Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/6bjGxv058xbyldplX2BvsXVgbdE.roa
File: 6bjGxv058xbyldplX2BvsXVgbdE.roa (raw, json)
Hash identifier: kggGouw+d6ECnG76t/i7tg5F68+rUSk2ZkP7pqn23K8=
Subject key identifier: E9:B8:C6:C6:FD:39:F3:16:F2:95:DA:65:5F:60:6F:B1:75:60:6D:D1
Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a
Certificate serial: 0197E1DA358298D853B3A105E79E733065E4
Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/6bjGxv058xbyldplX2BvsXVgbdE.roa
Signing time: Sun 06 Jul 2025 22:27:43 +0000
ROA not before: Sun 06 Jul 2025 22:27:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61435
IP address blocks: 45.137.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e1:da:35:82:98:d8:53:b3:a1:05:e7:9e:73:30:65:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a
Validity
Not Before: Jul 6 22:27:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9b8c6c6fd39f316f295da655f606fb175606dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:89:21:3f:55:e0:58:4b:7a:3a:02:c6:3e:ea:
7f:68:5b:37:08:25:69:a7:fe:ec:21:14:25:d5:ea:
7d:e7:3c:f6:c2:ce:34:e2:2a:cd:cf:e4:40:ea:d5:
fd:e9:7d:6d:60:4b:cb:1f:90:84:e4:9c:5e:f7:56:
8b:51:a0:84:15:94:75:80:24:79:85:c7:f9:b0:0e:
32:09:42:9b:92:e5:1c:db:ce:6c:46:ab:3d:82:83:
a1:10:75:fc:71:33:fc:74:1d:93:47:59:4d:da:00:
e0:fc:ec:7b:ad:1a:49:7f:c0:b3:62:91:1d:a1:b4:
ba:35:0b:da:d5:eb:d8:56:00:62:47:93:9e:74:3b:
a6:71:01:44:53:60:8f:7b:3a:8b:a7:e9:42:ad:18:
d1:2f:e9:c3:fe:17:c6:1f:0a:e0:f8:db:7b:3a:98:
15:17:62:3b:d8:bf:6e:2d:8e:4f:f7:85:2a:68:fd:
e8:20:b6:83:63:4d:94:cb:a3:f9:1a:b5:76:6a:b6:
e1:b2:e3:ac:0a:fe:93:89:40:20:83:7e:7d:da:5a:
61:db:b5:e2:25:77:b2:3c:c4:4e:f9:2b:0a:cf:0b:
b3:46:cb:e0:18:70:5b:d4:ef:3a:60:8b:11:b9:6f:
9b:74:24:f2:34:0b:55:fc:2d:59:a0:12:de:22:f8:
27:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B8:C6:C6:FD:39:F3:16:F2:95:DA:65:5F:60:6F:B1:75:60:6D:D1
X509v3 Authority Key Identifier:
keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/6bjGxv058xbyldplX2BvsXVgbdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.104.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:f9:44:15:24:1a:28:b6:29:73:48:3e:72:e3:f3:fc:91:83:
7e:49:0d:6f:0e:c4:c6:1a:c9:0e:d7:95:f9:c2:1e:c8:d7:39:
f9:52:40:bc:bc:1c:06:da:e6:93:b7:8b:62:3a:3f:1c:9b:61:
1b:37:cb:b6:88:e2:1a:38:4a:3b:7a:22:1a:1c:fe:aa:fb:62:
a7:75:e3:ce:cb:a3:ca:36:50:20:88:f3:d7:d7:8a:af:d1:02:
ff:fe:dd:8a:d0:68:d4:1d:23:d2:6c:21:0e:30:76:a9:de:d1:
52:5b:b6:24:10:e4:e2:ea:9c:fe:34:59:c0:4c:6a:38:53:1b:
02:5f:12:bd:2c:15:6f:34:f0:38:53:2c:3a:fb:fe:95:fd:43:
e4:ca:41:1a:1a:a9:72:e3:0f:b5:76:86:b1:9f:f2:ab:f1:08:
45:e7:fd:6f:7c:3c:24:2c:de:ad:e3:0e:28:a2:ca:aa:b6:58:
ec:ad:5a:13:88:d9:ea:d2:2b:a8:01:28:82:50:4f:69:dc:b1:
5e:2e:16:ad:00:3a:59:b4:e0:0d:35:c3:17:6f:df:94:a9:92:
30:eb:d6:38:84:42:15:b9:07:00:70:2d:9f:5d:aa:98:f2:8e:
ba:f5:f4:6f:14:d8:ea:54:77:64:50:29:3d:0f:00:5c:40:3c:
5e:93:4c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:29:59 2025 by rpki-client