Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/wW22OJQeCCuYtnGAy9BuRifzg7I.roa
File: wW22OJQeCCuYtnGAy9BuRifzg7I.roa (raw, json)
Hash identifier: TChQ4MTQ+Tljx6+49J8TeNd6t8dblk/+XiUWKylc/Us=
Subject key identifier: C1:6D:B6:38:94:1E:08:2B:98:B6:71:80:CB:D0:6E:46:27:F3:83:B2
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 01980E265119281C0F5018AFD8AD544F703D
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/wW22OJQeCCuYtnGAy9BuRifzg7I.roa
Signing time: Tue 15 Jul 2025 12:54:08 +0000
ROA not before: Tue 15 Jul 2025 12:54:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 45.141.204.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0e:26:51:19:28:1c:0f:50:18:af:d8:ad:54:4f:70:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jul 15 12:54:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c16db638941e082b98b67180cbd06e4627f383b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:92:b1:5f:88:f0:d5:f6:79:18:b0:55:9e:45:
2a:c7:6d:a9:7b:31:73:a5:99:4b:0d:69:0c:dd:6f:
3d:23:6c:20:19:02:90:f7:45:ef:7d:ca:af:74:9e:
a9:a7:d7:35:e3:e7:18:61:d0:21:2c:9a:1b:ff:8a:
ea:e6:df:ed:de:ca:de:de:af:c9:a3:12:fc:6c:50:
d5:2d:39:11:fc:f9:2e:01:fc:c0:81:03:56:0e:57:
9e:33:81:6e:5c:68:8f:53:59:12:ca:42:4d:d9:7b:
a7:b1:e5:a9:79:a9:ce:b4:25:bf:2e:15:b5:15:ff:
a4:f1:18:f7:11:34:9c:b5:21:87:ef:e5:ef:04:b0:
ba:a6:47:e8:3d:f9:60:39:25:67:b3:3d:5e:59:fe:
cc:f7:0b:12:d4:ec:d3:32:1c:08:07:c8:7e:7c:33:
2e:82:aa:f6:09:27:a1:36:6b:3b:73:92:4c:c9:51:
d2:90:dc:04:56:7f:cd:b6:a3:a4:15:9c:c5:e9:c8:
3d:3d:d2:41:1a:a3:c2:9f:08:d2:be:b5:59:29:9a:
00:3f:6a:5d:4e:7c:fc:4d:73:f8:96:92:94:4f:6e:
a5:c1:e5:4d:c9:d8:c5:7a:da:a7:8f:fd:f2:d8:5d:
ec:e1:7f:88:9c:06:58:d5:39:8f:82:53:30:0d:21:
49:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:6D:B6:38:94:1E:08:2B:98:B6:71:80:CB:D0:6E:46:27:F3:83:B2
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/wW22OJQeCCuYtnGAy9BuRifzg7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.204.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:a1:1b:0a:a8:8b:d9:0e:75:6d:c7:cb:ec:32:20:ab:a5:70:
f2:f7:df:34:c3:80:41:54:57:db:f6:2a:5e:0b:5c:03:58:10:
81:93:1d:75:89:23:8f:28:58:1b:4f:c1:5f:7b:2b:cd:9d:df:
94:84:ec:a8:92:35:4d:82:d3:b0:46:09:e7:1c:fe:1a:3d:2b:
80:08:f9:74:1d:c3:b8:16:a7:f7:65:53:b8:d8:4c:e6:77:79:
5e:12:2b:52:43:85:6c:68:4e:27:06:5c:4b:d9:df:42:6c:00:
7d:48:cc:37:3a:0e:66:e8:1b:34:c6:9a:00:04:99:61:16:8b:
6c:11:36:4c:ec:76:7e:6c:1d:41:3e:a5:9f:a4:9b:e7:c8:78:
2d:67:f1:41:e9:2e:59:4d:11:c0:6c:30:72:6a:83:45:87:10:
4f:25:dc:4e:53:d1:a1:2c:ab:e5:dc:4a:c0:ea:24:12:e6:1b:
dc:19:a0:f8:85:d9:81:36:0f:3e:84:7c:87:ea:b7:85:44:d5:
15:e8:49:c9:1d:3d:a0:12:3c:c7:67:aa:7a:d8:06:36:ce:7a:
32:30:90:65:39:d9:50:43:50:be:bd:1a:2b:64:5e:30:19:3c:
87:98:39:57:b5:f2:3d:f6:2d:de:73:e8:1d:cb:b4:1f:2a:4c:
68:8f:f4:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:36:46 2025 by rpki-client