Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/V2QerUVRM4I-KHUH0ovp-p451cY.roa
File: V2QerUVRM4I-KHUH0ovp-p451cY.roa (raw, json)
Hash identifier: z4vzfNN3tVFRq/CYDkyGwCnix5wwMn5+M5swBk1DVFs=
Subject key identifier: 57:64:1E:AD:45:51:33:82:3E:28:75:07:D2:8B:E9:FA:9E:39:D5:C6
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 019809D631110D2372909DAB77C77AF7FA85
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/V2QerUVRM4I-KHUH0ovp-p451cY.roa
Signing time: Mon 14 Jul 2025 16:48:08 +0000
ROA not before: Mon 14 Jul 2025 16:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209847
IP address blocks: 45.142.213.0/24 maxlen: 24
45.142.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:09:d6:31:11:0d:23:72:90:9d:ab:77:c7:7a:f7:fa:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jul 14 16:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57641ead455133823e287507d28be9fa9e39d5c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d1:1a:ac:70:3e:cc:ad:a6:fc:cf:f6:a4:5f:
33:4f:8b:19:91:7c:c6:d2:dd:46:2e:27:68:2d:9c:
0f:61:06:bf:90:ab:42:6f:df:36:58:a0:df:ef:bf:
3d:aa:2c:c6:62:bd:db:8d:20:b7:a3:37:35:d6:ba:
e4:fa:5b:7b:bf:b0:78:3f:79:4e:7c:ea:67:e4:fc:
1e:5f:68:24:df:40:49:91:f5:2c:f9:35:37:46:15:
f2:71:8c:7e:f0:b1:08:e7:46:5e:4d:34:3e:12:ec:
31:40:ea:76:36:e5:c3:92:60:2d:21:8c:52:51:a0:
7e:ee:87:b5:f5:f5:ef:20:4c:6c:14:fc:df:a4:78:
9b:a6:25:53:49:02:66:be:c4:33:9b:15:46:91:06:
21:5f:17:32:3d:f2:cc:ab:67:32:50:e9:e1:03:61:
18:43:63:42:3c:b3:97:63:e7:3c:49:10:0c:ba:9a:
3f:ce:43:56:b7:e9:c7:4c:82:5b:56:d2:2f:60:ca:
00:aa:84:6f:7c:1d:4e:e1:87:61:72:0c:35:25:1b:
a6:06:00:06:a3:ef:de:ff:69:02:18:fb:91:6a:82:
dd:e3:27:03:2f:92:33:64:ad:8a:c6:55:00:d7:7d:
b0:28:16:72:1a:a1:5f:8c:28:6b:6b:75:16:4c:1d:
db:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:64:1E:AD:45:51:33:82:3E:28:75:07:D2:8B:E9:FA:9E:39:D5:C6
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/V2QerUVRM4I-KHUH0ovp-p451cY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.213.0/24
45.142.215.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:b6:f8:d7:56:86:c3:00:ea:0d:f2:f4:26:cd:e1:fb:dd:c7:
fc:a8:c8:43:2a:87:96:25:f4:ae:cf:30:7b:42:7e:03:55:ed:
47:84:ef:71:ca:5f:f1:ad:ae:0d:ae:df:62:80:5f:78:82:1e:
eb:b1:1a:41:15:ef:09:ac:eb:2e:e2:24:af:8e:e1:3d:da:f4:
b9:ec:f3:a3:26:af:0b:b6:ec:f9:ce:5c:e6:96:91:0a:b5:2a:
03:62:9d:ed:92:5d:04:1a:3d:cc:dc:0a:38:12:1a:13:5d:1a:
5f:39:9a:5d:dc:41:36:1c:bc:99:65:6e:d7:7c:ad:63:ae:3c:
bc:02:1a:d9:e1:d9:8c:db:6d:20:87:f4:f0:44:7f:2e:9a:c6:
f6:58:50:3f:26:d2:92:7d:d0:91:d5:80:8e:86:cc:7a:bc:1d:
dd:c4:8f:fc:dd:0f:f0:46:5f:31:8c:03:b4:e1:f0:07:a9:52:
59:85:5b:28:e8:84:0c:d6:65:01:0b:06:a2:99:41:b9:35:f4:
c8:ff:f0:6f:ba:ec:8a:6a:c5:92:9e:a4:89:f2:46:4e:3b:b3:
ba:95:54:f6:71:0e:af:34:18:aa:c1:1a:d0:1b:63:42:3f:92:
49:62:9a:ca:a8:32:ca:c9:37:42:0c:30:da:69:f5:9f:17:7b:
5b:61:7e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 03:45:40 2025 by rpki-client