Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/q9StAyu8IQxQODGldzud6Hz7gjM.roa
File: q9StAyu8IQxQODGldzud6Hz7gjM.roa (raw, json)
Hash identifier: HxF/ydsfM4P76p2qg7HDS8Ct7rDXryB8JaDzIZFolV4=
Subject key identifier: AB:D4:AD:03:2B:BC:21:0C:50:38:31:A5:77:3B:9D:E8:7C:FB:82:33
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 0196F4B219BA414BA9888696A93713605EC0
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/q9StAyu8IQxQODGldzud6Hz7gjM.roa
Signing time: Wed 21 May 2025 21:13:54 +0000
ROA not before: Wed 21 May 2025 21:13:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57844
IP address blocks: 45.83.180.0/24 maxlen: 24
45.83.181.0/24 maxlen: 24
45.83.182.0/24 maxlen: 24
45.83.183.0/24 maxlen: 24
139.28.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f4:b2:19:ba:41:4b:a9:88:86:96:a9:37:13:60:5e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: May 21 21:13:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=abd4ad032bbc210c503831a5773b9de87cfb8233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:51:8f:00:64:a3:d3:bc:a8:60:7c:03:75:df:
06:0d:e1:da:3a:11:43:6f:66:43:90:78:ac:67:09:
16:d0:85:7a:36:14:aa:4f:f8:ca:89:52:01:15:ff:
0d:df:d7:31:2d:53:5a:27:7c:42:1f:8c:0b:65:9e:
be:c4:f8:b3:41:5a:79:9a:9c:90:26:95:df:7b:be:
ba:15:c4:92:18:47:81:f9:b3:e6:97:ec:8d:2c:e6:
80:54:82:c8:bb:b5:44:fa:1f:d4:d5:48:87:59:92:
00:c0:f9:88:28:42:a8:da:e7:e9:a1:f6:9e:b9:0a:
c3:da:b9:93:a3:0a:c7:30:fc:25:56:73:29:99:43:
06:c4:86:6a:9d:b7:c5:0d:0b:fb:f6:80:0e:c5:92:
75:3a:4b:74:b6:b1:df:95:c0:18:e1:3b:25:45:ab:
01:39:05:37:ef:6d:aa:b3:cb:a7:92:04:eb:0d:fb:
49:d4:f5:bb:8f:ac:79:8d:fe:aa:97:c9:9a:7d:e5:
46:35:20:ae:9e:eb:56:80:fd:53:d0:0f:cf:f6:d1:
b5:c8:25:58:3b:11:23:10:81:73:94:b6:55:ac:67:
df:fd:40:20:c3:6b:00:1a:4f:de:1f:48:a2:a5:4f:
9c:cd:f1:1a:b8:8a:e0:ec:29:a3:b0:d8:41:cb:a1:
3c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D4:AD:03:2B:BC:21:0C:50:38:31:A5:77:3B:9D:E8:7C:FB:82:33
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/q9StAyu8IQxQODGldzud6Hz7gjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.180.0/22
139.28.72.0/22
Signature Algorithm: sha256WithRSAEncryption
47:dc:b7:ed:f6:4d:b4:eb:d6:42:59:93:2f:b6:8f:3b:fa:85:
57:fd:48:3b:84:f2:ab:ff:5d:7b:4f:4b:c3:01:6b:65:4c:92:
b5:83:be:71:cc:4b:62:2f:a0:36:ba:a5:19:4e:f3:dc:80:6a:
eb:9d:89:fb:f9:4e:31:59:c8:83:17:f4:09:fa:84:5b:f0:5e:
37:a7:97:4b:a0:77:f2:1f:92:36:39:61:50:d4:b9:38:87:d9:
65:be:d3:0d:76:b3:50:ff:f6:60:9b:12:e5:7a:03:9c:97:fa:
17:af:01:b1:09:80:06:c3:3b:55:a9:50:e6:0f:d9:ce:ab:4c:
87:18:40:58:6c:47:0a:c8:62:62:c4:3d:f8:b1:8b:02:47:03:
a1:17:60:04:58:6f:24:6d:2a:28:e1:63:88:f1:ed:87:5c:cc:
98:70:0e:8d:40:74:1d:3c:a8:74:40:cc:e0:ab:d9:4e:4b:85:
d4:9a:ef:5d:a0:9d:d2:e0:34:4e:ea:ff:c8:ea:0a:a3:31:cf:
aa:a4:19:10:64:3d:ea:e6:e1:19:80:38:ef:3b:d1:77:80:eb:
d2:c7:b6:e4:ff:41:4b:71:ce:6d:fc:2e:09:80:9d:fd:33:14:
d2:eb:cd:39:a5:1b:ae:14:c6:e8:76:a5:c0:2f:93:c3:59:e5:
fa:17:3c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:28:06 2025 by rpki-client