Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/hE9lnpU_NAJVdzwhJ71Oj3wXBps.roa
File: hE9lnpU_NAJVdzwhJ71Oj3wXBps.roa (raw, json)
Hash identifier: xn4aHZr1nY8bZWZ9qmqhRWQdgnmDFEXg9Q54oyClBFM=
Subject key identifier: 84:4F:65:9E:95:3F:34:02:55:77:3C:21:27:BD:4E:8F:7C:17:06:9B
Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial: 01973EE88F8E97C4DE6D5083DC4A41DE89FE
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/hE9lnpU_NAJVdzwhJ71Oj3wXBps.roa
Signing time: Thu 05 Jun 2025 07:05:17 +0000
ROA not before: Thu 05 Jun 2025 07:05:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57393
IP address blocks: 45.93.62.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 13:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3e:e8:8f:8e:97:c4:de:6d:50:83:dc:4a:41:de:89:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Validity
Not Before: Jun 5 07:05:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=844f659e953f340255773c2127bd4e8f7c17069b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7f:10:ff:bc:91:18:f5:97:1d:97:11:af:29:
f0:b1:7e:67:01:a0:91:42:f5:59:0a:13:6b:d2:e0:
10:f2:06:eb:64:b4:3b:49:c4:d7:c1:e8:ed:0e:1e:
83:94:d7:b3:8b:4e:3b:9e:33:63:ec:5a:ea:82:ed:
f0:e7:d0:f7:4a:c0:29:e7:24:08:01:c2:ea:db:fc:
e5:63:2e:bb:67:b6:f6:17:88:67:da:8b:8e:28:4c:
ef:3c:08:c6:b0:27:4b:d1:6f:ce:c9:14:22:43:24:
e6:e9:df:83:a3:52:06:68:f4:02:7e:9d:6b:93:8a:
9b:d5:da:10:24:16:5c:31:dc:a8:32:4d:ac:ef:79:
f6:7b:df:32:94:bc:44:f0:59:5d:7b:ac:8c:09:6c:
09:44:98:22:4a:1b:8c:17:a3:8e:05:10:c4:cf:38:
b4:cc:b1:e8:33:68:0c:1a:89:3c:5f:c9:24:ba:df:
22:7e:43:18:70:08:c4:8f:ed:98:08:8a:a1:f0:37:
53:5d:be:d3:d8:ed:0e:cb:69:ed:76:ab:a3:a9:39:
93:c2:a3:97:e8:4c:a4:1c:b6:fc:f3:92:64:ba:ac:
a9:a9:a9:d7:6c:bb:55:43:6a:c1:54:a5:fb:b8:cc:
f2:51:07:1e:7a:12:19:03:cc:84:56:03:57:f6:3c:
22:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:4F:65:9E:95:3F:34:02:55:77:3C:21:27:BD:4E:8F:7C:17:06:9B
X509v3 Authority Key Identifier:
keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/hE9lnpU_NAJVdzwhJ71Oj3wXBps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.62.0/23
Signature Algorithm: sha256WithRSAEncryption
58:2c:9b:01:3e:15:9d:4d:a2:a6:42:4e:92:c1:56:40:c1:89:
c1:31:45:5e:f4:d8:9c:2c:7d:4e:c2:46:98:10:c5:84:30:7b:
74:76:06:42:4c:e9:f7:b1:20:c1:da:ad:82:2e:c4:77:f0:14:
60:1e:f5:ba:45:ad:2c:1c:e2:22:26:ae:2f:f8:8b:18:f8:2e:
35:a8:b9:e5:e2:38:34:07:f0:5f:ce:79:b8:54:2a:3d:1b:9c:
16:39:dc:54:93:cf:f7:04:41:bd:62:26:9c:3f:6a:16:fb:a6:
02:fe:13:84:00:6e:23:fe:71:6c:85:fc:94:64:dd:b4:e0:d0:
47:55:26:67:18:84:bb:4a:d4:5b:3c:9a:80:fa:2e:b7:de:2a:
90:56:7c:e6:50:1f:66:6c:99:d6:f1:5d:76:de:43:f0:cf:93:
b6:68:b9:92:f7:c7:cf:69:14:ab:06:20:b9:d9:ec:47:2e:27:
20:52:ea:26:f5:47:a2:15:20:d3:b7:ce:bb:90:86:dd:2f:78:
50:7f:40:be:c7:59:20:a6:33:27:6f:47:82:f6:51:2a:d1:7e:
f4:97:ee:7a:cc:05:9f:bc:62:11:09:15:ef:3f:16:c1:95:9b:
4b:89:87:ab:17:f4:8c:0b:08:6e:28:f3:f2:e1:5e:5b:b7:42:
f6:95:99:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 21:04:32 2025 by rpki-client