Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/rHbDbOyUaIh8TDURqX1ieGWXWQY.roa
File: rHbDbOyUaIh8TDURqX1ieGWXWQY.roa (raw, json)
Hash identifier: GnpW8sbC72mBlbxSlssELbw/VvK2heRrWW+jN0rRSQ4=
Subject key identifier: AC:76:C3:6C:EC:94:68:88:7C:4C:35:11:A9:7D:62:78:65:97:59:06
Certificate issuer: /CN=878abb29977a65b140cacb6e72ab24ceddd4e8c5
Certificate serial: 0196FCE39362453DA28A50AE7FADF572B4DD
Authority key identifier: 87:8A:BB:29:97:7A:65:B1:40:CA:CB:6E:72:AB:24:CE:DD:D4:E8:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/rHbDbOyUaIh8TDURqX1ieGWXWQY.roa
Signing time: Fri 23 May 2025 11:24:54 +0000
ROA not before: Fri 23 May 2025 11:24:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 45.8.28.0/24 maxlen: 24
45.8.31.0/24 maxlen: 24
45.9.109.0/24 maxlen: 24
45.10.211.0/24 maxlen: 24
45.80.112.0/24 maxlen: 24
193.108.47.0/24 maxlen: 24
193.164.222.0/24 maxlen: 24
193.164.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft
rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fc:e3:93:62:45:3d:a2:8a:50:ae:7f:ad:f5:72:b4:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878abb29977a65b140cacb6e72ab24ceddd4e8c5
Validity
Not Before: May 23 11:24:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac76c36cec9468887c4c3511a97d627865975906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:22:9f:b0:4a:75:09:b8:9a:f4:79:f7:b5:79:
ba:2c:54:0f:5a:29:15:56:14:30:08:71:0a:f6:0a:
ba:dc:0a:ee:32:63:c3:41:ae:97:bb:b9:d7:c9:58:
30:b6:dd:4b:ba:67:ce:f3:bb:99:27:82:b1:b9:75:
52:43:97:b5:a0:4b:a7:fc:b8:f8:a5:93:d6:14:17:
33:6d:69:95:53:68:48:53:97:31:0f:db:c6:a8:77:
cb:f8:4e:43:ef:dd:9f:ae:a1:15:2e:f8:ea:e8:f3:
75:cc:4e:89:a8:39:e5:c6:eb:eb:a5:ac:95:92:2a:
c1:ab:d0:74:9c:95:d4:52:6c:67:03:24:d6:1a:25:
1f:98:68:ab:e8:08:11:2f:d0:8f:7e:5e:b2:93:c1:
aa:d9:5e:69:82:be:e1:63:99:4b:ce:c8:00:7d:17:
85:74:a2:5b:4a:c9:bc:9c:3c:2a:2e:6a:20:d8:a3:
8e:ae:59:54:51:94:16:f2:7a:4e:05:80:c4:cf:94:
fb:c4:af:5f:d0:ac:38:00:2b:d2:eb:e8:9c:97:eb:
4f:36:f8:82:c9:9c:11:73:72:80:0d:57:09:76:bf:
ba:b0:ab:2d:e5:b6:6f:bc:85:9c:e8:b3:29:59:1c:
9d:1d:31:89:85:85:34:14:97:32:ae:ff:60:50:c8:
0e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:76:C3:6C:EC:94:68:88:7C:4C:35:11:A9:7D:62:78:65:97:59:06
X509v3 Authority Key Identifier:
keyid:87:8A:BB:29:97:7A:65:B1:40:CA:CB:6E:72:AB:24:CE:DD:D4:E8:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/rHbDbOyUaIh8TDURqX1ieGWXWQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.28.0/24
45.8.31.0/24
45.9.109.0/24
45.10.211.0/24
45.80.112.0/24
193.108.47.0/24
193.164.222.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:b2:ed:3f:81:62:49:8d:14:cb:a9:45:38:26:22:e9:93:c4:
50:a6:73:60:b9:9d:65:71:4f:75:72:0c:69:21:a4:0e:02:c6:
85:73:6e:80:2f:e9:8c:e2:13:1d:05:73:4a:bf:bf:15:cf:6e:
8b:d2:cd:c9:6b:1c:3a:be:36:9c:c8:a2:4c:e1:0e:51:ba:46:
68:a3:55:ca:74:3c:a9:b0:83:27:b0:08:d2:99:1e:1e:c0:69:
a8:26:20:5a:92:18:e9:df:b8:94:ae:2a:6c:6b:00:27:be:21:
13:fb:98:dd:57:09:73:c3:9a:f2:43:4e:6b:65:08:d8:53:0d:
bf:4e:52:93:1d:8b:dd:bb:94:1f:55:0f:67:44:7d:79:8e:64:
5b:47:93:bb:ce:38:53:3a:f5:cf:e5:57:21:e2:2d:2f:73:a3:
41:30:5d:2b:6b:84:f2:a7:8e:dc:50:d3:68:31:77:23:f4:08:
e0:14:14:8f:5f:78:42:ef:8b:b9:d9:88:e9:30:9e:27:f1:af:
5c:21:96:27:91:85:54:72:7e:3f:f5:88:2b:84:db:87:ac:d9:
8b:51:04:db:0a:02:5a:c4:e9:fd:fe:30:4d:a1:f8:5d:25:5a:
8b:97:ec:40:1e:5b:05:53:c8:d9:71:7d:38:6c:87:82:40:4b:
08:ef:bd:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 21:25:42 2025 by rpki-client