Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/rmqy35RgkhYuX5qNJiVs015ycZU.roa
File: rmqy35RgkhYuX5qNJiVs015ycZU.roa (raw, json)
Hash identifier: LDCr4ebrduvoJYv1oiBypRNRrs3+DkUy2vlfMY8B1p8=
Subject key identifier: AE:6A:B2:DF:94:60:92:16:2E:5F:9A:8D:26:25:6C:D3:5E:72:71:95
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01974E99E62B0F0EC9114A39B0A806F96789
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/rmqy35RgkhYuX5qNJiVs015ycZU.roa
Signing time: Sun 08 Jun 2025 08:13:18 +0000
ROA not before: Sun 08 Jun 2025 08:13:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59432
IP address blocks: 45.81.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:99:e6:2b:0f:0e:c9:11:4a:39:b0:a8:06:f9:67:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jun 8 08:13:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae6ab2df946092162e5f9a8d26256cd35e727195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:61:76:d4:62:21:9c:0c:d5:60:1a:40:35:3e:
a0:51:96:9b:72:ec:20:dc:18:0e:f0:24:1a:5e:55:
e0:16:62:65:0f:31:8e:e2:da:5e:96:cc:f7:98:a6:
3a:11:ab:42:76:b7:2a:48:e7:25:9e:31:72:36:db:
e9:12:8e:40:e6:a4:49:2e:81:60:45:8e:eb:d8:60:
be:f0:de:70:39:2f:66:70:7f:69:be:8f:7c:59:27:
ce:4a:e2:1c:6c:a5:37:48:05:aa:dd:58:79:a3:01:
01:77:4d:f9:4f:3d:a2:8f:9e:46:46:45:9f:9a:36:
f9:7a:78:67:96:6d:70:cc:95:d6:7e:dd:b9:37:e1:
fa:e3:ff:58:61:89:45:50:0f:f5:08:c6:f9:17:f1:
e7:fe:a9:62:48:5a:8f:ef:87:8d:4e:f1:0d:da:a2:
fd:8a:bf:67:06:e2:a4:f0:3c:1b:72:30:f3:01:3d:
9e:8b:87:4c:5f:42:89:8f:d4:19:0e:99:b1:90:32:
26:85:75:f2:ea:e6:3c:ac:8b:a1:81:7f:ea:84:34:
b3:6a:70:3b:88:da:02:69:e0:5b:37:8f:3c:c7:6d:
fa:ce:03:1e:31:1f:06:ec:79:0a:26:cd:f9:7d:3e:
2d:a3:bb:53:ba:b1:f7:70:19:95:dd:7a:ff:0a:bb:
91:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:6A:B2:DF:94:60:92:16:2E:5F:9A:8D:26:25:6C:D3:5E:72:71:95
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/rmqy35RgkhYuX5qNJiVs015ycZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.154.0/24
Signature Algorithm: sha256WithRSAEncryption
54:1e:4c:00:22:af:fe:9d:0d:28:23:f2:b2:c8:92:38:b8:66:
42:10:7e:27:f4:55:d4:94:ae:29:6b:61:11:5f:87:f8:b0:e2:
4d:87:c7:93:42:1a:49:41:7c:b7:45:91:0f:8f:20:88:86:ab:
00:84:11:89:cf:b8:f9:91:4e:4d:9a:df:8f:9c:b0:a0:e3:af:
c2:b8:6b:1b:14:41:a1:7f:eb:e4:f6:dd:0e:57:c3:ee:2c:cf:
25:c0:a3:68:a4:f3:1c:47:0e:44:6a:81:6d:54:67:d2:11:e8:
30:76:42:4f:2e:c0:f6:e0:5e:ca:dd:83:cd:d5:54:f5:30:b4:
3b:13:b3:f1:b0:17:b8:dd:ab:8f:fc:16:63:af:27:84:94:f5:
bf:04:f8:5b:50:ea:7b:a4:2a:b6:d6:27:68:d9:0d:1a:2b:37:
b0:78:7b:06:a1:64:ef:13:22:53:5e:e8:db:cd:8b:08:fa:0a:
be:b1:cc:f7:74:05:c4:bb:8d:10:f0:1c:de:70:9c:84:36:59:
6d:80:df:63:23:a3:f2:7c:4d:44:5b:72:fd:76:a9:91:fc:e3:
a8:c8:54:a0:2f:51:db:8a:31:97:f8:3e:14:e2:df:54:38:a4:
f5:6e:45:df:1a:71:ce:8c:81:29:7c:3a:bd:17:c3:2f:f1:7f:
d5:76:fa:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:08:19 2025 by rpki-client