Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/b3HbzyFMAkDn-hz39a-lF2NC8sM.roa
File: b3HbzyFMAkDn-hz39a-lF2NC8sM.roa (raw, json)
Hash identifier: 7Jvn5n7Q6ncqp0VRYLsaglwVJaobFM0uBPvGwFadf6Q=
Subject key identifier: 6F:71:DB:CF:21:4C:02:40:E7:FA:1C:F7:F5:AF:A5:17:63:42:F2:C3
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 019755322083AECCCBC34B344B71699D4C78
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/b3HbzyFMAkDn-hz39a-lF2NC8sM.roa
Signing time: Mon 09 Jun 2025 14:57:17 +0000
ROA not before: Mon 09 Jun 2025 14:57:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35470
IP address blocks: 45.158.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:55:32:20:83:ae:cc:cb:c3:4b:34:4b:71:69:9d:4c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jun 9 14:57:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f71dbcf214c0240e7fa1cf7f5afa5176342f2c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e5:5e:4e:11:c8:3e:00:75:bb:2e:01:99:82:
0d:c7:4b:79:2e:28:35:ac:14:ff:09:49:16:0c:cf:
2e:1a:67:f1:0d:8c:02:e8:55:03:5e:56:1b:6c:4b:
c5:da:79:4f:15:f9:06:f0:17:9d:0a:01:17:60:0e:
29:0e:ca:99:0f:3c:da:61:11:81:05:91:36:52:87:
0d:b4:f1:27:c5:0f:e2:ea:b0:45:8e:1c:c1:3e:bc:
68:9f:58:c5:5e:47:de:5f:ad:fb:32:4e:05:63:af:
0d:fc:83:3b:9a:29:54:26:77:75:05:03:fd:1e:e8:
ef:4d:6d:43:2a:8f:15:6e:44:30:af:09:ab:74:24:
4e:0d:92:d5:68:2b:ed:67:7d:5a:5e:e7:d8:5a:98:
76:73:50:38:83:ae:0c:9e:0e:92:84:2f:42:b4:e7:
86:3c:19:d0:18:f9:8a:3d:36:f2:d6:d2:8d:57:d4:
99:2b:63:df:2e:9d:82:05:ed:ef:af:6b:b4:b8:93:
d9:99:b0:1a:1e:5d:dd:cf:7c:90:45:8b:df:1f:66:
35:a1:bc:2b:72:cf:1b:0e:72:52:e1:17:8c:67:48:
17:4b:40:bb:86:39:04:60:e9:1f:c9:5e:3d:48:37:
e6:bc:2b:bf:66:00:3b:db:51:14:91:d0:f1:73:a1:
f2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:71:DB:CF:21:4C:02:40:E7:FA:1C:F7:F5:AF:A5:17:63:42:F2:C3
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/b3HbzyFMAkDn-hz39a-lF2NC8sM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.80.0/24
Signature Algorithm: sha256WithRSAEncryption
43:02:7f:c1:d5:2e:0c:eb:06:b4:8e:0d:66:b6:5d:25:1e:ba:
25:d4:ce:c8:16:73:22:97:e3:d7:3c:bf:b8:03:66:09:2f:13:
75:e3:8f:b8:3e:3b:78:d3:a0:f0:d8:cc:46:9b:cf:1a:d1:52:
2d:53:4a:e5:e1:65:60:02:c7:0f:b1:b3:b0:65:a9:90:ff:66:
0f:1d:d6:71:f1:8d:61:bf:0e:fa:49:98:a6:a3:0b:63:32:42:
39:82:8b:2f:de:68:36:ca:4f:e4:37:83:dd:60:f2:01:ea:32:
40:f6:39:61:41:af:de:5e:58:d2:78:98:16:aa:73:4e:54:c6:
17:ff:e1:2f:f5:7e:4f:71:bc:8f:b7:d8:3a:44:39:42:06:6f:
38:5f:21:9a:e7:9c:ca:bc:2a:25:fb:7b:e1:9d:b7:7e:12:92:
6b:2f:2b:94:2a:95:b3:91:3c:09:dd:82:87:15:84:6b:e9:18:
39:47:1e:68:1e:1f:7c:5f:cb:05:fd:60:e4:02:51:a0:07:5a:
5b:59:7a:39:12:3b:14:3e:f0:f4:9d:be:9e:29:77:3e:e0:c4:
91:74:c7:1f:f9:46:0f:0b:f9:41:6d:f2:87:91:0c:54:b6:12:
a8:17:67:d6:6d:54:e9:f0:ca:43:5b:3c:d0:ee:47:66:8b:14:
d5:0f:cb:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:37:03 2025 by rpki-client