Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/0JHO1-X7wGcaGpl-pLpAVCz8aTM.roa
File: 0JHO1-X7wGcaGpl-pLpAVCz8aTM.roa (raw, json)
Hash identifier: zsfS+cyGk2xh2Z90DNVKJE65eHClSQHHZEU6AiR2qyc=
Subject key identifier: D0:91:CE:D7:E5:FB:C0:67:1A:1A:99:7E:A4:BA:40:54:2C:FC:69:33
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 019824E8FE329CE59BFC1936148B1AE257B5
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/0JHO1-X7wGcaGpl-pLpAVCz8aTM.roa
Signing time: Sat 19 Jul 2025 22:58:25 +0000
ROA not before: Sat 19 Jul 2025 22:58:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49505
IP address blocks: 45.130.187.0/24 maxlen: 24
45.140.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:24:e8:fe:32:9c:e5:9b:fc:19:36:14:8b:1a:e2:57:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Jul 19 22:58:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d091ced7e5fbc0671a1a997ea4ba40542cfc6933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:89:14:4a:e2:49:1b:19:9c:5a:e0:fb:df:74:
a4:eb:39:1e:0d:bc:ce:a3:c6:67:15:cf:8b:81:0e:
20:73:16:d0:97:32:c6:c1:c3:3f:a5:4b:2b:34:2e:
1a:33:5d:49:d1:82:1b:84:f3:48:8d:c2:7f:c1:3b:
02:90:7a:2b:2b:01:03:f2:b8:ef:85:26:23:b7:b4:
94:db:62:f6:94:fe:52:d6:67:e3:7c:54:1e:96:66:
43:43:5a:78:ce:f4:ea:0c:78:cb:0f:0c:a5:fe:10:
77:d7:98:cb:da:6d:04:57:85:a8:df:93:14:42:68:
71:0d:f1:a2:c7:fa:05:96:1e:c9:d6:96:c4:7a:82:
d5:d4:76:51:cc:8b:0d:39:c2:26:b9:24:39:37:b7:
b0:d5:76:07:87:95:9c:01:17:dd:c1:36:3f:4d:a4:
6a:6d:f2:d0:b6:60:77:b4:0a:9f:0c:18:b1:36:f6:
97:bd:54:10:11:2a:80:bb:89:a0:4c:44:7a:35:1a:
cf:ba:5d:7a:ad:e8:6c:d9:76:76:a2:00:e9:37:93:
43:97:f5:69:e2:0e:79:ec:3b:59:7b:82:cb:48:f9:
34:98:b5:4c:77:92:74:cb:6d:69:7d:6d:15:7e:42:
e8:67:de:6d:88:25:50:06:97:20:76:db:63:c6:ae:
d1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:91:CE:D7:E5:FB:C0:67:1A:1A:99:7E:A4:BA:40:54:2C:FC:69:33
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/0JHO1-X7wGcaGpl-pLpAVCz8aTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.187.0/24
45.140.6.0/24
Signature Algorithm: sha256WithRSAEncryption
00:18:c2:5b:06:9d:ba:6d:1d:95:e6:34:d8:37:fe:28:a7:19:
77:59:c3:08:bd:2a:e1:0f:7e:d5:d6:11:f2:c7:10:86:2f:81:
2b:97:77:34:18:b9:5a:3b:ea:10:26:1f:a3:83:39:52:4d:64:
d4:c0:9e:1c:b8:9c:f3:45:c3:52:47:da:d6:d6:04:db:89:6e:
3f:dc:57:32:d4:5b:ec:cb:a5:cb:32:24:b1:3e:32:9c:46:83:
be:73:3e:96:cc:ca:97:d4:2a:08:e0:50:99:74:c7:4b:9b:61:
49:2a:18:62:12:3e:e6:0d:e8:42:d9:72:d3:4a:b4:5b:20:dd:
23:8c:f8:cf:0f:59:3b:7c:7f:83:93:8c:84:68:f2:91:68:d9:
98:62:dd:58:de:af:d9:77:3b:ba:89:e3:4c:03:e6:ae:74:c6:
f8:74:e6:8a:7e:ee:30:56:ce:08:8e:60:02:ad:e9:85:70:50:
66:8a:91:23:05:90:ec:3e:c8:bc:b2:6f:42:ad:b7:f2:da:dc:
b7:03:9f:ae:c4:27:b6:51:39:d7:07:ec:c6:d0:11:6f:14:30:
4d:e6:e6:2b:e9:f1:35:d1:14:b2:c9:dc:e7:6d:0f:8f:5a:d8:
d6:2b:a9:32:c4:6c:21:2e:d4:e3:41:4d:d2:80:13:25:da:64:
c2:d8:d5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:05:54 2025 by rpki-client