Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/pv2iRcEvGYzf08DLjeydaW_V3IQ.roa
File: pv2iRcEvGYzf08DLjeydaW_V3IQ.roa (raw, json)
Hash identifier: o0ame8S62inoRctHTPezl4cm8Q5eMbsn9LNmNr1Kn64=
Subject key identifier: A6:FD:A2:45:C1:2F:19:8C:DF:D3:C0:CB:8D:EC:9D:69:6F:D5:DC:84
Certificate issuer: /CN=d2323101b29596ff442d3749373b8e9983354670
Certificate serial: 019856C8FC518518A81B4785858C4A9E1CF6
Authority key identifier: D2:32:31:01:B2:95:96:FF:44:2D:37:49:37:3B:8E:99:83:35:46:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jIxAbKVlv9ELTdJNzuOmYM1RnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/pv2iRcEvGYzf08DLjeydaW_V3IQ.roa
Signing time: Tue 29 Jul 2025 15:24:29 +0000
ROA not before: Tue 29 Jul 2025 15:24:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39728
IP address blocks: 45.152.24.0/22 maxlen: 24
45.152.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jIxAbKVlv9ELTdJNzuOmYM1RnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:c8:fc:51:85:18:a8:1b:47:85:85:8c:4a:9e:1c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2323101b29596ff442d3749373b8e9983354670
Validity
Not Before: Jul 29 15:24:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a6fda245c12f198cdfd3c0cb8dec9d696fd5dc84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1a:31:29:37:5c:0b:76:13:74:b1:c4:82:e6:
40:25:e2:30:dc:3a:15:ec:84:79:61:32:ad:22:dc:
ae:94:26:df:8f:6a:dc:3f:6c:ea:51:85:fb:44:c0:
ee:69:0d:37:72:02:33:eb:bb:03:fa:d4:79:23:e5:
5a:27:32:c9:03:30:23:c1:3b:9c:84:c7:0a:48:22:
d8:8b:68:cf:6e:ee:f1:32:a9:46:77:49:f6:e7:06:
83:2e:05:a5:17:4b:b2:5d:3c:5f:4a:83:d9:12:28:
92:a3:38:2b:76:9c:09:fb:41:64:66:a1:f8:9d:29:
b9:29:23:cf:a2:29:b5:da:24:4c:9a:64:50:32:83:
53:47:d8:f8:8e:f0:82:19:45:96:26:27:98:38:7e:
c5:41:2b:15:66:30:74:2f:0c:8d:04:2d:a0:0b:25:
2a:48:74:7e:80:bd:33:d8:12:ec:ca:c4:fb:14:a0:
e0:f3:90:4b:64:a7:07:75:c8:9f:dd:cd:41:a1:f5:
54:86:16:f7:91:2c:b9:27:41:cf:fc:9d:72:f4:6d:
b8:7b:41:67:f5:52:f4:78:24:72:e8:ae:11:35:24:
7d:5e:10:03:6e:c4:55:be:b6:d8:c7:0b:dc:6e:91:
0b:a6:87:c9:0e:e5:e7:98:c7:96:a9:5f:9c:91:60:
7b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:FD:A2:45:C1:2F:19:8C:DF:D3:C0:CB:8D:EC:9D:69:6F:D5:DC:84
X509v3 Authority Key Identifier:
keyid:D2:32:31:01:B2:95:96:FF:44:2D:37:49:37:3B:8E:99:83:35:46:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jIxAbKVlv9ELTdJNzuOmYM1RnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/pv2iRcEvGYzf08DLjeydaW_V3IQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.24.0/22
Signature Algorithm: sha256WithRSAEncryption
76:fe:36:6c:9a:40:c5:c5:81:3d:4d:39:32:99:2a:50:eb:02:
fd:e0:b3:e5:c2:d9:89:bb:32:10:d3:b0:b1:27:cd:13:fc:2b:
e0:70:17:0a:5e:f4:e6:b2:23:5f:1c:20:ec:5f:2d:2b:5a:ad:
75:b8:4c:97:a9:d6:b7:f3:63:ff:4a:af:95:a2:04:35:ad:0b:
7b:84:91:3b:ad:54:f8:9a:2c:f2:b3:77:c0:8c:4b:a5:88:a2:
d0:3b:e4:f2:ba:90:ed:c2:e6:2a:7b:eb:91:0e:83:03:00:8e:
f6:39:7b:6d:b1:46:62:16:8a:ab:ed:8b:d1:38:60:b3:48:63:
bf:75:13:76:f3:94:3f:2a:48:32:a6:22:28:06:2f:6e:d4:e6:
ef:5a:56:fb:9a:5e:7d:b3:a6:8a:a0:6b:79:fb:bf:28:9f:8f:
88:aa:a7:82:35:3f:80:14:ca:55:69:c9:51:c9:5d:90:f6:30:
60:c7:98:1b:48:b1:c4:3f:80:ce:37:11:ac:48:28:30:95:da:
d8:9f:a1:25:28:17:f0:8f:49:9d:87:fb:ea:d2:61:ed:3f:fe:
6c:8b:b0:19:f0:dc:c3:c1:aa:85:4c:31:83:14:d9:6c:1a:93:
f8:39:5e:c7:a4:63:21:18:38:5f:23:0b:49:99:01:06:06:a2:
9c:23:ea:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 11:50:38 2025 by rpki-client