Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/obwuDGZRsjVjSAo46AMsWmWR1jA.roa
File: obwuDGZRsjVjSAo46AMsWmWR1jA.roa (raw, json)
Hash identifier: xUyV2Qale6f2SuRql6l1G8kbFKx2cMbj7RmWEfQSRVs=
Subject key identifier: A1:BC:2E:0C:66:51:B2:35:63:48:0A:38:E8:03:2C:5A:65:91:D6:30
Certificate issuer: /CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Certificate serial: 01983C61FB5C93EA100DAD769D4DE213BBE0
Authority key identifier: 59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/obwuDGZRsjVjSAo46AMsWmWR1jA.roa
Signing time: Thu 24 Jul 2025 12:21:50 +0000
ROA not before: Thu 24 Jul 2025 12:21:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30633
IP address blocks: 84.37.32.0/23 maxlen: 24
84.37.46.0/23 maxlen: 24
84.37.176.0/23 maxlen: 24
84.37.190.0/23 maxlen: 24
84.37.192.0/23 maxlen: 24
84.37.222.0/23 maxlen: 24
84.37.254.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.mft
rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 08:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3c:61:fb:5c:93:ea:10:0d:ad:76:9d:4d:e2:13:bb:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Validity
Not Before: Jul 24 12:21:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1bc2e0c6651b23563480a38e8032c5a6591d630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:11:2f:67:48:b3:54:06:53:2c:dd:aa:ea:78:
f4:d9:64:f1:08:97:a0:4c:de:a2:a2:f2:16:e5:55:
8c:1c:8f:6b:e5:42:09:f6:c0:08:d3:b7:dc:8f:17:
3e:69:74:63:43:68:6b:9f:b0:3a:fd:1a:cc:2d:f3:
7b:b6:85:28:37:f3:a7:0f:b9:77:c9:6c:ac:3c:76:
eb:6a:c3:f9:61:43:44:37:f3:a8:9c:fa:9a:91:dd:
b0:be:f4:bd:ba:a9:f2:c6:8c:8a:d2:b5:2a:04:db:
88:09:87:79:b7:07:87:09:f1:5e:51:4c:51:7e:a1:
65:a6:7e:40:48:e9:1b:88:41:5c:ad:dc:85:4b:fb:
da:06:a2:01:18:25:5e:36:d7:dc:4f:e4:bd:3b:70:
ca:be:9b:ef:ac:28:e6:87:89:6a:42:0a:97:2c:fc:
75:8c:eb:85:f9:fc:54:f7:77:f4:17:09:03:7b:20:
4b:9a:9f:c2:bb:92:ca:cf:96:8b:c7:65:7c:95:8f:
52:3c:62:3f:36:78:3b:4a:26:ec:91:26:eb:12:a5:
f4:d9:9e:62:54:f1:0f:29:18:33:8c:b8:8a:1b:13:
b3:74:a4:6b:1b:76:46:cd:2f:ae:85:2c:86:c9:06:
96:51:60:c9:63:0e:3a:f2:fc:03:e3:cd:e9:31:84:
43:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:BC:2E:0C:66:51:B2:35:63:48:0A:38:E8:03:2C:5A:65:91:D6:30
X509v3 Authority Key Identifier:
keyid:59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/obwuDGZRsjVjSAo46AMsWmWR1jA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.37.32.0/23
84.37.46.0/23
84.37.176.0/23
84.37.190.0-84.37.193.255
84.37.222.0/23
84.37.254.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:92:b1:76:7d:28:1c:64:c7:53:f8:a8:d4:11:78:d3:18:0d:
f6:7d:e3:70:8a:a7:77:09:13:25:83:20:08:0a:dd:21:f0:c8:
21:db:9a:89:32:d7:5a:33:ed:9a:4e:ec:eb:d0:3e:62:6a:5d:
fc:d4:49:97:9f:0d:d4:bc:f1:de:f0:6c:9e:ef:7b:68:9e:16:
a3:b5:f6:f9:04:18:cf:97:46:70:04:4b:e7:5f:52:36:e6:9c:
a0:cb:26:99:ba:ab:cf:90:a5:1a:c1:77:f4:3b:78:16:30:16:
5f:f4:05:fd:2c:11:34:13:34:1f:ef:31:d2:5b:34:7b:af:13:
24:08:3d:46:a0:d3:3d:ea:44:66:4b:08:d6:12:b0:47:24:e2:
42:45:42:ea:f3:cb:e0:2c:d6:4c:2f:b2:ab:17:61:f8:cb:b0:
d5:6f:84:6e:56:11:32:87:1d:c5:38:4b:f9:2d:a8:f7:ec:27:
0a:ed:2d:04:8b:da:b9:29:c5:53:44:b4:ba:88:12:ef:b2:80:
5e:28:3c:10:ce:0e:00:b2:34:ed:ce:a2:4b:37:65:4d:87:38:
24:4f:6e:99:0d:42:51:e3:3d:2e:d6:42:60:ee:42:b4:67:72:
0a:6d:ae:61:f6:73:10:eb:d5:82:44:a1:09:6a:89:c5:8a:61:
1c:35:73:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:15:44 2025 by rpki-client