Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/RaiKX716o5Rz_Ng5UE1aeWtLSVs.roa
File: RaiKX716o5Rz_Ng5UE1aeWtLSVs.roa (raw, json)
Hash identifier: 0J3PFc9dRkko2xQVtdxnaJb/1/hwBz4NgXNNIiujQmQ=
Subject key identifier: 45:A8:8A:5F:BD:7A:A3:94:73:FC:D8:39:50:4D:5A:79:6B:4B:49:5B
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 0197F9BB91BAAA8F6D685178F5F610A0F455
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/RaiKX716o5Rz_Ng5UE1aeWtLSVs.roa
Signing time: Fri 11 Jul 2025 13:45:08 +0000
ROA not before: Fri 11 Jul 2025 13:45:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58299
IP address blocks: 45.11.248.0/22 maxlen: 24
45.11.248.0/23 maxlen: 23
45.11.250.0/24 maxlen: 24
45.11.251.0/24 maxlen: 24
2a0e:8f04::/32 maxlen: 48
2a0e:8f05::/32 maxlen: 48
2a0e:8f06::/32 maxlen: 48
2a0e:8f07::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f9:bb:91:ba:aa:8f:6d:68:51:78:f5:f6:10:a0:f4:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jul 11 13:45:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45a88a5fbd7aa39473fcd839504d5a796b4b495b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:39:b8:52:51:cf:5a:1d:90:43:2d:c0:f6:7f:
38:a7:74:2f:c9:96:9a:30:bf:86:43:56:4e:20:f7:
58:4b:f6:a9:20:13:78:ce:ea:e1:64:37:b1:bb:30:
29:90:47:00:12:aa:f1:75:45:1a:45:6f:50:fb:b6:
30:be:0d:a9:00:90:d1:64:f5:4e:bd:b8:22:bd:1e:
2a:8a:d7:ef:2e:e0:0e:cc:64:1e:d4:8b:1e:73:a0:
84:2d:4d:93:fb:df:79:77:03:7a:b7:cb:a2:18:82:
b5:1f:1a:c5:6e:7e:20:9e:b1:fe:01:19:35:f1:c5:
ad:c2:04:2e:ce:7e:e1:35:5d:c4:4c:31:7b:ce:31:
85:07:f7:c3:1a:0c:2b:cb:68:9a:28:a7:0e:6b:d8:
1b:ba:66:54:a8:85:88:c0:b2:c8:ce:a6:88:00:32:
6b:92:c0:7a:a0:ad:1b:86:03:47:f8:f7:8f:0b:e7:
4b:9d:ca:87:fd:54:4b:4c:12:c1:11:38:94:b5:fe:
5b:54:51:48:4a:07:2f:18:3e:2b:2f:c7:3b:82:f4:
86:39:6c:c8:73:51:43:c7:28:d6:71:50:f9:9f:01:
3b:3f:b3:28:6a:ad:ac:14:a1:15:90:f6:ca:24:db:
bb:20:bf:8e:65:77:3b:bc:5e:90:bf:e9:3a:f6:69:
21:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A8:8A:5F:BD:7A:A3:94:73:FC:D8:39:50:4D:5A:79:6B:4B:49:5B
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/RaiKX716o5Rz_Ng5UE1aeWtLSVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.248.0/22
IPv6:
2a0e:8f04::/30
Signature Algorithm: sha256WithRSAEncryption
80:46:db:e1:10:91:4a:f4:6f:ed:40:37:80:30:40:4b:3c:73:
86:20:e7:08:a5:6e:e0:fa:2f:03:d2:e6:e4:a5:36:83:63:b7:
68:48:5b:fe:1f:36:95:41:55:ff:25:bd:3a:ed:9b:36:68:88:
c5:fe:14:7e:c8:d3:08:92:c3:2e:51:15:17:64:0d:13:df:65:
0c:d4:52:d0:d4:62:63:1b:7e:41:f3:5f:5b:84:71:4c:43:3b:
82:eb:0f:3a:64:a2:6c:e7:23:ea:e9:8d:60:9f:af:22:dc:59:
c7:03:42:8b:92:47:b2:91:7d:62:6d:3a:da:03:85:8f:f9:de:
b8:12:fe:8f:68:d1:39:fe:46:ce:49:7c:3f:54:93:66:74:b9:
11:74:85:13:05:88:ef:4c:cd:1d:04:bf:3a:54:9e:d1:13:17:
b8:9b:5b:4d:09:43:af:4b:a8:db:59:5f:cc:0c:33:ee:d0:f9:
af:c5:16:fb:7a:e1:fd:d7:6c:9c:c6:b6:3d:27:5a:46:bf:38:
11:0c:e3:f1:66:c8:fd:86:5b:8e:61:44:35:38:5e:85:0e:e9:
17:03:8c:36:b0:5f:6d:7b:1c:71:8b:b1:fc:0d:c3:37:df:65:
e2:40:c6:35:76:97:d6:6b:f0:3e:52:93:7d:34:42:a4:66:3e:
0b:2a:ba:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 06:21:11 2025 by rpki-client