Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/j0TS7sWufeH5UA9R8L5Lar1dfN8.roa
File: j0TS7sWufeH5UA9R8L5Lar1dfN8.roa (raw, json)
Hash identifier: 4uoOp+ywbPIH2GvAsL/CI2u9RgmZPn6i2PjYhgr/qBg=
Subject key identifier: 8F:44:D2:EE:C5:AE:7D:E1:F9:50:0F:51:F0:BE:4B:6A:BD:5D:7C:DF
Certificate issuer: /CN=f1b8bbb1e186a599d4cc058cabf4df0e252f31fa
Certificate serial: 01975F37DDEABEA0DEF3B16A801515BF0260
Authority key identifier: F1:B8:BB:B1:E1:86:A5:99:D4:CC:05:8C:AB:F4:DF:0E:25:2F:31:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/j0TS7sWufeH5UA9R8L5Lar1dfN8.roa
Signing time: Wed 11 Jun 2025 13:39:46 +0000
ROA not before: Wed 11 Jun 2025 13:39:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56971
IP address blocks: 45.11.92.0/24 maxlen: 32
45.11.93.0/24 maxlen: 32
45.11.94.0/24 maxlen: 32
45.145.6.0/24 maxlen: 32
45.152.86.0/24 maxlen: 32
193.43.72.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:37:dd:ea:be:a0:de:f3:b1:6a:80:15:15:bf:02:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b8bbb1e186a599d4cc058cabf4df0e252f31fa
Validity
Not Before: Jun 11 13:39:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f44d2eec5ae7de1f9500f51f0be4b6abd5d7cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:38:64:6c:69:39:d8:fa:68:1a:28:8f:98:1d:
bc:49:5d:97:eb:a5:a1:52:7a:a8:24:98:39:0b:e7:
18:a1:01:90:c2:e6:25:70:60:23:74:72:a9:f8:06:
65:4f:55:cd:c6:ea:49:12:09:12:3c:e9:06:ae:79:
3f:cb:64:1e:24:9c:2c:70:73:08:d9:d3:23:8d:3e:
d4:01:81:d6:14:87:b7:e2:6f:89:10:6f:fb:0c:be:
61:61:9e:c4:87:59:cd:f7:1b:7a:62:64:e7:44:55:
b3:e0:73:5a:69:37:3c:66:35:90:d2:36:63:8a:94:
fe:06:cc:55:ad:fd:79:f5:e8:db:a1:59:41:24:5d:
1c:89:e1:72:e2:a1:67:9b:ec:38:01:1c:ff:db:65:
75:b1:06:cf:4c:36:c7:5a:76:b5:e2:f7:2d:87:ef:
0c:5f:eb:27:5d:bf:e7:15:50:25:6b:2d:81:be:d7:
c0:ce:d3:b6:24:e7:eb:dc:2a:c7:f4:79:1e:1a:20:
c3:aa:bf:73:d4:1b:1a:8e:1c:61:d5:6a:46:b2:bb:
48:d1:59:8b:84:f2:f2:36:8e:68:7d:51:7a:83:5e:
db:fd:0f:f5:9f:63:8a:ee:2a:78:17:9b:57:87:df:
82:f9:1f:0e:68:c6:1f:28:de:c3:6f:bc:e2:de:1d:
e7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:44:D2:EE:C5:AE:7D:E1:F9:50:0F:51:F0:BE:4B:6A:BD:5D:7C:DF
X509v3 Authority Key Identifier:
keyid:F1:B8:BB:B1:E1:86:A5:99:D4:CC:05:8C:AB:F4:DF:0E:25:2F:31:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/j0TS7sWufeH5UA9R8L5Lar1dfN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.92.0-45.11.94.255
45.145.6.0/24
45.152.86.0/24
193.43.72.0/24
Signature Algorithm: sha256WithRSAEncryption
96:a3:bb:74:cf:4b:0f:8a:e8:28:ea:64:2b:8c:13:dd:c6:fc:
07:19:57:be:41:4d:1a:08:a8:b6:03:9e:d9:4b:ff:6d:43:38:
17:dd:e6:54:73:b3:cb:6e:44:f4:43:70:16:d5:17:f0:9f:be:
dc:2f:9a:d2:2e:84:5b:1d:b2:db:50:92:48:b0:b3:55:28:4d:
b6:a4:b4:2f:8d:84:8b:d5:ed:af:9d:26:62:04:c7:7c:9b:16:
0e:fa:e7:38:95:8a:c2:05:ab:32:24:58:d4:af:fc:6c:73:7a:
c8:b6:69:34:f6:d6:d1:a4:44:5a:6e:e7:fa:d1:d1:10:dd:e4:
e0:76:01:c0:bf:dd:89:a5:fe:74:bb:6c:fb:bf:f4:24:3e:00:
2e:6b:9b:b6:ae:92:1f:c7:89:7d:09:10:be:15:ff:7a:e2:39:
6f:e3:59:ce:9a:dd:4b:f2:d8:d4:c5:f7:4c:81:b6:be:e7:e6:
6c:d0:db:41:3b:28:5e:24:52:fb:38:08:d9:1a:a5:2a:6c:e7:
f9:46:ef:46:c7:85:71:d5:0b:1c:11:fc:a0:17:0b:ea:43:66:
da:1f:5a:73:2f:7d:57:52:7d:07:3e:1c:7d:78:e3:60:c0:e2:
fd:29:b1:ab:f7:62:d3:98:0c:28:54:b2:00:da:a4:f4:d8:f4:
14:b7:74:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:39:03 2025 by rpki-client