Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/c4yvyMKIOxEnq8qnOJowF2Jzm7s.roa
File: c4yvyMKIOxEnq8qnOJowF2Jzm7s.roa (raw, json)
Hash identifier: s8IHGFPKGHVe+UT4NM56ryEb8GnNOyNh3KVfvOyTvrs=
Subject key identifier: 73:8C:AF:C8:C2:88:3B:11:27:AB:CA:A7:38:9A:30:17:62:73:9B:BB
Certificate issuer: /CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Certificate serial: 0197E4F4DEC304B09374CF3DED0122AA65E2
Authority key identifier: 0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/c4yvyMKIOxEnq8qnOJowF2Jzm7s.roa
Signing time: Mon 07 Jul 2025 12:55:42 +0000
ROA not before: Mon 07 Jul 2025 12:55:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 146943
IP address blocks: 45.67.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e4:f4:de:c3:04:b0:93:74:cf:3d:ed:01:22:aa:65:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Validity
Not Before: Jul 7 12:55:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=738cafc8c2883b1127abcaa7389a301762739bbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:af:7f:8b:ce:86:38:1b:ec:97:26:68:7d:7e:
48:1b:ed:67:c2:04:06:d2:60:fb:1b:37:77:14:5a:
fc:41:d9:40:e6:14:76:9c:78:8d:1f:e1:8d:7b:68:
86:b4:c8:5c:7f:17:3b:df:0f:7f:7a:a5:ae:ef:8f:
47:b4:03:63:25:20:f4:fb:38:ea:1e:ab:69:2c:42:
e3:05:42:f3:49:8e:94:7d:9e:a8:d6:d4:d6:6e:3b:
b1:0e:5b:a7:45:26:52:32:16:56:b3:a4:5a:73:8b:
de:47:e1:e6:0c:c7:ac:22:4c:a2:86:10:9e:87:75:
77:a9:e8:4a:1a:32:98:39:2c:a3:0a:1f:41:c2:e3:
38:52:b8:b1:0a:51:b2:34:2b:2e:10:95:8d:6d:31:
2c:82:1d:37:48:a1:08:b3:4c:96:6a:78:26:9b:f5:
48:00:87:fd:9c:43:c0:73:43:f1:6f:1e:7b:41:8e:
f7:d2:11:1c:13:fe:42:d9:61:3e:1a:7b:54:ca:cd:
fe:c5:1c:6e:97:ff:ed:39:3a:87:d3:ef:90:3b:2c:
a5:11:a1:67:22:77:63:0e:a8:bf:ce:90:69:bc:f2:
85:39:51:d4:dd:3e:e6:28:6f:76:3e:9a:f5:3a:52:
30:e9:7b:ae:d9:8f:a1:10:bb:73:7c:93:06:b7:50:
1f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8C:AF:C8:C2:88:3B:11:27:AB:CA:A7:38:9A:30:17:62:73:9B:BB
X509v3 Authority Key Identifier:
keyid:0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/c4yvyMKIOxEnq8qnOJowF2Jzm7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.52.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:7e:60:ed:60:d1:32:31:fe:d0:11:37:b0:26:0a:7e:17:a3:
42:cd:fa:b4:94:ef:ec:28:bb:ef:26:a7:90:90:47:6a:9f:a7:
96:be:c2:8d:cf:13:3e:d2:32:10:c0:10:4a:2e:04:3e:31:17:
81:a6:cb:3c:25:c1:33:3d:f3:39:b7:bb:06:06:81:5a:50:ef:
89:b7:47:01:4e:c2:18:6f:0d:25:4f:e6:26:3e:7a:5e:bd:26:
de:6d:76:cf:57:9f:d0:2a:10:19:ea:00:92:3e:9a:6b:b3:5a:
0e:73:81:c6:c2:18:7d:07:70:77:80:98:07:30:8f:ca:9f:38:
ba:9d:fc:cd:dc:66:7a:ef:6a:ea:5a:c6:12:37:35:a2:88:5b:
70:56:b5:10:cb:b9:d7:45:a1:39:68:92:fb:7d:20:b0:a6:27:
40:31:44:9c:98:c1:14:a1:63:80:e5:c1:15:29:71:78:a3:d0:
5a:32:0b:39:60:9c:38:ac:00:5e:1f:52:d6:a8:48:24:04:f8:
cb:2c:47:f9:b0:e1:d1:72:42:27:2a:95:53:fe:09:1e:b4:02:
a8:a5:07:33:a0:a8:3f:4b:8e:7c:f6:25:f6:5e:e8:8d:86:d5:
40:fc:0d:3a:94:ed:77:26:a1:3a:c6:bc:2a:ec:40:5d:40:4f:
0c:5b:50:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:41:28 2025 by rpki-client