Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/icTWsoKn_xk3KExZZn417x-Qv84.roa
File: icTWsoKn_xk3KExZZn417x-Qv84.roa (raw, json)
Hash identifier: o9OMiruJYKHV5Ad+C6iuA4/zkZ1aBjsbg8MEUFVbq0o=
Subject key identifier: 89:C4:D6:B2:82:A7:FF:19:37:28:4C:59:66:7E:35:EF:1F:90:BF:CE
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 0196FDADE9761423769C10DA9CC1A2D06D36
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/icTWsoKn_xk3KExZZn417x-Qv84.roa
Signing time: Fri 23 May 2025 15:05:55 +0000
ROA not before: Fri 23 May 2025 15:05:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212219
IP address blocks: 45.10.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fd:ad:e9:76:14:23:76:9c:10:da:9c:c1:a2:d0:6d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: May 23 15:05:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89c4d6b282a7ff1937284c59667e35ef1f90bfce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:13:10:c0:20:ed:50:e2:05:8a:f3:1a:6c:e5:
6d:37:85:1e:3d:55:53:39:dc:18:80:ef:8f:78:dc:
19:e1:66:45:a9:1f:af:f0:98:63:61:f1:a3:f1:bb:
11:eb:f5:be:6b:cc:48:b4:c4:7c:28:a7:07:f1:1f:
ca:93:34:31:ec:ae:a8:69:79:78:7b:ab:16:de:71:
01:cc:52:b6:b4:72:24:e4:8c:67:01:39:54:cb:af:
f3:ef:b4:20:ce:da:a0:47:7e:c7:cf:0d:7a:e9:db:
b3:94:f1:7b:de:c0:16:80:d2:40:2c:a3:fd:2b:eb:
92:f7:44:fb:67:9e:b8:b0:81:9c:6d:1b:97:11:b8:
42:04:dc:67:c6:7f:64:aa:c5:30:c4:d4:23:e9:69:
92:50:df:6a:05:b5:c2:40:bc:17:26:73:2d:ee:74:
72:0a:5b:af:83:fc:12:f6:35:34:98:43:82:f9:e7:
ef:98:e0:e7:10:df:aa:3c:3a:31:a8:6b:69:49:5b:
be:ce:0f:13:9f:79:b3:e0:af:f8:47:12:65:70:9d:
a5:61:e0:62:d8:46:8e:92:06:a1:36:b7:ca:70:31:
0b:69:d6:39:74:01:61:2c:83:e5:34:8b:a9:56:b9:
1b:19:d3:aa:ee:31:ec:ab:5d:77:cb:49:6d:af:81:
7c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C4:D6:B2:82:A7:FF:19:37:28:4C:59:66:7E:35:EF:1F:90:BF:CE
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/icTWsoKn_xk3KExZZn417x-Qv84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.148.0/24
Signature Algorithm: sha256WithRSAEncryption
78:8a:c2:1d:3d:c4:25:df:04:a5:46:80:96:11:cc:b5:95:12:
1f:04:5b:b0:09:f9:17:4e:c6:50:76:df:51:d9:e8:5f:b6:ee:
c2:f2:38:77:7b:1a:61:43:8a:13:41:98:02:b5:a8:3f:a7:df:
e7:55:c1:e1:94:c5:b1:35:27:d2:7f:b0:e4:13:e1:60:ea:2d:
97:94:fe:0e:69:25:f3:a2:4e:dc:05:a5:ec:14:88:2d:36:06:
69:ce:10:93:a4:de:e1:23:ee:da:a9:f5:95:47:36:ae:fe:8a:
ba:36:c1:d7:a6:e8:85:41:d0:8c:67:66:6e:00:e2:a3:67:09:
18:8d:8f:53:d1:79:85:3d:01:b9:2d:47:5e:fe:44:df:6d:ac:
34:d8:ea:4d:ce:81:6c:fd:a9:e3:ca:60:d4:21:91:8c:3a:9c:
fa:30:67:60:0a:25:e9:38:04:1d:d1:fc:5f:58:05:d3:65:21:
ea:28:5c:a8:66:b4:a3:a1:e6:34:9f:bd:c8:45:58:9a:a5:bb:
2d:99:ba:ee:20:5f:9a:a4:80:08:dd:23:e7:77:38:09:13:83:
47:a2:cf:8c:2d:36:98:c4:4d:69:df:f1:09:2d:41:5e:03:85:
aa:b6:9e:1d:82:22:02:40:b9:2e:84:0a:c3:69:96:62:9f:66:
1d:0e:8f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:21:05 2025 by rpki-client