Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/1-mVwC91y2gjxzZ49ECJKeMBNsxM.roa
File: 1-mVwC91y2gjxzZ49ECJKeMBNsxM.roa (raw, json)
Hash identifier: U559gzASGhlXQBS0hGV4xF3kH8STm7I07VZJO2H7/G4=
Subject key identifier: FA:65:70:0B:DD:72:DA:08:F1:CD:9E:3D:10:22:4A:78:C0:4D:B3:13
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01973ED1ACC3D9D09A8F6BC324D72F29CB23
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/1-mVwC91y2gjxzZ49ECJKeMBNsxM.roa
Signing time: Thu 05 Jun 2025 06:40:17 +0000
ROA not before: Thu 05 Jun 2025 06:40:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14445
IP address blocks: 45.155.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 21:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3e:d1:ac:c3:d9:d0:9a:8f:6b:c3:24:d7:2f:29:cb:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jun 5 06:40:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa65700bdd72da08f1cd9e3d10224a78c04db313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3b:03:95:e5:07:71:1e:ea:06:cb:b8:be:30:
3a:81:75:37:20:f4:80:b4:88:85:21:7b:b4:6e:94:
3d:43:0b:77:b8:be:4a:68:ba:8f:c1:c0:88:90:5d:
75:81:a2:0d:ba:ce:84:d0:a9:45:9b:ac:12:7f:d7:
4a:ee:52:c5:8f:98:b2:53:89:2e:45:0f:4f:71:3a:
36:3b:9a:94:b7:a8:a9:ec:58:e2:c1:28:6a:5f:9d:
e9:4b:28:30:a7:0d:ec:9b:b0:67:4a:73:ed:c9:d6:
df:7d:4d:b5:c7:23:a1:d7:45:52:7b:df:54:cb:44:
d1:81:b7:ac:ca:e1:cd:82:c3:ea:69:43:15:d5:e3:
4c:61:7c:a3:98:b7:94:97:d3:8c:ee:f4:e5:93:88:
ad:66:85:25:82:7b:85:40:a3:ad:57:2e:18:47:82:
4d:b1:ee:74:b4:c0:58:bd:95:88:4b:d6:02:52:bb:
08:73:60:dd:3d:95:1c:f4:01:65:c3:9a:3f:c8:52:
e7:64:ab:1b:ad:47:ce:86:32:41:52:69:1b:10:f8:
1c:a2:ca:32:7a:80:f6:ca:59:e6:07:45:dc:4b:3c:
61:10:65:68:3e:d3:66:01:d2:93:c6:55:5c:21:99:
d0:09:0c:1f:ee:10:6c:e9:c9:9f:f8:b8:f7:b7:46:
c8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:65:70:0B:DD:72:DA:08:F1:CD:9E:3D:10:22:4A:78:C0:4D:B3:13
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/1-mVwC91y2gjxzZ49ECJKeMBNsxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.253.0/24
Signature Algorithm: sha256WithRSAEncryption
86:87:ae:7b:69:f3:85:fa:ca:76:45:79:8d:75:4c:3d:88:33:
43:be:38:7f:01:e1:2a:c5:ba:87:4d:86:fa:d2:6d:4a:bd:c4:
8c:c1:e5:a6:e9:21:b6:74:38:c6:e0:2e:5f:2e:b2:4e:5e:43:
1b:87:4b:af:88:a0:96:b2:8e:9f:04:a6:bc:58:6a:53:6a:16:
0a:db:db:4d:1c:7c:01:bc:e7:cc:63:6d:38:f6:05:fb:71:a5:
38:cd:e6:94:54:a0:43:65:c0:54:f0:f2:2c:c0:6e:20:59:8a:
5f:e3:92:68:e5:15:9e:b0:ab:f9:2e:ef:71:e6:85:eb:f7:09:
13:5d:de:18:65:e4:bb:42:60:5c:ca:aa:70:d6:60:13:5b:34:
1d:23:0a:9e:d6:fc:40:59:8f:6e:e2:66:c2:b3:d1:14:d6:58:
75:1d:b6:f6:f7:aa:d2:4b:28:bf:c2:36:da:ce:b2:0d:4f:74:
d4:8b:6b:f3:ca:a0:9e:af:48:8d:c4:0a:96:4d:b0:c6:d3:59:
b4:d7:ab:c2:d5:32:ed:f2:5e:e2:4f:73:5a:60:3c:79:c9:39:
6f:b3:98:33:ae:eb:dd:aa:ba:1e:70:98:5c:7e:f6:56:67:34:
41:90:5e:7f:a3:2d:61:1b:5b:a0:ce:2e:5d:67:f6:9e:2c:c4:
4f:b1:f6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:44:19 2025 by rpki-client