Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/DxqkdLeiFvwWuO9J5kptwfBu7ac.roa
File: DxqkdLeiFvwWuO9J5kptwfBu7ac.roa (raw, json)
Hash identifier: PIUAC3waOfT1jkyoKllhRcI8tnEFK/SHfI9K6WgwRfU=
Subject key identifier: 0F:1A:A4:74:B7:A2:16:FC:16:B8:EF:49:E6:4A:6D:C1:F0:6E:ED:A7
Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial: 0197F72DE176C17651B8CF4CD9D992DE7081
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/DxqkdLeiFvwWuO9J5kptwfBu7ac.roa
Signing time: Fri 11 Jul 2025 01:51:08 +0000
ROA not before: Fri 11 Jul 2025 01:51:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.140.247.0/24 maxlen: 24
81.199.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f7:2d:e1:76:c1:76:51:b8:cf:4c:d9:d9:92:de:70:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Validity
Not Before: Jul 11 01:51:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f1aa474b7a216fc16b8ef49e64a6dc1f06eeda7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3f:79:5e:fe:00:9e:ab:09:cf:e9:86:06:f7:
c0:48:85:73:9e:03:8a:b8:91:ed:1b:97:52:4c:d7:
2c:b1:84:5f:21:dc:de:08:c1:7c:69:d3:69:cb:f0:
13:9b:c8:f4:94:aa:f3:0c:d2:c2:c6:97:f3:7c:d0:
21:06:9a:43:f1:20:a2:c4:9d:e3:8b:92:a5:35:01:
bc:2c:6e:ea:9e:7f:43:f0:8e:5e:98:e7:a3:2d:5d:
a8:e0:37:3e:b5:af:46:9c:cb:8c:38:c3:cd:64:1d:
2f:b9:a2:54:c0:fc:44:7d:19:b3:af:52:8f:86:87:
98:63:47:96:96:46:62:09:13:25:76:5f:9d:44:06:
22:32:5f:17:88:1d:24:e1:3c:25:72:4a:34:93:e2:
40:9b:20:e8:98:e9:0f:b0:70:60:d7:c4:35:ac:c5:
e9:da:50:c5:32:24:1a:92:b4:03:9b:3a:ff:20:05:
37:08:ff:46:75:c3:ca:67:a4:9f:4e:e6:0c:31:56:
44:f6:2f:74:c2:68:d7:58:07:35:04:97:d3:64:cb:
7b:da:8c:fa:48:13:8a:50:cc:5e:64:91:da:7f:10:
30:6e:f5:3c:44:00:ee:b4:df:c2:17:ec:cc:8c:69:
cf:e4:a4:6b:73:f8:d9:ae:12:32:a8:53:e2:25:a2:
51:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:1A:A4:74:B7:A2:16:FC:16:B8:EF:49:E6:4A:6D:C1:F0:6E:ED:A7
X509v3 Authority Key Identifier:
keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/DxqkdLeiFvwWuO9J5kptwfBu7ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.247.0/24
81.199.28.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:5e:d3:40:e5:d2:87:55:8f:14:c5:d1:91:72:4b:44:37:01:
8c:f6:d0:a3:03:89:92:37:21:c1:ab:a3:e6:5d:a3:47:81:42:
d8:05:79:12:9d:0f:ff:25:e4:48:52:83:3b:52:9e:d8:cb:0a:
ac:f1:6e:ab:06:c2:5c:e8:62:15:f2:73:a8:62:99:6f:05:05:
46:4d:68:05:07:d6:ca:46:58:27:22:28:44:8f:70:98:1a:eb:
25:7a:a0:47:2f:0f:40:0c:39:89:ae:98:d6:46:d8:9f:62:da:
65:d1:01:a7:08:9c:7a:4e:8b:97:5c:1b:75:ac:7f:9f:0a:b5:
4a:97:1d:6d:f8:a7:7a:0c:f8:9b:16:ff:f5:7a:58:cf:3d:4c:
0d:4c:96:58:35:7a:b3:ae:61:cc:54:97:53:6e:e9:0e:3b:1e:
a4:63:04:3c:0c:1e:6f:2e:32:c4:7d:45:e1:a8:a8:9c:8b:04:
4d:e7:4b:c0:be:c1:51:6a:6e:8f:19:05:a2:93:a9:e6:b3:f2:
a1:08:5e:00:36:a7:22:fa:c2:8f:bc:85:1a:78:60:25:22:49:
d5:eb:93:3c:1a:49:24:48:b2:24:90:7f:c9:8a:1c:1c:99:6d:
d8:c5:8d:d6:21:5f:3d:e9:78:ec:0e:27:75:d6:12:93:7a:53:
ba:b2:e6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:25:03 2025 by rpki-client