Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/jMWmBb2LFohDGfMydJEFdJNgwRE.roa
File: jMWmBb2LFohDGfMydJEFdJNgwRE.roa (raw, json)
Hash identifier: KFE69szjkkszOYSTCREhob5nrlpSPJkk1T8bXVsc6g4=
Subject key identifier: 8C:C5:A6:05:BD:8B:16:88:43:19:F3:32:74:91:05:74:93:60:C1:11
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 0197596F067219CF01BD5F64FE7956B974F3
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/jMWmBb2LFohDGfMydJEFdJNgwRE.roa
Signing time: Tue 10 Jun 2025 10:42:17 +0000
ROA not before: Tue 10 Jun 2025 10:42:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211659
IP address blocks: 45.136.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 23:47:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:6f:06:72:19:cf:01:bd:5f:64:fe:79:56:b9:74:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jun 10 10:42:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8cc5a605bd8b16884319f332749105749360c111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d0:b7:ad:e9:ce:8d:01:45:26:10:ac:b9:d5:
9d:79:cb:66:29:ef:4f:87:e7:60:9c:ed:27:41:d9:
35:97:ce:4c:ae:de:d5:87:4c:1c:42:18:7d:48:01:
f7:cf:12:9c:74:82:83:e5:22:4d:9d:34:74:2a:eb:
a4:b8:4d:f7:ce:77:f7:e2:08:47:ac:72:0d:1f:6e:
9d:3e:ea:75:b8:96:73:ca:f2:ab:05:be:6e:d0:a8:
a8:cd:32:69:eb:c7:0f:4c:3f:3c:4c:43:9d:c3:0f:
97:c3:da:91:0e:28:4f:29:46:75:cf:87:65:a7:37:
ca:78:f5:4b:17:18:59:15:0a:35:75:ae:e0:d2:b3:
bf:09:92:4f:05:68:0b:c1:ec:35:b1:1c:71:47:60:
37:ff:df:2f:19:19:9e:77:10:d4:02:24:87:e2:d3:
6b:eb:cf:84:00:0b:6c:d0:96:d6:49:6e:6f:95:c6:
df:36:8f:55:64:9f:9f:5a:69:0d:57:99:c1:32:eb:
37:7a:eb:69:a9:e3:e2:0a:dd:18:c7:4e:4f:51:3e:
52:e1:ff:a8:4d:3b:93:0e:3f:49:75:4d:34:69:30:
3f:5e:d6:12:b0:ea:a3:bb:72:ec:eb:d2:ad:51:8d:
d4:38:40:00:39:a5:9a:01:a2:b2:be:92:12:48:c3:
1e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C5:A6:05:BD:8B:16:88:43:19:F3:32:74:91:05:74:93:60:C1:11
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/jMWmBb2LFohDGfMydJEFdJNgwRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.68.0/24
Signature Algorithm: sha256WithRSAEncryption
86:f4:f4:c6:72:b6:e5:73:bd:5f:af:59:22:da:c8:81:83:fd:
ee:b4:29:23:f8:eb:2c:fe:df:44:b8:ae:f8:87:61:53:bb:aa:
0f:4a:6d:f3:7d:ff:2f:a1:dc:24:7f:d7:6d:f3:d9:e8:f8:08:
59:b8:68:62:ef:af:eb:93:f4:84:4c:28:16:cc:0e:9a:25:fb:
f5:3e:fe:9a:27:5c:9e:fa:ef:30:af:be:9b:7b:72:e8:77:7a:
fd:87:0c:be:99:a3:6a:e1:d9:aa:32:8b:80:d1:fb:59:23:91:
96:11:42:6e:c1:d5:21:91:f1:ed:59:84:b1:a6:4a:54:0e:e1:
28:83:fb:0d:e3:4d:93:99:d8:a6:32:d6:89:20:bd:1b:eb:6c:
4a:65:2e:81:0e:c7:95:59:94:b6:a1:48:38:ad:fe:65:09:a5:
ec:2b:16:ba:71:1e:e1:74:10:a1:62:02:54:97:da:ee:ea:72:
05:33:14:16:93:ee:cb:29:7c:3d:7a:25:f5:0b:5b:fc:b3:42:
1b:e6:44:fd:cb:c8:d1:ed:b8:52:ca:7f:16:04:b1:60:c0:c8:
1e:17:28:f7:5b:e9:3d:7a:88:ad:d4:51:d8:59:f6:ec:30:e8:
9e:74:20:45:c8:89:4c:98:6a:97:13:3d:e9:a1:46:1e:b3:cb:
2f:c9:f2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 05:14:43 2025 by rpki-client