Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/W74fRtxWP45H2qDWGmyHTrRRJMs.roa
File: W74fRtxWP45H2qDWGmyHTrRRJMs.roa (raw, json)
Hash identifier: ODFm1egnbk5rxWiMpOxrRde6BeaPp5PaUGt8bFJQGsE=
Subject key identifier: 5B:BE:1F:46:DC:56:3F:8E:47:DA:A0:D6:1A:6C:87:4E:B4:51:24:CB
Certificate issuer: /CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Certificate serial: 0197EF980CE951E7DF60ABA2A425F00FD6F2
Authority key identifier: 54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/W74fRtxWP45H2qDWGmyHTrRRJMs.roa
Signing time: Wed 09 Jul 2025 14:30:08 +0000
ROA not before: Wed 09 Jul 2025 14:30:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 185.101.168.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.mft
rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ef:98:0c:e9:51:e7:df:60:ab:a2:a4:25:f0:0f:d6:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Validity
Not Before: Jul 9 14:30:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5bbe1f46dc563f8e47daa0d61a6c874eb45124cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d8:e1:09:26:5d:78:ed:c6:67:17:e3:02:43:
64:6f:25:5c:df:8c:46:52:75:42:bb:5a:e7:4f:fe:
c3:ba:e2:49:d1:a3:d6:12:8d:cd:0b:3c:a4:8f:bb:
13:b7:12:02:2e:d4:17:4e:56:5f:f8:fd:2a:40:ab:
ed:6e:f3:11:0a:53:9f:94:03:4e:79:d8:76:0b:76:
e0:73:96:58:32:32:ed:e3:e6:23:7e:d0:c3:d9:aa:
90:2a:72:b1:7f:43:b0:9b:36:28:c2:99:40:7f:36:
44:61:59:ae:c0:0d:d9:29:9f:69:a8:60:92:3f:01:
e0:36:a5:6b:c9:33:42:b5:05:d8:d6:d5:fa:fb:7d:
45:29:f2:4b:54:e5:9a:a6:f2:b0:f7:4e:d1:db:0d:
2b:f3:65:35:b3:ac:0e:cb:a3:02:bd:7a:3f:87:6f:
44:91:84:f1:06:cf:72:1f:f9:66:30:5d:e0:7a:9a:
f4:44:58:b0:99:2a:6a:8c:1e:e5:ea:1d:56:dd:59:
0a:70:1c:13:2b:a4:97:9e:b4:0b:b8:5d:31:59:eb:
e8:07:6f:3c:fa:98:4f:a8:31:83:d8:e8:8e:22:01:
b6:ee:f6:2d:04:52:4b:41:5e:1d:9e:64:60:97:96:
f1:e2:b1:02:b2:82:55:52:4b:f3:37:96:37:2b:4d:
62:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:BE:1F:46:DC:56:3F:8E:47:DA:A0:D6:1A:6C:87:4E:B4:51:24:CB
X509v3 Authority Key Identifier:
keyid:54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/W74fRtxWP45H2qDWGmyHTrRRJMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.168.0/23
Signature Algorithm: sha256WithRSAEncryption
bd:bd:f1:80:73:ae:57:4f:53:e9:65:24:b3:36:29:7a:f8:79:
c4:48:b5:95:c0:fa:c6:8e:16:18:bd:96:53:7d:92:5f:5e:e8:
0b:cb:75:7e:0a:1b:79:4d:4f:6b:c1:93:04:97:c5:23:4c:c4:
07:3a:49:a4:84:61:12:1f:ea:4a:c2:f9:11:25:76:87:13:a2:
31:9c:25:b3:ce:77:16:00:87:bc:09:18:5e:4e:82:65:1c:d3:
e9:95:12:5e:9a:c4:2c:0c:15:dd:cc:a6:36:5a:1d:49:d5:9d:
da:64:da:9a:e2:ab:d7:b8:fb:b1:dd:96:56:b4:78:2e:66:38:
77:62:51:61:d5:d8:57:fd:db:52:a9:44:25:c2:d1:66:e9:2a:
03:d2:49:96:d0:59:5b:ef:0b:83:16:39:72:7f:b5:c7:d4:09:
a9:b0:11:c3:b8:ed:c5:69:df:53:d9:83:0b:35:fb:e0:f3:2a:
54:a6:49:b9:6d:74:6f:fe:ab:34:89:74:9f:a7:66:52:83:74:
53:22:e8:77:ae:fa:3a:c3:da:8c:7a:da:32:ff:04:0c:d7:bb:
ab:25:f8:a3:15:22:b8:2a:2d:5c:e7:60:81:d2:f9:45:86:06:
e1:63:82:8d:99:6f:b0:17:8d:43:b9:09:a9:2d:73:00:af:71:
61:c7:96:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:02:11 2025 by rpki-client