Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/1W5jBhM2asNXAd6Fvn9ZWx6hGWA.roa
File: 1W5jBhM2asNXAd6Fvn9ZWx6hGWA.roa (raw, json)
Hash identifier: 2BmEhsjJ5rUlKnSSBB9lDoAty6aoaTeOv+q+nl7pHv4=
Subject key identifier: D5:6E:63:06:13:36:6A:C3:57:01:DE:85:BE:7F:59:5B:1E:A1:19:60
Certificate issuer: /CN=1372e0c2b83dd5109013c7f1c0bb9716d3618dd2
Certificate serial: 0197E8DCC5ED8AEADD7B7DB66033AE41FFEC
Authority key identifier: 13:72:E0:C2:B8:3D:D5:10:90:13:C7:F1:C0:BB:97:16:D3:61:8D:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/1W5jBhM2asNXAd6Fvn9ZWx6hGWA.roa
Signing time: Tue 08 Jul 2025 07:07:52 +0000
ROA not before: Tue 08 Jul 2025 07:07:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 45.146.122.0/24 maxlen: 24
45.146.123.0/24 maxlen: 24
92.118.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 06:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e8:dc:c5:ed:8a:ea:dd:7b:7d:b6:60:33:ae:41:ff:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1372e0c2b83dd5109013c7f1c0bb9716d3618dd2
Validity
Not Before: Jul 8 07:07:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d56e630613366ac35701de85be7f595b1ea11960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ff:a1:d8:44:7c:6a:94:8c:08:ca:be:81:51:
d1:f6:71:2f:43:53:b4:26:b8:a1:a3:44:3b:65:67:
51:a7:ff:41:07:cb:87:a2:a2:8f:35:08:0c:4c:16:
e7:b6:ca:52:aa:c0:ac:7f:f6:67:b4:fc:06:60:f7:
60:4e:ea:1b:fa:50:db:38:31:f7:ef:54:11:ca:3e:
4d:6d:52:35:ba:51:22:fd:a4:74:14:a3:de:d8:46:
ca:ce:eb:ed:94:32:b7:f3:43:d7:12:22:74:38:c6:
84:e3:29:83:36:97:05:42:19:50:3f:27:02:0d:c5:
68:bc:a7:14:76:1f:2d:0e:03:ed:83:10:05:e6:6d:
9b:e5:9c:1c:89:96:0e:65:fb:65:cc:4b:58:b5:56:
d1:17:b1:eb:58:04:11:37:2e:5e:4d:c9:7a:14:ed:
15:88:7f:23:9f:c0:b7:c7:6b:72:13:bf:03:45:45:
6e:b7:24:64:15:7e:cd:ee:49:b6:ef:10:bc:ce:10:
23:cb:55:28:f3:e4:78:4d:ee:25:76:4e:cc:8c:56:
80:4c:c1:54:21:34:16:ee:96:d0:59:eb:ed:f0:d5:
01:01:5c:b7:dd:18:b0:58:27:ab:4f:85:31:4b:d1:
5c:93:7e:df:87:f6:25:33:2b:bc:b0:d9:99:d7:3d:
9e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:6E:63:06:13:36:6A:C3:57:01:DE:85:BE:7F:59:5B:1E:A1:19:60
X509v3 Authority Key Identifier:
keyid:13:72:E0:C2:B8:3D:D5:10:90:13:C7:F1:C0:BB:97:16:D3:61:8D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/1W5jBhM2asNXAd6Fvn9ZWx6hGWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.122.0/23
92.118.46.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:2e:1f:11:47:f6:63:46:62:1a:45:3e:7d:4d:47:05:23:89:
bc:fe:32:ec:b5:aa:a2:9c:48:b2:f1:43:97:89:e1:e9:7f:b6:
01:f7:2d:14:68:9b:98:27:fc:fe:33:af:f5:f9:c7:d4:a6:75:
f9:b7:69:c6:9e:78:bb:6b:1d:78:a1:aa:ee:12:06:0f:58:91:
3e:7c:28:8e:f9:c4:10:d4:ec:29:1f:64:65:5d:73:a6:2e:8a:
da:8f:78:2e:84:72:90:8e:96:8d:29:1c:f9:84:ec:f8:93:e9:
7b:17:e9:5b:aa:d7:27:d3:2e:84:25:70:ca:80:93:91:e1:fb:
a0:9a:00:98:0d:41:59:11:28:c8:00:47:90:90:af:48:08:98:
4f:c0:36:2c:5c:e4:15:3d:69:63:be:3f:b2:14:7e:c9:4f:b2:
13:47:e3:e3:cc:5f:6c:a9:bd:d2:e1:c4:9c:02:b3:d7:7a:b5:
49:c0:75:9c:f0:cf:f3:5c:49:03:c6:c8:7a:d9:cb:1b:ce:5f:
95:d6:31:e6:d7:e8:a0:e0:bf:30:ff:f1:0d:e9:6c:bb:9d:33:
a4:5e:9f:72:56:cf:c3:a2:2a:ea:36:dc:39:0b:07:9c:69:94:
ab:6b:3c:43:80:27:a5:57:0b:5c:ff:58:2c:d6:8f:e9:1e:ad:
21:00:55:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:20:36 2025 by rpki-client