Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/d6Cbi-IFTZinYyaY6H1qLNndWLE.roa
File: d6Cbi-IFTZinYyaY6H1qLNndWLE.roa (raw, json)
Hash identifier: O9g6m4/ceR4XThjA9K3G2Bq4kWgZs1KtxfP0jbRYZdc=
Subject key identifier: 77:A0:9B:8B:E2:05:4D:98:A7:63:26:98:E8:7D:6A:2C:D9:DD:58:B1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0197450D71C07A46337488A9E46A16DD941C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/d6Cbi-IFTZinYyaY6H1qLNndWLE.roa
Signing time: Fri 06 Jun 2025 11:43:18 +0000
ROA not before: Fri 06 Jun 2025 11:43:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 45.12.255.0/24 maxlen: 24
87.121.58.0/24 maxlen: 24
94.103.127.0/24 maxlen: 24
94.156.79.0/24 maxlen: 24
94.156.253.0/24 maxlen: 24
141.98.4.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:0d:71:c0:7a:46:33:74:88:a9:e4:6a:16:dd:94:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 6 11:43:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77a09b8be2054d98a7632698e87d6a2cd9dd58b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:99:f4:ff:d8:3e:91:ed:91:86:ef:89:b5:c9:
84:bd:dd:09:5d:d7:17:ad:31:81:80:19:61:94:e9:
f1:67:73:56:24:75:27:19:3f:b1:e4:d1:2e:45:9d:
8b:60:de:2f:35:1a:66:a4:ec:5d:72:b9:81:13:8b:
36:71:a1:bf:83:e3:f1:ad:79:2b:2d:54:43:e7:43:
63:11:4f:46:7f:71:ad:8a:85:89:ac:0c:0b:44:54:
c7:4a:a2:8d:5e:5d:aa:da:ae:4f:94:31:e2:17:31:
fe:c7:15:ef:30:e0:f5:02:c7:3c:79:b6:9e:7e:57:
62:d3:90:5c:19:ed:51:41:4d:55:40:80:c9:73:1a:
a8:87:b8:f3:15:2c:50:e9:a9:c5:bd:91:e6:1c:70:
d7:c3:ca:1b:15:69:ed:44:bd:62:89:d1:d2:44:c0:
f4:f1:c7:dd:71:38:f0:bc:03:57:23:4a:d0:a1:59:
29:a1:27:5b:c5:73:bf:20:fd:11:fd:95:d8:9a:aa:
d0:f6:7b:ea:3f:73:4c:4f:68:fb:7d:0c:45:45:d1:
20:c6:f0:ba:13:3a:2a:03:58:39:84:0c:28:13:9a:
7f:e3:30:79:c9:11:22:aa:c3:bd:66:2a:70:9c:ca:
b3:c7:57:0f:52:3b:16:3d:98:28:f4:ab:2b:8e:27:
6e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A0:9B:8B:E2:05:4D:98:A7:63:26:98:E8:7D:6A:2C:D9:DD:58:B1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/d6Cbi-IFTZinYyaY6H1qLNndWLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.255.0/24
87.121.58.0/24
94.103.127.0/24
94.156.79.0/24
94.156.253.0/24
141.98.4.0/24
147.78.100.0/24
Signature Algorithm: sha256WithRSAEncryption
80:55:10:09:43:d4:b9:ef:ba:02:ba:c4:09:19:2a:68:04:c4:
3a:31:a8:5f:c1:8f:ef:56:53:49:dc:5e:f8:40:70:8a:9c:e4:
12:22:b5:fb:83:91:de:0f:05:2a:5f:8b:d3:df:a9:84:2d:78:
35:3d:6d:3f:f5:c5:8e:0d:9f:45:54:9a:22:d8:6f:a3:7b:00:
91:9f:06:a2:99:f9:f9:59:42:c8:b7:d3:c9:0a:06:a1:94:88:
99:6c:58:c7:ae:ea:35:7c:0f:07:d3:95:f0:95:a4:9d:c3:ab:
5e:a3:04:08:dd:a3:2b:b7:36:84:dc:f0:cf:81:90:b1:df:0f:
57:8c:1b:e1:00:cc:9d:ed:8f:ef:d5:9b:13:e0:53:c3:ac:a6:
d4:61:95:be:30:0a:76:05:2d:4d:cc:46:b6:15:00:3a:4e:e9:
2d:75:05:d9:e9:b2:1a:6d:91:d7:ae:52:dc:6c:dc:12:73:23:
13:7c:14:84:07:f4:76:3d:71:e4:2c:1a:92:4f:66:93:b3:a3:
4b:0c:9e:df:48:71:c2:ec:ed:92:56:9a:9d:e8:f4:36:a9:7e:
b5:d4:cc:8b:79:13:07:36:7c:ad:45:e7:c9:fd:60:d1:51:a7:
44:d9:c4:64:87:bc:46:87:0b:ab:7b:fb:82:5f:7d:c4:5b:75:
5c:cf:6e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:04:48 2025 by rpki-client