Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/tXkbQt37ep9cFP4X0yP6Jr01nt8.roa
File: tXkbQt37ep9cFP4X0yP6Jr01nt8.roa (raw, json)
Hash identifier: uFrSH0AZn8p8NoixHghgYI6yNRcf7/W9G2Rgl77UhAk=
Subject key identifier: B5:79:1B:42:DD:FB:7A:9F:5C:14:FE:17:D3:23:FA:26:BD:35:9E:DF
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 0197D1BDBE6F3D44560A4F19C5538EBC669E
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/tXkbQt37ep9cFP4X0yP6Jr01nt8.roa
Signing time: Thu 03 Jul 2025 19:22:42 +0000
ROA not before: Thu 03 Jul 2025 19:22:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216475
IP address blocks: 46.243.3.0/24 maxlen: 24
95.81.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d1:bd:be:6f:3d:44:56:0a:4f:19:c5:53:8e:bc:66:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Jul 3 19:22:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5791b42ddfb7a9f5c14fe17d323fa26bd359edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fb:c3:d7:5c:56:4b:a8:f7:dc:fc:de:a2:76:
e9:4e:ce:1e:2f:9c:8b:cd:3f:f8:09:fb:fd:57:34:
c5:ea:84:7c:c5:f1:ad:35:42:44:4f:3f:86:71:ef:
62:a0:23:34:6b:f5:91:d5:56:ce:99:b0:78:7f:f6:
79:2a:e3:16:60:8b:d0:07:f3:db:d8:64:08:82:f2:
a5:b6:03:57:02:88:df:7e:d0:53:1d:91:cb:45:58:
fd:31:48:df:5c:d2:8c:f3:c9:ce:42:30:7a:0d:a2:
d4:37:98:a8:98:49:ec:df:f4:4c:52:99:7b:29:de:
a6:a4:ed:6e:1d:2c:c1:50:16:ce:ee:0d:6b:ca:ff:
46:46:a3:ae:1a:99:d9:61:40:e1:7d:0c:8d:8d:91:
94:92:e1:ea:be:80:f3:0e:86:30:7a:4d:81:17:ef:
51:a6:c3:4a:35:3f:2e:0d:17:14:e6:8f:17:75:58:
4f:ba:16:30:86:25:09:c4:c2:b6:b5:3e:3b:e2:b8:
02:1f:a5:6c:21:c0:72:c9:d9:16:08:a5:90:b8:bd:
bf:2d:0b:80:40:5b:a8:33:2c:c3:f4:26:01:b4:a0:
a1:df:97:b5:f9:c3:cd:3a:52:f3:f8:9b:25:96:c6:
7d:54:a0:2e:33:da:bf:0b:a1:f7:ba:6a:17:98:17:
4b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:79:1B:42:DD:FB:7A:9F:5C:14:FE:17:D3:23:FA:26:BD:35:9E:DF
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/tXkbQt37ep9cFP4X0yP6Jr01nt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.3.0/24
95.81.118.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:af:7e:dd:e8:66:5e:79:bf:24:c1:c0:19:b7:ea:f9:58:ba:
8b:f5:d3:b7:60:30:30:a5:6f:7a:a0:11:a6:d9:c9:ba:a6:84:
48:4d:31:df:63:4b:aa:65:a0:9f:88:32:05:ed:db:ee:b3:a6:
47:e2:d3:dd:8a:c4:a4:04:0d:4e:66:fe:a3:70:b1:24:04:12:
38:28:46:c2:f1:13:db:df:08:e8:17:17:a7:ab:58:99:9f:1a:
7c:19:25:a1:b9:f4:49:46:f8:a8:7d:1f:fe:b0:6b:a9:d6:19:
f7:2c:bd:e5:48:36:69:f3:a1:ad:02:53:e0:ca:ac:7a:c6:b6:
10:28:9f:51:df:5b:86:8f:84:2e:a4:4a:a8:03:e9:c3:6e:05:
56:99:d2:83:7f:74:28:f5:93:37:ac:d1:83:bc:24:2e:73:5a:
66:2b:09:ac:89:40:f2:bf:d9:dd:8c:d0:71:90:d4:d1:3e:76:
0d:27:f1:db:97:02:f8:76:ee:9d:03:06:2c:29:85:b8:0d:a2:
0a:50:39:b2:2e:4b:96:7e:6f:af:73:79:db:2c:05:24:0e:e8:
81:3f:3c:63:3f:f5:ba:3e:45:76:82:de:cc:46:30:e4:3e:69:
e2:60:dd:47:70:56:dd:3b:ba:c2:01:3d:9b:88:f5:f0:9f:5d:
2e:b4:0e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:26:36 2025 by rpki-client