Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/63a15p8fkUPzdSevCe4_8LijZK8.roa
File: 63a15p8fkUPzdSevCe4_8LijZK8.roa (raw, json)
Hash identifier: kSxgKgvIJZtG3hH/JW85TLbhxWW4mNszOVGpH9xSEy4=
Subject key identifier: EB:76:B5:E6:9F:1F:91:43:F3:75:27:AF:09:EE:3F:F0:B8:A3:64:AF
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01967FFFC48EF57AE6AD4BD2858C114A033B
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/63a15p8fkUPzdSevCe4_8LijZK8.roa
Signing time: Tue 29 Apr 2025 05:23:10 +0000
ROA not before: Tue 29 Apr 2025 05:23:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42831
IP address blocks: 45.149.25.0/24 maxlen: 24
109.122.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 20:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:ff:c4:8e:f5:7a:e6:ad:4b:d2:85:8c:11:4a:03:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Apr 29 05:23:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb76b5e69f1f9143f37527af09ee3ff0b8a364af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:97:0d:bf:0a:40:7a:57:09:50:9b:81:aa:3c:
45:c9:c8:de:b0:d8:0e:4b:3b:f6:17:b8:9d:7e:50:
a7:f9:76:82:80:1d:a4:5f:58:10:c9:f4:e8:9f:d9:
1e:e9:37:63:a4:76:5b:40:49:70:0f:6b:86:ae:72:
47:42:4b:e6:8a:74:72:6c:a0:ee:66:25:a3:53:20:
60:95:ee:ed:06:10:38:60:10:1c:fe:42:d1:58:e2:
32:49:53:54:b9:11:bc:65:92:59:90:5a:82:3d:28:
bc:6e:c3:93:a3:25:ef:a3:c1:15:32:9d:65:03:da:
4f:cf:d9:83:49:9c:a4:17:48:4b:85:f3:e2:14:76:
1a:d3:92:35:ad:88:62:2b:05:bf:41:72:52:02:d7:
37:82:80:38:42:4a:bc:cd:43:5c:bd:23:54:82:90:
7b:1a:30:54:51:75:86:33:20:b5:69:ce:30:ec:7b:
81:e6:50:e9:5a:68:2d:35:70:dc:10:15:2c:cf:47:
b9:a1:f8:2d:db:b0:87:e3:9a:51:1d:d2:ed:fa:c7:
bd:18:fd:81:8e:a9:88:9b:4d:48:27:4d:d6:66:a7:
9c:23:21:5b:a8:06:16:b1:8c:80:d8:97:67:30:49:
76:e5:e4:a9:4d:0d:18:b0:3c:55:b0:16:12:f3:31:
27:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:76:B5:E6:9F:1F:91:43:F3:75:27:AF:09:EE:3F:F0:B8:A3:64:AF
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/63a15p8fkUPzdSevCe4_8LijZK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.25.0/24
109.122.41.0/24
Signature Algorithm: sha256WithRSAEncryption
06:6b:19:3c:48:80:a7:52:bd:5f:32:d0:ea:22:28:5d:c5:fe:
69:d3:23:1e:56:f1:ad:fc:62:22:4c:6e:26:c3:9d:8f:34:13:
73:f3:60:c4:f9:13:3c:89:eb:31:1e:2d:45:c5:3e:55:ed:55:
e6:0a:98:2c:13:e6:ec:59:07:ce:05:c5:0e:a1:59:89:f9:f5:
8e:d1:24:4c:ff:d5:60:0f:a0:f5:68:10:07:c2:d3:18:71:3f:
de:75:52:94:f6:db:27:70:b4:c3:00:44:94:b5:f7:7c:fb:46:
d2:44:44:66:dd:f4:c9:69:f7:50:c3:76:79:d9:f8:31:d7:63:
62:89:5b:81:71:ce:59:e4:57:b4:27:d3:0c:89:3e:e8:26:dc:
c9:41:c1:7f:33:27:cf:31:12:b1:80:40:84:18:06:9b:78:08:
91:b7:39:41:3e:35:b0:9d:3d:09:c0:89:82:e0:7a:a1:6d:61:
ec:1d:1f:56:06:a6:4a:92:de:3d:d2:35:8b:8a:af:98:10:e6:
ba:82:81:ee:8a:5b:b5:60:92:12:7f:ef:49:bb:ec:e2:ab:47:
60:01:1c:67:f2:86:42:a0:ec:88:29:0c:ed:2e:64:f4:dd:6c:
1c:2d:3a:5c:f0:46:81:1d:82:a1:e4:b8:75:c8:4e:e0:fc:07:
d0:66:61:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 04:46:11 2025 by rpki-client