Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/tJ79cq_yi3A62VekuJ2m1vtMzGk.roa
File: tJ79cq_yi3A62VekuJ2m1vtMzGk.roa (raw, json)
Hash identifier: 6qaddqYc4/Huz35oMQeKPcA4PDeE/OG5YrHssVIrrjw=
Subject key identifier: B4:9E:FD:72:AF:F2:8B:70:3A:D9:57:A4:B8:9D:A6:D6:FB:4C:CC:69
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 01976517A4E60DFDEF65A18808E2103B4599
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/tJ79cq_yi3A62VekuJ2m1vtMzGk.roa
Signing time: Thu 12 Jun 2025 17:02:17 +0000
ROA not before: Thu 12 Jun 2025 17:02:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.152.164.0/24 maxlen: 24
45.152.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:65:17:a4:e6:0d:fd:ef:65:a1:88:08:e2:10:3b:45:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Jun 12 17:02:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b49efd72aff28b703ad957a4b89da6d6fb4ccc69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ef:0b:72:bf:77:f2:c2:47:7e:7d:30:43:07:
90:83:36:fb:25:1a:6e:b7:82:ad:5f:e7:b4:52:f6:
f5:4f:55:d1:ea:f7:0b:16:1a:ff:9d:b2:73:53:98:
bb:dc:9b:da:a7:de:51:1a:b0:e9:9d:5c:c7:3d:e8:
eb:ad:43:dc:c1:fc:b2:28:75:8f:7a:fa:b6:08:78:
49:40:ae:00:ae:eb:17:84:64:72:e9:c9:ae:c9:77:
4f:87:02:7b:f2:48:c5:4a:ac:59:71:38:54:32:e3:
24:0e:84:c1:c3:47:27:6d:73:e6:6b:56:74:4f:2d:
07:36:7d:58:7d:13:87:9c:20:30:09:fa:19:c2:4d:
8d:85:a8:ff:35:9a:4e:79:12:fe:39:ad:d9:68:50:
6a:2e:1d:9c:dc:e2:a9:c3:4e:1e:be:71:26:ae:6c:
15:51:7c:a1:0e:ff:d5:57:f1:5e:54:bc:6c:11:77:
0f:0c:33:f2:78:c9:e4:fe:e7:46:d1:77:18:c7:44:
d0:9a:b7:8a:d3:2f:c5:79:db:12:99:9d:97:71:0a:
90:79:25:86:5f:f4:7d:85:75:fc:e6:d3:cc:fe:42:
bc:41:f4:7d:39:a1:4c:6a:b6:ef:ad:32:0a:a6:61:
b3:f5:48:cb:3f:69:e6:61:af:7b:b1:24:91:7a:c1:
7e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9E:FD:72:AF:F2:8B:70:3A:D9:57:A4:B8:9D:A6:D6:FB:4C:CC:69
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/tJ79cq_yi3A62VekuJ2m1vtMzGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.164.0/24
45.152.166.0/24
Signature Algorithm: sha256WithRSAEncryption
85:33:2d:32:18:87:49:33:cf:6a:be:55:87:b1:4f:3f:53:ba:
b4:6d:07:cc:e8:d8:cb:2e:a0:ef:9a:76:74:c8:4d:b7:ea:91:
02:5a:ff:50:3f:c2:54:85:d1:3a:e9:2f:11:02:5b:09:47:04:
84:c2:55:8c:8a:9d:a7:1d:91:b8:3c:50:99:39:02:cc:fc:85:
db:7d:e8:49:9b:5f:87:cc:9a:97:9e:86:d4:b7:98:e5:d9:21:
fe:85:c0:a6:00:c5:31:c2:12:5d:21:f2:c0:01:b1:22:a5:b4:
80:74:d7:5e:7e:0e:b9:32:3a:65:7e:34:3d:aa:7c:3f:3f:3f:
b9:03:f5:40:a6:9d:5b:ac:ca:c0:ba:df:3b:dc:de:05:0b:50:
84:78:a9:1a:59:5d:cb:22:e3:7c:68:88:0b:be:aa:e8:cd:05:
c0:f8:57:dd:43:9c:7b:73:2e:3e:4f:83:f7:12:58:54:20:34:
75:7a:17:66:ce:a0:2f:c0:3f:66:51:cd:79:b3:24:00:c0:39:
3a:02:3c:96:38:49:3e:60:5e:f7:de:98:b1:a8:39:dd:6b:05:
87:71:80:c9:ab:66:27:d1:23:d0:c5:54:1a:64:f2:d8:c3:43:
c1:76:ef:ad:e8:c7:e6:13:f5:1d:20:24:59:ea:78:9f:02:f8:
8f:21:e7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:39:40 2025 by rpki-client