Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/H21iUSfTQ-Als3x7YdNaSJDke-Q.roa
File: H21iUSfTQ-Als3x7YdNaSJDke-Q.roa (raw, json)
Hash identifier: TkJySFU5Lrr8Mz/1ct+dWDS3HxILWnBvIL8cVo73vF4=
Subject key identifier: 1F:6D:62:51:27:D3:43:E0:25:B3:7C:7B:61:D3:5A:48:90:E4:7B:E4
Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Certificate serial: 01975F4442613C4501C685E78801536E976C
Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/H21iUSfTQ-Als3x7YdNaSJDke-Q.roa
Signing time: Wed 11 Jun 2025 13:53:18 +0000
ROA not before: Wed 11 Jun 2025 13:53:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39521
IP address blocks: 45.10.16.0/23 maxlen: 24
45.10.18.0/24 maxlen: 24
45.88.5.0/24 maxlen: 24
45.88.6.0/24 maxlen: 24
45.88.7.0/24 maxlen: 24
45.95.40.0/24 maxlen: 24
45.95.41.0/24 maxlen: 24
45.130.100.0/22 maxlen: 22
83.229.34.0/24 maxlen: 24
95.178.107.0/24 maxlen: 24
185.144.56.0/22 maxlen: 24
217.194.153.0/24 maxlen: 24
2a05:e4c0::/32 maxlen: 32
2a05:e4c1::/32 maxlen: 32
2a05:e4c7::/36 maxlen: 36
2a07:3bc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:44:42:61:3c:45:01:c6:85:e7:88:01:53:6e:97:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Validity
Not Before: Jun 11 13:53:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f6d625127d343e025b37c7b61d35a4890e47be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:60:23:23:09:e9:96:98:be:89:88:a4:68:93:
02:c6:31:af:51:8d:93:24:42:39:75:4e:33:14:fa:
47:20:d3:75:df:5d:a7:90:a0:d7:c3:e3:6c:1b:45:
9e:63:f4:b5:f0:2b:d3:e7:c6:ae:3f:23:d6:76:52:
d5:ae:98:f7:64:0d:4c:e3:89:8a:e5:d5:f4:21:00:
d1:64:8f:32:c0:55:e3:8d:24:83:9e:a9:40:35:f9:
2a:74:c9:ab:7f:38:07:ce:22:93:f7:45:e9:fe:97:
e1:d7:50:b3:80:67:0f:a2:b2:b4:76:21:b3:d9:24:
22:3a:b7:26:75:3c:34:ff:6b:b1:19:ed:73:ec:8b:
b8:e4:cc:55:3d:f2:3e:ba:36:81:b4:d6:bf:17:d5:
08:9f:01:43:cd:3e:69:50:8f:af:13:27:2c:f6:cb:
e3:0d:ca:7e:94:23:37:92:96:c8:ed:f8:ac:1d:d5:
68:64:b3:e5:a4:06:2a:58:07:b8:b9:db:58:8a:24:
20:ec:c6:ee:a5:5b:bb:5d:7d:a5:1a:ea:d5:9e:dd:
aa:52:6a:6a:8a:3a:48:ba:e8:f6:46:a8:b3:83:88:
61:8b:11:37:9c:7d:c8:0b:23:64:a1:2d:d8:45:73:
20:61:59:4a:6f:b8:ad:7d:f7:77:24:43:03:07:67:
bd:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:6D:62:51:27:D3:43:E0:25:B3:7C:7B:61:D3:5A:48:90:E4:7B:E4
X509v3 Authority Key Identifier:
keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/H21iUSfTQ-Als3x7YdNaSJDke-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.16.0-45.10.18.255
45.88.5.0-45.88.7.255
45.95.40.0/23
45.130.100.0/22
83.229.34.0/24
95.178.107.0/24
185.144.56.0/22
217.194.153.0/24
IPv6:
2a05:e4c0::/31
2a05:e4c7::/36
2a07:3bc0::/29
Signature Algorithm: sha256WithRSAEncryption
17:3c:5b:b7:93:1b:80:12:b2:d4:bd:1d:d5:d4:39:61:d0:58:
55:86:a7:a2:b1:ba:95:69:1f:d9:18:e5:0f:c6:06:3e:cf:9f:
15:46:b9:f3:e6:21:06:5d:24:8b:e4:c2:27:e7:16:f4:a6:63:
79:a2:1a:45:ea:de:37:b3:5c:39:f5:99:5b:6c:43:22:f7:bc:
5d:33:2c:1c:e6:e7:be:8a:ee:5b:8c:93:78:68:c7:01:9f:b2:
3c:b5:c3:06:0e:44:a6:b9:18:8c:d0:c3:fe:5e:40:ec:63:6b:
f6:bd:7a:8b:b6:eb:98:7c:9c:8e:7c:84:1e:cf:cd:c0:3e:4c:
9b:f3:77:98:c6:80:a7:55:f3:70:0a:c9:e4:7b:ea:83:68:f3:
dc:0a:ec:f8:5b:f1:8a:17:da:fd:95:25:28:cc:ec:e7:86:f7:
b4:81:3a:10:a1:6e:f6:f0:ab:e6:6f:9c:72:e7:ca:a5:9c:4b:
04:8a:d6:7d:79:2f:71:9d:46:cd:e9:72:48:34:68:55:4e:e5:
27:1d:3b:40:03:69:fd:b2:96:c9:77:33:b5:d7:e7:76:45:b3:
27:3a:99:df:c9:8f:d5:d1:b0:68:e3:fe:24:ad:3f:70:f5:aa:
d0:1b:76:69:40:ea:f5:09:23:28:59:e6:d4:6b:b1:98:4f:41:
cd:d0:0d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 23:58:11 2025 by rpki-client