Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/cBOMK4GkmfUj8zCER3y-I6RRUx8.roa
File: cBOMK4GkmfUj8zCER3y-I6RRUx8.roa (raw, json)
Hash identifier: XEyKrzUWCu1JpQ8Kf3Wpk7S9z0xsu1o5ymfdHv6j4Ec=
Subject key identifier: 70:13:8C:2B:81:A4:99:F5:23:F3:30:84:47:7C:BE:23:A4:51:53:1F
Certificate issuer: /CN=411a2a9405bda1671c10776f4426273c904e4ad0
Certificate serial: 0197EFE40AD5B01C59902F4F63BB7D17DE21
Authority key identifier: 41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/cBOMK4GkmfUj8zCER3y-I6RRUx8.roa
Signing time: Wed 09 Jul 2025 15:53:08 +0000
ROA not before: Wed 09 Jul 2025 15:53:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 45.11.252.0/24 maxlen: 24
45.11.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ef:e4:0a:d5:b0:1c:59:90:2f:4f:63:bb:7d:17:de:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411a2a9405bda1671c10776f4426273c904e4ad0
Validity
Not Before: Jul 9 15:53:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70138c2b81a499f523f33084477cbe23a451531f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:72:82:e0:52:24:1c:cc:1c:1e:88:eb:6d:a3:
e3:ab:67:58:2e:52:f1:5c:b8:99:e4:3b:e5:ea:b4:
b9:37:63:52:70:a4:1a:48:51:85:10:e1:de:73:6f:
b6:ff:9c:bd:ac:03:00:2d:c1:5a:35:24:6e:44:92:
ee:9d:e2:3b:b0:f6:d2:a0:42:c6:f5:42:c5:41:68:
0c:ab:40:fd:ee:c2:75:b2:a3:83:07:14:5c:bf:e5:
c0:bb:08:97:05:4f:cf:75:d2:87:b6:0c:5a:52:cc:
f0:02:35:f4:6c:c5:6c:e7:05:7e:f9:f0:91:18:98:
85:2d:31:40:3c:3c:8a:85:8b:b6:0c:fd:6a:db:fb:
ed:13:ab:1c:38:e3:36:c1:5b:91:44:a9:cb:63:72:
45:4d:52:e2:13:3b:62:27:8c:ee:dc:1c:83:56:7d:
ce:41:5a:c8:d0:73:55:d0:71:80:dc:7e:07:79:f0:
ed:a7:fb:c6:4e:f8:5c:f9:ab:05:be:71:08:3a:75:
70:2c:ae:df:7c:de:fe:75:3d:e7:a6:d3:bc:5c:cb:
b4:75:dd:f9:d3:97:be:15:53:09:eb:fa:1c:02:50:
8f:39:ac:a3:26:4e:2b:1f:db:d6:41:21:78:9c:73:
72:8a:d4:02:20:06:30:87:5d:18:17:87:6a:ea:e7:
62:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:13:8C:2B:81:A4:99:F5:23:F3:30:84:47:7C:BE:23:A4:51:53:1F
X509v3 Authority Key Identifier:
keyid:41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/cBOMK4GkmfUj8zCER3y-I6RRUx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.252.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:97:2f:8e:e9:11:e9:85:0a:ea:89:d0:d1:6e:c8:0a:61:1e:
bd:1c:34:fb:ae:c3:5a:50:86:11:81:63:c2:39:29:ae:5b:f9:
00:2e:6a:48:da:58:85:a0:a7:45:8f:c0:a1:a1:83:0d:72:d6:
61:3a:4d:ec:60:65:67:69:46:45:18:f9:f8:01:09:29:be:3c:
87:dd:90:b7:09:6e:3c:94:02:d1:49:2f:d2:70:07:53:bb:8d:
cf:28:d6:c3:f6:c1:0a:f5:af:a0:bd:50:fe:c3:6a:3c:63:66:
22:40:5e:19:e1:96:2d:39:26:c6:98:ec:5f:41:48:e2:5a:8d:
ef:0b:cf:02:f9:e3:44:2f:7e:66:db:fb:f4:88:95:90:32:5c:
17:68:fb:23:19:74:53:35:72:24:d7:b6:94:34:06:3c:ba:1f:
ce:20:af:f8:12:68:4f:8e:f9:07:a8:2f:7a:a2:e7:cb:1f:1e:
ab:94:80:b0:bd:c9:f4:c3:ba:f9:69:63:9d:b7:b0:8f:79:24:
5b:51:b7:f3:43:56:3c:81:e9:cb:a2:61:9a:c3:9b:3f:0e:b4:
04:d3:af:94:c0:95:00:78:32:7d:45:c5:21:44:86:5b:1d:d6:
ca:db:53:3c:e0:76:5f:17:91:23:ef:ad:31:9f:40:b4:67:65:
7a:e7:c5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:32:33 2025 by rpki-client