Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/ba-i8VgyVrUVupCfpBLcnoFkkHY.roa
File: ba-i8VgyVrUVupCfpBLcnoFkkHY.roa (raw, json)
Hash identifier: 0KKKKpibSQoi6n7GBcaS2cfRbRPyNzvDQvarKaopbWQ=
Subject key identifier: 6D:AF:A2:F1:58:32:56:B5:15:BA:90:9F:A4:12:DC:9E:81:64:90:76
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 019777E751F2C649765456A8E141AC2C2FD1
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/ba-i8VgyVrUVupCfpBLcnoFkkHY.roa
Signing time: Mon 16 Jun 2025 08:42:17 +0000
ROA not before: Mon 16 Jun 2025 08:42:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.149.94.0/24 maxlen: 24
80.246.230.0/24 maxlen: 24
80.246.231.0/24 maxlen: 24
80.246.232.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 15:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:e7:51:f2:c6:49:76:54:56:a8:e1:41:ac:2c:2f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Jun 16 08:42:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6dafa2f1583256b515ba909fa412dc9e81649076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0d:2b:f4:6e:0c:d8:48:12:21:7a:e4:37:37:
46:a7:37:5e:2a:d4:4d:eb:a9:26:b9:02:ed:61:25:
16:c7:9d:f0:f8:28:f0:61:a0:17:0d:ba:4d:65:05:
08:71:b5:cb:f5:d8:19:0a:7d:58:ba:43:b2:33:af:
85:2d:82:2a:c5:b5:ce:e4:3a:1a:e6:a9:2a:0c:4a:
52:26:9e:c9:4c:3b:07:51:6f:b8:dd:97:c0:ea:6a:
fe:9e:1b:b3:6c:ac:17:71:2b:3f:50:12:6e:dc:a4:
5a:83:93:f8:53:c7:63:cb:a2:c2:73:2c:f1:23:57:
29:fd:b9:95:76:27:37:f2:74:8f:7a:00:ac:32:ad:
5a:03:ff:8e:4a:5f:e0:ed:77:da:eb:8a:12:ba:31:
e5:a7:4c:3b:54:00:f9:f4:8e:c1:c8:eb:a9:6c:17:
6b:6e:f2:96:15:89:17:9c:66:5a:a7:b7:e9:f9:30:
24:0f:85:b1:82:cd:23:9b:47:32:f2:23:f1:21:f6:
2b:38:ea:d7:b1:c4:b5:58:55:d7:af:b0:5b:56:87:
92:91:4a:13:f5:b5:92:b9:80:3e:4f:f7:90:14:07:
60:db:78:6d:f1:a5:0c:56:08:b9:13:39:d4:6a:26:
16:0e:d8:b6:00:b1:de:9c:86:b5:61:ed:8b:f6:de:
60:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:AF:A2:F1:58:32:56:B5:15:BA:90:9F:A4:12:DC:9E:81:64:90:76
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/ba-i8VgyVrUVupCfpBLcnoFkkHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.94.0/24
80.246.230.0-80.246.239.255
Signature Algorithm: sha256WithRSAEncryption
10:c6:3a:f5:a3:62:cb:e4:80:4b:aa:f7:3d:c0:a8:63:cd:56:
e4:48:0e:08:41:b4:d2:f5:ec:72:15:84:3f:e2:bc:77:71:79:
3f:e5:14:0c:b7:bc:b4:98:a5:87:30:26:e5:dd:5b:13:d5:f9:
15:4a:33:f0:8f:5f:34:95:85:4b:57:e2:e8:6d:cc:a1:27:e1:
0a:db:c4:e5:5c:d4:99:87:56:3a:1a:17:f3:cb:bb:1a:60:cc:
6c:22:97:a2:f7:29:50:11:44:59:ef:f5:3c:0a:9b:99:04:5f:
c8:39:a9:dd:52:fc:83:9c:11:b3:4f:7e:2d:fd:ab:3d:07:b0:
45:d4:ee:4f:06:41:bf:40:66:cc:9a:1a:15:53:c0:d0:5d:68:
89:37:02:e3:be:3e:18:89:f7:40:29:b4:dc:21:be:b1:c1:26:
30:5d:34:d2:ca:aa:24:2a:9b:92:6f:a4:1d:92:c3:7e:a3:b1:
c3:73:da:bb:12:cf:23:98:66:d8:c3:c1:da:8e:82:ec:89:b7:
4a:67:71:f8:2e:47:48:4f:80:7b:c0:f8:67:3a:cb:11:78:22:
ac:27:25:13:cf:dd:a5:74:91:5d:44:ed:59:8d:e3:d9:6e:2f:
20:fd:4d:e2:a3:d0:08:93:5c:b4:08:f1:1a:ff:90:2b:bc:18:
52:d8:b2:45
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jun 20 01:15:33 2025 by rpki-client