Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Onas5kjuWQjbMrowtzKggFL0x7M.roa
File: Onas5kjuWQjbMrowtzKggFL0x7M.roa (raw, json)
Hash identifier: bPLtvPD/EEs2yk0XI/Yj8Qo7c5AVgibS117dJVpzNs8=
Subject key identifier: 3A:76:AC:E6:48:EE:59:08:DB:32:BA:30:B7:32:A0:80:52:F4:C7:B3
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0197C9C6DE8B44AAE0C6BA85D027CDA355D0
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Onas5kjuWQjbMrowtzKggFL0x7M.roa
Signing time: Wed 02 Jul 2025 06:15:42 +0000
ROA not before: Wed 02 Jul 2025 06:15:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209696
IP address blocks: 45.141.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 18:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:c6:de:8b:44:aa:e0:c6:ba:85:d0:27:cd:a3:55:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 2 06:15:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a76ace648ee5908db32ba30b732a08052f4c7b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a6:f9:8e:5b:f8:f1:8a:92:93:4c:6d:64:60:
b5:e3:a9:6f:82:8a:cf:78:47:87:42:0b:9f:d5:8b:
0c:31:11:5f:70:c1:47:06:11:7c:ae:e3:8e:e8:6f:
91:bb:fc:eb:be:64:bd:4b:0d:01:24:f0:5b:c0:80:
f8:8c:5f:e6:37:a1:ff:f6:ef:96:fd:ac:b4:d5:04:
9f:4e:e7:f6:40:7a:bc:b1:ff:69:d1:1a:c6:06:72:
3b:26:6e:fc:6e:9f:d4:e9:61:71:6e:a0:06:2b:02:
ea:55:ba:b2:12:53:a2:e7:54:e5:08:03:8c:21:4c:
5c:26:b7:b2:7e:0c:66:9a:bc:6d:7d:c2:70:af:07:
35:3b:4b:7a:76:fe:49:fd:f8:62:69:bd:47:1f:50:
40:57:07:ca:aa:fb:86:9a:03:99:3f:3a:c3:37:a0:
42:7b:78:91:ef:17:50:81:5d:54:67:e7:7c:11:95:
82:43:3d:a2:f7:29:4c:cd:bd:88:df:7d:0d:0a:04:
85:bf:06:4a:ea:76:b9:66:bc:cc:1e:5f:dc:22:94:
7d:44:19:35:a8:cd:30:de:6b:88:3e:a1:46:f6:2f:
d4:b7:52:0c:6d:52:f8:0c:62:4b:eb:26:b0:9e:2e:
37:76:93:da:41:d0:fb:80:08:46:fe:a8:91:5f:2e:
f7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:76:AC:E6:48:EE:59:08:DB:32:BA:30:B7:32:A0:80:52:F4:C7:B3
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Onas5kjuWQjbMrowtzKggFL0x7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.157.0/24
Signature Algorithm: sha256WithRSAEncryption
91:e8:f8:4a:37:8f:1c:9b:ba:c9:73:71:b9:32:8f:e9:ec:0e:
32:98:06:59:fa:cb:37:66:9d:db:16:96:49:85:4f:24:26:9a:
7d:31:82:03:e6:ea:82:7e:40:e1:7f:64:94:70:9a:6a:c9:08:
c5:21:6c:b7:9f:01:12:92:d2:3f:3f:2f:2b:3b:11:55:9c:d7:
fa:f8:60:11:e6:f6:55:66:ee:b7:86:20:84:57:aa:c1:07:c2:
4e:54:1c:83:7f:b4:bf:f2:52:61:94:6c:b0:d3:bc:89:1b:3a:
d1:a7:1b:03:dc:74:da:e8:02:73:0c:81:54:8c:81:ec:25:fd:
58:32:d9:14:78:f4:56:b6:7e:1f:84:d8:9c:26:f4:94:72:c2:
90:1c:b8:e9:74:2b:53:8f:37:62:66:cc:94:4e:72:03:2e:d8:
f6:99:af:1f:12:b5:5d:9c:27:4f:c0:0a:f2:83:a9:0d:b2:48:
fa:34:e5:00:fb:5c:ef:6c:31:ba:20:1b:45:ed:e6:d7:01:f9:
02:e1:5d:23:a8:a6:7b:14:95:79:b8:6b:b1:f7:15:2b:aa:40:
7b:e7:32:cd:3c:81:2e:dd:5c:c2:ce:5d:32:50:b3:92:82:91:
71:65:81:71:5e:c2:5a:fd:83:48:e4:fa:28:f0:dd:a1:4c:e3:
eb:26:48:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 03:53:40 2025 by rpki-client