Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/XG93R1xINi7C6SrhumX6MiWAq88.roa
File: XG93R1xINi7C6SrhumX6MiWAq88.roa (raw, json)
Hash identifier: XOjGPfSrqWc5xIUzp721pfYlFMgLfM8BffPNX+09aIw=
Subject key identifier: 5C:6F:77:47:5C:48:36:2E:C2:E9:2A:E1:BA:65:FA:32:25:80:AB:CF
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 0197596F06DA27C3417FED06243D47B42F81
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/XG93R1xINi7C6SrhumX6MiWAq88.roa
Signing time: Tue 10 Jun 2025 10:42:17 +0000
ROA not before: Tue 10 Jun 2025 10:42:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211659
IP address blocks: 45.89.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 01:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:6f:06:da:27:c3:41:7f:ed:06:24:3d:47:b4:2f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jun 10 10:42:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c6f77475c48362ec2e92ae1ba65fa322580abcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e9:23:a8:3a:e6:03:23:6d:3e:5b:df:62:2e:
52:eb:53:cf:d6:ee:db:23:99:71:57:23:ec:1f:34:
eb:81:ee:a6:c4:8f:c8:37:bd:fd:fe:da:e4:26:78:
87:de:3c:72:dc:85:d6:a8:6a:d5:29:ac:a0:a0:5a:
14:cb:e9:4d:d7:2a:b2:14:85:8f:5e:c5:c9:33:d2:
0d:bb:89:ec:c2:40:7b:8e:05:de:20:f6:e2:d9:19:
5c:c6:32:b4:f9:52:62:19:33:05:04:f1:03:ee:d4:
e3:73:41:2d:3e:09:12:9c:45:77:8d:ee:bd:b2:5d:
7c:c2:aa:4e:a2:47:34:b5:7c:a1:80:74:4c:02:5b:
e5:94:4e:2a:6f:68:d6:fd:b3:1a:58:1a:4c:15:d5:
c5:1d:3b:8d:41:17:37:9f:05:83:8a:6d:99:95:2f:
28:36:ca:d4:6c:f2:71:74:15:82:4a:29:f8:b6:f3:
cf:c8:35:11:fb:e2:00:b8:fb:ac:3d:be:b5:9b:42:
6d:0d:f7:a6:3c:fd:94:6e:d1:ee:54:c9:0c:14:6b:
25:46:d5:de:f1:ed:0d:e5:b8:0e:20:06:13:f8:ed:
00:5f:b6:44:d5:ac:11:c2:b1:ca:92:0f:36:fe:5b:
49:18:fe:26:69:45:ca:27:a7:dc:92:87:3f:00:1d:
52:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:6F:77:47:5C:48:36:2E:C2:E9:2A:E1:BA:65:FA:32:25:80:AB:CF
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/XG93R1xINi7C6SrhumX6MiWAq88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.70.0/24
Signature Algorithm: sha256WithRSAEncryption
98:1f:d0:6e:b2:e7:c0:10:7f:a3:1f:b4:ce:59:61:fd:9a:4e:
bf:b5:50:fe:d6:b4:7e:fe:28:f3:87:c3:40:8b:03:4f:b7:d3:
c4:7e:4f:d1:2a:90:ad:6d:ea:5a:ee:4d:a6:4c:5a:e5:64:b0:
27:78:13:e1:06:b6:cb:d6:ca:ba:2a:ac:07:50:44:58:4f:f0:
23:c4:67:ba:80:94:7b:45:3d:59:58:a3:3f:1a:9a:70:40:bd:
6c:8e:40:e7:f2:aa:8f:e5:6d:0b:a8:9f:03:2e:7d:83:a9:75:
74:97:ae:8e:d7:c8:d2:ec:48:56:08:ae:44:be:cc:41:6a:c3:
91:29:7b:e1:96:50:90:01:8f:a7:6d:f8:b4:f2:b7:10:f9:93:
d0:1a:85:1c:53:db:d5:da:7f:d4:d7:63:00:3b:1a:83:b4:d8:
e2:b1:c0:4d:10:ca:b7:61:44:11:70:7a:5d:43:6e:7c:46:e1:
1c:b5:5d:04:ae:6b:4b:1e:fe:ff:fb:97:5e:8f:dc:b2:4e:48:
a9:d1:ee:6c:2f:ea:50:1b:35:d6:ee:a3:6b:05:25:ef:fe:2a:
6a:9a:c8:00:42:06:4f:33:0d:11:f9:9a:81:60:b5:75:fe:38:
2c:40:a4:31:df:4c:9b:82:dc:8a:78:3e:3a:d1:d1:c9:41:e1:
82:2e:6e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:25:22 2025 by rpki-client