Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/tusGHuemKxJEouTT2Dt00jxkpNE.roa
File: tusGHuemKxJEouTT2Dt00jxkpNE.roa (raw, json)
Hash identifier: EY8wTIVVgdpKzSD1Zx8DGd8TDmPVDkE4Wh1dl0CmPFU=
Subject key identifier: B6:EB:06:1E:E7:A6:2B:12:44:A2:E4:D3:D8:3B:74:D2:3C:64:A4:D1
Certificate issuer: /CN=1372e0c2b83dd5109013c7f1c0bb9716d3618dd2
Certificate serial: 0197E8DCC5AF6D157AB7EF312C66AF28980F
Authority key identifier: 13:72:E0:C2:B8:3D:D5:10:90:13:C7:F1:C0:BB:97:16:D3:61:8D:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/tusGHuemKxJEouTT2Dt00jxkpNE.roa
Signing time: Tue 08 Jul 2025 07:07:51 +0000
ROA not before: Tue 08 Jul 2025 07:07:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199967
IP address blocks: 45.146.120.0/24 maxlen: 24
45.146.121.0/24 maxlen: 24
92.118.44.0/24 maxlen: 24
92.118.45.0/24 maxlen: 24
92.118.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 16:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e8:dc:c5:af:6d:15:7a:b7:ef:31:2c:66:af:28:98:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1372e0c2b83dd5109013c7f1c0bb9716d3618dd2
Validity
Not Before: Jul 8 07:07:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6eb061ee7a62b1244a2e4d3d83b74d23c64a4d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:22:35:b5:11:7d:65:19:d7:94:1c:32:49:bf:
69:5b:a5:30:7c:a2:28:41:02:41:52:3f:ab:e6:f5:
ba:c4:06:68:32:81:49:0c:a1:ef:88:42:54:69:3f:
0a:1f:6c:64:d8:82:94:b6:50:f3:79:f4:30:89:47:
c2:3f:1c:e4:f8:c8:ac:b1:ae:17:a7:34:21:32:91:
df:72:16:81:f6:c1:8a:fe:c8:48:83:2d:29:29:98:
05:b9:ec:af:dd:5e:79:97:d5:0b:d0:9e:67:a7:a7:
77:7d:fa:db:a5:9d:20:49:67:de:50:31:42:f6:10:
5e:c1:ba:5f:99:34:2f:ac:5f:c5:00:9f:6d:b3:09:
cd:72:59:38:6a:d8:77:ec:b6:4a:f2:5c:09:04:d5:
81:2c:f0:2b:92:18:24:80:69:d7:4b:e8:14:11:55:
45:44:30:c1:6e:02:46:8e:e6:a1:e5:ef:96:c4:08:
37:2e:9e:ff:b2:ed:79:40:2d:ca:e3:8b:7c:4d:62:
3c:5c:1b:03:36:5b:2b:ec:5a:98:58:04:59:9d:1b:
f7:f5:6d:ab:76:67:92:30:45:bb:d8:ca:0f:ee:9f:
da:1d:3e:22:b8:29:5f:ba:6e:c0:6d:3a:c4:41:b7:
30:c4:9f:10:5b:b5:f7:0a:97:52:8d:bd:45:6e:b2:
be:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:EB:06:1E:E7:A6:2B:12:44:A2:E4:D3:D8:3B:74:D2:3C:64:A4:D1
X509v3 Authority Key Identifier:
keyid:13:72:E0:C2:B8:3D:D5:10:90:13:C7:F1:C0:BB:97:16:D3:61:8D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/tusGHuemKxJEouTT2Dt00jxkpNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.120.0/23
92.118.44.0/23
92.118.47.0/24
Signature Algorithm: sha256WithRSAEncryption
21:19:c4:40:c2:54:42:e1:6d:ad:86:5f:ed:56:38:fd:2c:2c:
21:18:c9:08:02:e5:88:bd:70:df:b4:9c:0e:19:fb:32:87:a2:
47:7d:3d:42:5f:d7:67:b0:e5:d8:80:c7:df:93:23:93:72:c8:
31:c7:85:ab:3b:d0:f2:1f:3b:27:18:57:46:5d:5b:61:31:ed:
aa:8d:88:80:93:1f:90:6d:0f:01:1a:ba:5e:47:d1:1e:93:fb:
93:53:0b:26:41:7a:78:b4:25:cb:bf:09:d0:62:53:54:96:74:
70:8b:eb:6e:7b:bd:af:27:45:be:e9:54:46:5a:72:b3:9e:58:
28:20:b2:0a:7b:ec:8c:09:ce:18:0c:d9:ae:02:d9:b6:3f:d4:
75:2b:b7:4b:b0:33:4a:04:89:2f:e1:77:0e:a0:42:8c:28:16:
fd:3b:02:a2:6f:1b:91:bc:11:55:d9:28:99:23:b3:3c:fe:e1:
6a:38:24:67:09:d6:ca:fa:fa:03:6e:ce:45:0c:89:ad:8e:b7:
2e:7c:7f:f7:7f:37:99:7c:61:d6:0d:d5:e2:69:99:69:c5:02:
53:23:e2:47:ce:81:b1:85:24:15:1b:b7:85:b9:4d:0d:e8:69:
17:bc:b7:46:fa:29:38:19:a0:8c:5c:20:42:33:d0:5a:78:92:
82:5c:cd:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:05:45 2025 by rpki-client