Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/TwjBjXH_A0tQUpwIwnxUJaxd7vs.roa
File: TwjBjXH_A0tQUpwIwnxUJaxd7vs.roa (raw, json)
Hash identifier: 6XSZG8opEAc5FuXmBuwH3bzmSL+cIKocS7D9t9p8k70=
Subject key identifier: 4F:08:C1:8D:71:FF:03:4B:50:52:9C:08:C2:7C:54:25:AC:5D:EE:FB
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 01980E8699518CD4EA45A357B76B5A833FF0
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/TwjBjXH_A0tQUpwIwnxUJaxd7vs.roa
Signing time: Tue 15 Jul 2025 14:39:18 +0000
ROA not before: Tue 15 Jul 2025 14:39:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 45.141.204.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0e:86:99:51:8c:d4:ea:45:a3:57:b7:6b:5a:83:3f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jul 15 14:39:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f08c18d71ff034b50529c08c27c5425ac5deefb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f6:96:f5:5f:94:3a:43:f2:a8:d0:d3:24:29:
b2:86:0c:32:77:be:f9:1f:d3:42:f3:ea:45:ce:06:
af:9b:19:90:d9:ab:bc:28:22:93:37:1f:93:62:2a:
4e:01:1d:f3:e4:01:fd:47:14:0e:f5:b1:0e:52:5f:
57:91:43:c9:b1:78:d1:bf:66:75:82:e8:f5:14:70:
ff:59:c2:bb:12:c3:9d:8f:0e:b4:8c:dc:42:e0:17:
6a:d1:39:54:64:21:a5:c8:b6:4a:c9:55:6a:a9:8c:
10:ea:7c:3e:ee:a5:97:9c:db:e2:9a:89:1a:ea:09:
b9:f8:5b:a0:d4:24:76:fb:90:69:31:9c:d9:b9:92:
31:60:e6:ae:e2:4c:38:28:28:2f:00:4a:5c:db:62:
a9:25:ba:92:1f:05:2b:b3:1c:03:39:08:9a:13:38:
dd:d2:5e:23:07:61:14:c7:8e:ff:79:c7:08:0b:82:
e1:e8:92:5b:1d:f0:3c:ce:00:f1:fc:6f:9d:a9:16:
eb:09:61:29:4d:2c:e5:87:3c:44:ea:21:65:0a:1f:
a4:d2:61:14:f4:4e:56:ba:6a:f1:53:01:40:bd:35:
c4:1d:f9:9a:47:7d:26:4b:47:f5:24:88:64:32:39:
1e:ab:24:3c:38:9e:e5:be:06:4d:68:9d:50:3a:b6:
4c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:08:C1:8D:71:FF:03:4B:50:52:9C:08:C2:7C:54:25:AC:5D:EE:FB
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/TwjBjXH_A0tQUpwIwnxUJaxd7vs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.204.0/23
Signature Algorithm: sha256WithRSAEncryption
31:6b:c6:46:c9:9c:74:a8:1b:a6:18:8f:60:fd:f0:a8:d8:b6:
9c:0d:ea:1c:6e:4f:9f:81:3c:88:a1:bd:32:ec:8d:f5:49:66:
cd:25:36:a5:1b:90:ba:05:ee:31:ab:86:ec:a2:c8:04:f5:ce:
7a:0b:6b:ad:3b:47:f9:34:52:eb:0b:6f:db:e3:41:74:4d:6d:
6e:f6:50:5d:21:9c:ad:1e:dd:b4:f5:c9:51:8a:70:a1:77:db:
bb:fc:c6:e3:82:18:24:48:c0:54:f6:ce:75:85:20:b4:59:11:
d9:6e:e9:8b:4c:95:fb:e6:01:7e:d0:ee:b0:5c:8a:5b:b0:16:
41:a3:5d:63:73:58:a5:a6:f0:ff:78:47:dd:37:c3:8a:9e:b7:
0f:e1:3c:a6:dc:c1:ff:36:cc:75:ee:a6:5e:4f:70:22:91:8c:
8e:97:f9:bf:74:c3:75:e7:3e:31:f7:98:01:4c:5c:ae:7b:da:
77:ce:98:50:f5:74:7e:01:01:48:1f:5f:ef:86:90:95:0c:29:
54:f1:e2:68:ad:07:a5:20:a9:35:dd:d7:a9:56:57:85:94:a1:
df:5f:2b:c5:c3:27:ba:01:f9:42:b0:30:d5:38:79:fc:59:0b:
ba:1b:ca:f6:dd:79:5e:ad:ee:35:e1:d5:8c:e5:6c:27:26:c0:
ef:b0:19:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:40:02 2025 by rpki-client