Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/UhLVmVjovdWgjJErv-tgjRX0rxk.roa
File: UhLVmVjovdWgjJErv-tgjRX0rxk.roa (raw, json)
Hash identifier: YHEeyvqC3Ixlmxjkt1KxjsiIXnBryoFLUoVfB/aGY8Y=
Subject key identifier: 52:12:D5:99:58:E8:BD:D5:A0:8C:91:2B:BF:EB:60:8D:15:F4:AF:19
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 01983C1C9DCB37A046245E8A143AC9D45B39
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/UhLVmVjovdWgjJErv-tgjRX0rxk.roa
Signing time: Thu 24 Jul 2025 11:06:05 +0000
ROA not before: Thu 24 Jul 2025 11:06:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44559
IP address blocks: 45.155.62.0/24 maxlen: 24
45.155.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3c:1c:9d:cb:37:a0:46:24:5e:8a:14:3a:c9:d4:5b:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jul 24 11:06:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5212d59958e8bdd5a08c912bbfeb608d15f4af19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7c:00:a4:53:66:fa:e1:b5:ec:37:da:d7:d0:
7f:c9:ab:f9:52:86:5c:8a:b2:64:bf:b3:2e:cf:2f:
40:c5:6a:83:cc:a8:2d:2d:11:ad:d3:b9:ab:31:2e:
a9:47:8b:22:92:0d:b5:6d:fc:5c:35:ca:a8:fc:e7:
90:98:8d:e0:80:87:f1:c6:1d:f6:83:48:f3:a7:1e:
b6:40:3c:f1:70:5f:4d:03:e3:46:22:69:88:f8:e9:
5f:1b:ea:26:84:c2:68:13:30:4e:8c:98:34:0f:a8:
c9:7c:12:ef:bd:fc:83:e5:53:60:d0:20:73:71:83:
63:6b:48:63:c7:57:c7:d5:65:50:a6:3f:1e:e2:5c:
be:fc:c2:bd:12:1e:a2:75:61:cf:1c:ca:a9:56:18:
84:5c:e6:6f:51:03:26:75:d9:67:58:02:c6:00:e3:
d0:63:08:13:f0:25:98:a4:b5:4d:ac:78:9d:32:8a:
81:db:b1:0e:88:4d:1d:68:f4:52:4e:1a:39:ad:79:
cd:c3:27:05:f0:4d:83:f8:ce:55:72:38:62:95:cc:
91:cf:a8:2c:91:3a:c7:2f:d3:c3:5e:85:17:4d:21:
6d:ba:f4:b4:ba:7c:e0:ee:c7:88:b0:2f:f7:c0:d0:
94:99:ac:c9:08:f6:a5:d4:c0:f8:d3:ae:fc:b7:8d:
b4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:12:D5:99:58:E8:BD:D5:A0:8C:91:2B:BF:EB:60:8D:15:F4:AF:19
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/UhLVmVjovdWgjJErv-tgjRX0rxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.62.0/23
Signature Algorithm: sha256WithRSAEncryption
73:81:cd:80:bf:1f:87:70:84:b5:3b:d4:6f:b2:d3:c6:1a:15:
82:5a:83:a3:24:2d:da:3a:de:3a:3c:05:7a:20:91:c8:e5:08:
3d:9b:7e:07:2d:13:6e:f3:5a:b1:c0:41:e5:51:b4:70:b3:8f:
72:d0:3d:62:99:ce:13:1a:6f:d3:e1:d0:1e:1c:78:18:c1:49:
8e:ce:f7:4e:f6:42:7a:81:b0:65:c9:c8:6f:aa:e1:b2:99:d5:
c1:a5:52:54:08:e6:cc:b7:f0:c7:32:a5:4d:77:f7:c8:1b:32:
5a:18:a3:19:62:26:fe:b0:a5:c9:ea:b2:87:23:0e:33:38:5e:
9c:9b:77:7b:d7:38:20:9c:c6:00:b4:ca:b8:a0:b7:1e:c6:14:
88:2d:22:7e:9e:21:d8:68:ed:25:f9:6e:3b:a9:7a:a2:f0:d9:
23:26:31:1d:84:8b:b0:ce:fc:3a:c9:8c:41:ba:cd:40:75:28:
ef:f0:8c:42:63:6d:13:d4:ab:bf:64:df:04:32:30:62:5d:9a:
99:55:ca:2b:f4:40:a8:58:b4:da:25:9d:79:da:53:e8:ad:34:
76:9f:29:36:e2:4f:29:05:d1:8f:96:05:22:8e:23:05:cb:5c:
02:17:b3:dd:21:2b:80:98:5d:83:f5:7a:c9:d8:e2:ed:d5:48:
98:ba:07:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:10:07 2025 by rpki-client