Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Dam2IUkAjEGgHYm1yj_XDafHGEI.roa
File: Dam2IUkAjEGgHYm1yj_XDafHGEI.roa (raw, json)
Hash identifier: suY3cagJv+3sgEkzGp3f+2gxRhbvjG5KW3/F//q7WD8=
Subject key identifier: 0D:A9:B6:21:49:00:8C:41:A0:1D:89:B5:CA:3F:D7:0D:A7:C7:18:42
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 01973731C5E594BE54BD0814E68FEE7DBF5C
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Dam2IUkAjEGgHYm1yj_XDafHGEI.roa
Signing time: Tue 03 Jun 2025 19:08:17 +0000
ROA not before: Tue 03 Jun 2025 19:08:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209309
IP address blocks: 45.84.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:37:31:c5:e5:94:be:54:bd:08:14:e6:8f:ee:7d:bf:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jun 3 19:08:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0da9b62149008c41a01d89b5ca3fd70da7c71842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1d:91:72:ff:39:da:4f:18:34:55:8f:4e:90:
7e:82:df:ec:05:c6:5b:7b:f6:bf:fe:f7:fc:53:61:
20:05:02:6b:ce:38:82:f5:12:d7:60:f2:ab:6a:9e:
0a:47:7c:fa:e1:20:3e:62:42:d9:2f:db:ab:54:60:
5d:12:fe:c7:78:1e:54:d4:f8:7f:c9:64:3f:37:bb:
98:02:3a:65:44:c1:ac:ce:f5:6f:8e:c6:86:cc:c9:
7d:b5:94:52:cd:34:8b:65:57:af:9b:0d:ab:a7:3c:
7a:00:21:99:0a:35:08:e8:14:ac:80:ab:c4:f9:c6:
59:5d:ae:a9:b5:3d:e5:90:9d:1e:66:9d:36:c8:bb:
f0:dc:4d:b7:8d:89:67:90:c8:ff:7f:f3:b9:56:81:
5c:3b:00:7a:5e:88:8e:7c:70:6e:0d:78:e3:8d:5f:
b1:07:15:3d:cd:d1:27:c7:bb:7d:6b:33:0d:09:5d:
5f:54:f4:00:5a:64:ca:df:7c:48:37:88:32:96:2a:
95:d2:a1:3a:54:65:77:19:26:9f:7e:eb:9b:2c:a9:
80:be:68:1b:4a:a7:5f:5a:a1:32:d6:1f:fb:a8:ab:
7d:f5:32:c1:81:6c:a5:2f:48:fc:ff:15:00:9f:20:
75:1c:3d:46:9a:01:a0:f7:dc:c7:4a:6b:d7:9a:30:
c3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A9:B6:21:49:00:8C:41:A0:1D:89:B5:CA:3F:D7:0D:A7:C7:18:42
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Dam2IUkAjEGgHYm1yj_XDafHGEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.178.0/24
Signature Algorithm: sha256WithRSAEncryption
84:9d:dc:19:6e:e9:e6:e9:ba:23:8f:56:88:69:00:39:de:a0:
26:02:58:a5:18:4a:7d:2f:86:9f:4a:8e:34:c1:df:10:a8:02:
d2:53:97:2c:28:00:53:d6:2a:82:d9:1f:40:67:52:fb:39:c9:
fc:4a:b3:9d:ea:c2:d9:47:dc:93:f9:27:23:06:7c:b9:ce:42:
ac:ac:67:61:b1:bf:f3:4e:1f:c6:f4:eb:44:bd:9f:68:42:43:
b8:22:e3:10:81:06:38:e6:be:c4:dd:ec:d1:fb:51:2d:e1:40:
83:52:1e:50:8a:2b:d5:09:37:1e:ff:f5:4b:f7:65:e7:e4:47:
d0:14:11:9b:4c:c4:80:28:76:a2:d4:c3:d4:70:ee:22:a4:0c:
95:1c:68:b8:12:85:ab:f2:bb:a2:4e:a0:5d:02:0d:95:68:68:
3c:27:18:d6:a9:d4:1c:90:73:93:4a:d4:5c:4a:09:88:f9:7f:
fa:92:0b:cd:55:59:35:b5:7c:10:02:75:22:5c:db:42:6b:9c:
6b:da:10:f5:23:b6:0a:86:8a:9c:c1:bb:fe:50:2d:fd:39:f0:
0d:ba:de:0e:02:30:37:54:43:20:d8:ce:19:83:6c:98:bd:99:
23:54:28:48:69:d4:89:88:f8:e6:ab:4f:06:75:15:4c:eb:d1:
d4:03:a0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 17:12:01 2025 by rpki-client