Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/iNGHEorLSA7tTUvR7WmcIEvvyWQ.roa
File: iNGHEorLSA7tTUvR7WmcIEvvyWQ.roa (raw, json)
Hash identifier: +T5Tngs9rCNsRfSYV3seXVnoa3yAy8ReFIAxDiQreEc=
Subject key identifier: 88:D1:87:12:8A:CB:48:0E:ED:4D:4B:D1:ED:69:9C:20:4B:EF:C9:64
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019715E7B0A26CA5901661B78F83B196B88F
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/iNGHEorLSA7tTUvR7WmcIEvvyWQ.roa
Signing time: Wed 28 May 2025 07:59:54 +0000
ROA not before: Wed 28 May 2025 07:59:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 273189
IP address blocks: 45.67.246.0/23 maxlen: 23
45.67.246.0/24 maxlen: 24
45.67.247.0/24 maxlen: 24
80.80.90.0/23 maxlen: 23
80.80.90.0/24 maxlen: 24
80.80.91.0/24 maxlen: 24
185.225.246.0/23 maxlen: 23
185.225.246.0/24 maxlen: 24
185.225.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 14:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:15:e7:b0:a2:6c:a5:90:16:61:b7:8f:83:b1:96:b8:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: May 28 07:59:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=88d187128acb480eed4d4bd1ed699c204befc964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8e:50:c8:e7:92:27:4a:56:de:51:35:53:f3:
2a:4c:04:f2:c5:4e:e8:7b:ca:53:d0:60:8b:c5:96:
1a:2e:69:c8:99:b9:81:eb:31:c4:79:0e:dc:9b:87:
a3:a1:5a:5e:e4:fa:c0:40:35:71:67:6d:7b:b2:f1:
90:5d:ff:30:2f:eb:38:83:0e:b0:8e:5e:b2:9f:20:
17:7d:83:39:0d:88:69:3a:48:ea:42:dd:7a:99:e3:
00:6e:7e:ab:9d:48:08:d7:d0:f3:2d:1f:f0:38:55:
a2:12:1f:73:51:59:f8:24:8c:82:e5:89:1a:06:45:
8b:93:a3:01:5b:ab:ac:d9:41:8e:65:d2:ac:9b:d2:
2b:12:b5:25:97:f9:99:82:6b:a7:1d:bb:94:49:e7:
2d:18:d2:e6:01:b3:76:00:7e:b0:27:df:04:79:dd:
ad:18:d8:1e:89:06:07:ff:65:7b:e4:1b:14:46:fa:
f3:4e:57:5f:38:7a:49:c5:6e:0f:3a:3c:b1:5a:2d:
d3:9b:fc:6a:4b:c6:99:be:a8:ea:1b:db:f6:0a:6c:
4b:cc:39:be:61:aa:93:82:25:1f:7a:a7:1e:26:ab:
76:5c:2d:7c:c8:6b:ee:d4:4b:44:01:f9:b6:84:83:
8a:f6:69:ef:04:48:ba:3b:8c:dd:d1:70:b1:a1:ab:
18:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D1:87:12:8A:CB:48:0E:ED:4D:4B:D1:ED:69:9C:20:4B:EF:C9:64
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/iNGHEorLSA7tTUvR7WmcIEvvyWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.246.0/23
80.80.90.0/23
185.225.246.0/23
Signature Algorithm: sha256WithRSAEncryption
94:aa:6e:07:92:d8:28:19:a4:d3:19:2c:d4:00:7e:a3:f5:5f:
f7:3a:27:a0:e0:e5:57:54:73:8c:36:5f:9c:a1:3f:e4:4d:ff:
cb:21:ad:9e:cd:92:7d:02:7c:78:e2:e4:3e:30:1f:bd:02:d3:
9f:28:80:43:06:c5:7e:18:aa:ff:10:8e:81:f7:4b:df:7c:e0:
aa:fa:da:c3:d3:aa:7d:05:07:65:dc:7a:d7:a2:82:8d:50:22:
b5:17:73:d3:62:fd:3e:19:6b:6a:93:8a:d1:72:f2:53:8c:26:
58:77:9b:44:04:cb:4a:14:50:6b:b3:79:ca:fd:a2:d8:64:24:
4d:84:ba:44:e3:48:aa:6a:08:28:e4:fa:23:4a:71:62:3e:9d:
54:e3:1d:12:29:d0:28:24:fc:df:0f:d9:9c:1f:27:8b:ab:72:
f9:22:0f:3d:78:7e:57:0e:35:51:b4:f8:ba:09:14:3d:cc:79:
a5:2e:5d:6d:27:7e:7e:16:f2:bb:b5:62:92:6a:49:e1:c2:c1:
d1:9a:02:fc:86:6e:98:64:db:ee:96:7d:b5:e8:d0:9d:d0:7e:
ff:c6:b4:39:30:f3:5b:84:87:ec:c4:ce:a8:b1:e7:a5:66:7a:
dc:f2:bf:54:fe:38:1c:38:cb:8a:b0:65:1c:fb:88:88:db:e6:
5d:30:ac:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:59:45 2025 by rpki-client