Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/bKXvCbav0v5bxZoTf5h3EGHMrJs.roa
File: bKXvCbav0v5bxZoTf5h3EGHMrJs.roa (raw, json)
Hash identifier: hNhsv07/60qR2FtaemERpmw41s/ML+26x7wTkj66h4w=
Subject key identifier: 6C:A5:EF:09:B6:AF:D2:FE:5B:C5:9A:13:7F:98:77:10:61:CC:AC:9B
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019817359C041E9E7E157F59B5416DB79F4C
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/bKXvCbav0v5bxZoTf5h3EGHMrJs.roa
Signing time: Thu 17 Jul 2025 07:07:25 +0000
ROA not before: Thu 17 Jul 2025 07:07:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213520
IP address blocks: 147.45.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:17:35:9c:04:1e:9e:7e:15:7f:59:b5:41:6d:b7:9f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jul 17 07:07:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ca5ef09b6afd2fe5bc59a137f98771061ccac9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:96:cb:47:2b:1e:66:4a:b4:74:5f:57:68:57:
79:73:32:08:2b:f5:57:7b:05:5e:34:8a:d7:7a:e5:
26:cf:cd:63:eb:97:91:4f:1a:a1:57:ba:f6:21:d0:
76:6e:3d:12:5c:2f:01:0a:5f:19:6c:a7:41:c7:65:
64:fe:9d:ca:26:9b:5d:c3:28:c5:f5:ef:69:e9:7b:
1b:12:79:38:a1:31:a3:30:09:c9:18:cd:7f:2f:1f:
27:3a:7b:14:39:03:17:ab:38:0c:f1:91:db:80:7d:
1e:6c:3d:fc:98:74:39:4c:46:26:a1:d9:07:b2:47:
70:65:ff:14:b4:4a:a4:13:a0:9b:24:5d:b9:78:da:
6f:ba:dc:0f:c7:1c:39:e1:b7:31:d4:9f:b7:f7:3b:
1f:0b:c3:4f:88:82:13:e1:e7:b5:b2:7d:b4:e4:57:
27:c4:d0:d9:b3:f2:b3:c9:34:b7:08:51:9f:3a:f2:
73:60:19:e8:d3:01:9e:f8:51:ae:61:70:14:be:b1:
fb:33:e9:e4:7f:cc:b1:46:11:91:89:bf:79:81:00:
2a:9c:63:7e:21:f4:5d:5a:68:a6:8a:28:df:88:c2:
37:57:39:94:8c:15:55:37:7c:ac:d1:fa:ed:20:f0:
66:00:d4:ce:13:c9:da:6a:9e:4b:a2:7b:bf:cf:52:
45:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A5:EF:09:B6:AF:D2:FE:5B:C5:9A:13:7F:98:77:10:61:CC:AC:9B
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/bKXvCbav0v5bxZoTf5h3EGHMrJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.223.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:b9:ac:8a:c8:d3:a3:83:d3:2a:ad:07:a9:5d:24:d8:12:2d:
e0:f0:a3:80:7b:e6:92:9a:e2:4d:18:a0:1d:70:97:e1:06:30:
6f:a2:c6:27:21:1f:f7:53:d4:81:d3:fc:03:2d:81:b3:11:64:
9d:30:71:e9:e4:20:f6:8f:a6:7e:37:90:e2:a3:ed:65:fd:c0:
e4:bb:9b:a8:d2:1d:4a:c1:35:c4:43:9a:8a:7c:7e:1b:82:59:
51:d8:c5:f9:7e:09:86:a2:d2:16:f0:3d:ad:44:6b:c1:e9:fa:
39:c9:81:0c:79:03:91:85:dc:fc:e8:97:45:2c:2b:cb:ba:1c:
8c:b0:06:8f:68:34:e3:16:65:45:29:d6:9d:8e:98:6c:f2:b9:
e6:7b:af:e0:ca:27:be:4a:0f:43:71:80:3a:1a:72:15:f5:c5:
3b:e2:35:a3:e5:28:d3:63:5f:f9:e7:ac:56:9c:8f:08:ce:9a:
24:09:77:75:50:82:40:96:2e:ea:a3:40:2a:e0:8a:c3:b9:ef:
0c:57:23:0a:cb:c7:86:95:c6:cd:2e:df:37:3c:27:21:8f:df:
4a:db:fb:40:de:9d:be:58:95:f6:bc:9c:9d:0c:35:47:bb:3b:
1b:90:e7:5b:3a:ee:ea:1a:73:a6:2c:3b:01:f6:60:e4:03:8d:
12:97:6a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:12:28 2025 by rpki-client