Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/2tI0pPHAMAIk_osuAaaPnbBYiYE.roa
File: 2tI0pPHAMAIk_osuAaaPnbBYiYE.roa (raw, json)
Hash identifier: Y+gWUa2jjd6N+7XsleK0WmIL5jH60gWVDj3pYUgybgk=
Subject key identifier: DA:D2:34:A4:F1:C0:30:02:24:FE:8B:2E:01:A6:8F:9D:B0:58:89:81
Certificate issuer: /CN=713b9404a0c43223addc8ea1b10ab74b777a2a01
Certificate serial: 0196CE6F1C085AB90090B6FBFAF16DDF31B9
Authority key identifier: 71:3B:94:04:A0:C4:32:23:AD:DC:8E:A1:B1:0A:B7:4B:77:7A:2A:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/2tI0pPHAMAIk_osuAaaPnbBYiYE.roa
Signing time: Wed 14 May 2025 10:55:10 +0000
ROA not before: Wed 14 May 2025 10:55:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51013
IP address blocks: 45.10.97.0/24 maxlen: 24
81.95.108.0/24 maxlen: 24
2a02:4a8:10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:6f:1c:08:5a:b9:00:90:b6:fb:fa:f1:6d:df:31:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=713b9404a0c43223addc8ea1b10ab74b777a2a01
Validity
Not Before: May 14 10:55:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dad234a4f1c0300224fe8b2e01a68f9db0588981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e8:ce:27:f0:9b:f2:34:1d:7a:c5:5b:31:05:
9e:80:f3:97:a5:c5:d8:0d:45:17:0f:ed:58:d6:15:
6b:a6:69:2a:be:5f:7c:c6:88:12:1e:4e:bd:19:2d:
8a:7f:c3:48:43:87:8c:f2:af:d9:d3:4d:e5:85:d0:
df:74:38:2e:2a:c1:1d:e9:72:e3:46:30:f1:3a:90:
4e:d0:a6:fc:a7:2c:18:28:8b:3f:8f:78:d9:45:bd:
2e:8e:6d:44:20:d7:3e:b3:5f:ae:29:2b:bd:2d:af:
ee:9d:0c:b7:5a:89:26:f6:4d:b1:17:84:c2:ba:f5:
39:6a:fc:e9:e8:33:56:5c:9b:d2:ce:e5:ea:3d:5b:
e5:a7:80:e0:df:df:85:9f:47:5a:ee:ec:1f:32:1a:
2d:3a:c4:27:56:55:90:d1:10:40:b4:e4:50:76:f4:
d7:76:e3:8d:50:2b:44:ac:2d:56:62:2a:b9:be:ef:
6f:25:b6:15:1b:83:4b:25:45:6d:b6:db:3d:19:65:
5d:c6:aa:12:98:aa:c9:1d:5f:37:49:45:c2:69:46:
3a:55:34:d3:f1:d4:c0:e3:67:f4:b2:c8:a5:3d:09:
68:51:8f:e3:00:26:44:70:ff:6f:dc:8f:8d:f9:f5:
7a:bc:b2:43:a8:f3:73:dd:b3:c0:13:d7:39:ec:4d:
17:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D2:34:A4:F1:C0:30:02:24:FE:8B:2E:01:A6:8F:9D:B0:58:89:81
X509v3 Authority Key Identifier:
keyid:71:3B:94:04:A0:C4:32:23:AD:DC:8E:A1:B1:0A:B7:4B:77:7A:2A:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/2tI0pPHAMAIk_osuAaaPnbBYiYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.97.0/24
81.95.108.0/24
IPv6:
2a02:4a8:10::/48
Signature Algorithm: sha256WithRSAEncryption
09:f6:41:e8:87:e4:e7:b0:39:21:41:6f:21:53:63:60:5e:a2:
96:4b:c2:65:e2:57:51:0e:ef:d8:63:82:80:72:3e:90:61:cd:
81:43:6b:74:26:e5:73:9d:ca:ea:e1:7f:99:d3:55:1b:f8:a7:
c4:71:c0:2f:26:eb:2c:59:cc:2d:b1:99:64:7a:c5:4a:57:e2:
ef:a4:af:49:3e:8b:7b:c1:ce:7f:cb:28:21:81:68:37:55:ee:
5c:8c:14:65:a5:9f:21:4a:7a:2b:31:3b:aa:f4:fb:3d:8c:93:
8c:1c:4b:89:09:b0:6b:d0:f3:2a:5c:12:53:38:c2:32:d2:8b:
40:5d:bf:7e:a5:1e:9b:54:cd:18:00:42:9d:16:16:b4:df:da:
99:96:6c:28:06:d9:d4:49:b5:d5:8a:25:52:e4:9c:1f:de:50:
02:fe:24:e6:13:01:0b:d5:05:0a:e4:6f:22:37:04:06:3b:58:
8d:e2:04:10:cf:2f:77:4c:82:86:83:b5:3b:35:42:92:2b:27:
ce:29:c7:8a:a7:d8:ae:12:1d:db:3b:25:d3:a7:c1:0b:9b:0b:
d9:aa:43:01:61:e5:31:13:c8:99:58:ed:5a:a3:90:e2:47:38:
5c:f7:2c:57:04:33:02:a5:73:b8:00:3f:e4:55:43:a3:68:62:
65:1a:12:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 07:25:58 2025 by rpki-client