2:58:9a:6d:6c:78:3f:
f9:11:42:90:dd:42:54:14:89:6b:64:fc:fd:c6:40:
bd:fb:a7:e5:54:03:a1:29:78:cb:e5:a6:6e:64:01:
9d:3a:2a:52:12:66:57:b6:cf:d7:40:7f:a4:13:e6:
88:31:a0:aa:3a:70:34:38:46:f0:2b:70:33:88:a1:
5f:bd:2a:0b:40:08:1e:51:94:b8:99:77:52:ec:e4:
b3:92:be:af:46:15:a6:33:9b:4f:d5:1a:2f:8c:f9:
ee:d6:90:31:05:00:41:cc:9f:e2:eb:0b:49:31:f1:
a1:04:1e:18:50:86:31:89:e5:70:e2:15:b7:75:28:
de:e8:4b:da:94:c5:88:74:8e:e7:b2:b1:1e:4d:56:
76:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:49:5E:BD:03:1E:03:AE:84:62:75:F8:4C:E6:A1:EA:A6:78:A2:B7
X509v3 Authority Key Identifier:
keyid:44:13:BD:F4:DC:74:35:FA:F5:1B:A9:34:D6:55:70:F7:1C:21:73:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBO99Nx0Nfr1G6k01lVw9xwhcxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/fElevQMeA66EYnX4TOah6qZ4orc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.236.0/22
185.78.16.0/22
IPv6:
2a05:6680::/29
Signature Algorithm: sha256WithRSAEncryption
b9:fc:78:b2:fd:99:e5:4a:14:18:99:3b:85:3d:54:a5:b4:4f:
a2:a5:23:e1:9d:db:f6:8b:6e:ca:68:f9:f8:15:b4:cb:ff:2c:
d1:5a:35:7a:d8:84:bc:3c:d7:f2:6d:74:fc:d0:58:bb:41:ad:
1f:11:fa:48:47:4a:40:fe:a0:08:c5:9a:74:28:17:9c:48:2e:
d1:23:55:e9:36:77:e4:82:64:0b:d2:44:20:51:a0:c4:e4:ac:
5d:b0:f2:21:fe:5a:00:c3:95:71:ad:eb:31:3c:d0:7b:db:a8:
8a:56:31:c4:9f:4f:26:d6:b9:5e:72:6f:e2:d9:81:8c:c8:9b:
d5:42:82:69:ad:c9:72:05:85:14:d2:09:d4:01:12:a3:52:f7:
ba:6b:7b:c4:49:e4:c7:35:e1:cb:96:ce:c6:3b:27:92:94:53:
44:68:de:e6:cb:42:9b:7b:67:3e:71:fa:a1:2f:c0:59:2b:29:
ea:ad:7d:fc:0f:e5:bf:19:35:73:7f:1b:89:f6:4f:4a:11:5f:
b1:fe:5a:98:49:0f:5c:d2:fe:e0:9b:eb:8e:9a:6e:7e:38:d6:
3c:43:66:1b:9b:8f:84:19:c6:38:65:c9:5a:ed:f2:be:8a:59:
97:21:4d:5c:b0:b5:1f:f8:7b:78:f1:e3:f7:7f:fc:6a:95:39:
cc:b5:36:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:19:41 2025 by rpki-client