Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/9Qj_d73Uquzd6njLNSyQ7nRpEqE.roa
File: 9Qj_d73Uquzd6njLNSyQ7nRpEqE.roa (raw, json)
Hash identifier: xFBFRGfS3O+bazpDop3BgjkeDxLZtIdcjSO0Je/Hudk=
Subject key identifier: F5:08:FF:77:BD:D4:AA:EC:DD:EA:78:CB:35:2C:90:EE:74:69:12:A1
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 019735F786F0AA1642185371BCEC911B2EA0
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/9Qj_d73Uquzd6njLNSyQ7nRpEqE.roa
Signing time: Tue 03 Jun 2025 13:25:03 +0000
ROA not before: Tue 03 Jun 2025 13:25:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.146.200.0/23 maxlen: 23
45.146.202.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:35:f7:86:f0:aa:16:42:18:53:71:bc:ec:91:1b:2e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Jun 3 13:25:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f508ff77bdd4aaecddea78cb352c90ee746912a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:38:aa:49:5c:b0:96:38:51:74:a4:70:f2:20:
56:d7:7f:11:76:3b:8e:80:12:48:7a:6d:8f:a6:8e:
7d:94:99:7d:bd:33:e5:86:22:18:9e:a7:51:3d:11:
12:b5:92:82:dd:d8:22:f7:2f:4f:a7:17:9c:a7:fd:
97:d6:3f:b0:38:47:66:49:b6:f9:8c:17:5f:c2:3f:
c9:32:2f:cc:73:47:7c:e2:92:e1:38:0c:23:b2:d4:
52:95:60:e7:0d:85:22:df:8a:e1:42:19:87:af:7e:
4f:c4:7d:f9:7d:ec:6f:f2:e1:91:35:92:f4:aa:05:
23:85:d1:18:be:ae:b1:45:b2:76:95:ea:de:1a:a2:
eb:98:c0:53:86:2c:17:ab:6b:d4:72:04:cd:fc:15:
f4:9a:1b:93:f8:b5:da:eb:8e:f9:c4:3c:b7:50:d8:
4f:73:2d:30:b8:e9:f7:ce:c4:1b:3d:52:e4:7e:23:
b6:18:d8:a5:9b:61:0e:2d:af:b1:a9:d0:bb:ff:a9:
2b:bb:84:fd:fd:8f:98:b1:e3:eb:21:65:8c:1c:76:
e7:69:eb:25:41:b5:97:a2:25:f6:7b:c5:58:37:41:
df:fc:2b:c9:0a:a1:86:27:97:67:bf:81:82:f6:37:
b8:e4:59:e2:4e:93:46:97:52:e2:c3:93:9b:67:bb:
6f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:08:FF:77:BD:D4:AA:EC:DD:EA:78:CB:35:2C:90:EE:74:69:12:A1
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/9Qj_d73Uquzd6njLNSyQ7nRpEqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.200.0/22
Signature Algorithm: sha256WithRSAEncryption
15:da:c5:db:98:e5:4c:da:0b:1a:a2:17:43:68:9a:77:b7:01:
3d:ca:24:ec:9c:41:5b:9d:38:e0:9a:87:d5:10:b3:83:67:a5:
9b:f4:98:90:32:b7:8f:5d:de:24:ac:32:3d:c7:54:2c:78:36:
61:d6:cd:5c:d0:c7:7a:91:00:09:fe:dc:5f:30:a2:73:0c:7e:
3f:05:85:bc:4b:4a:4e:dd:97:70:fb:1b:6d:21:9c:e6:4c:59:
56:10:ed:98:cc:2f:cd:b9:83:eb:e0:4a:24:11:52:52:6e:4f:
c1:16:a7:9a:7f:c5:8f:a1:5a:a2:12:89:62:64:27:ca:1f:48:
a7:88:5a:2e:8c:d4:f4:aa:c0:9a:f6:e4:7d:79:56:35:5c:6c:
bc:1a:bb:55:24:e1:ec:d1:44:5f:d0:f5:c5:a2:cf:14:fd:e1:
c2:3d:2c:d3:a4:47:06:dd:39:2d:ac:6b:9e:85:7c:08:91:87:
d5:f6:0d:8c:b3:83:fa:4d:19:6e:ab:e6:b2:bc:89:6f:06:a6:
6f:6b:3f:75:d0:64:e1:bd:cd:6e:85:74:78:9d:34:6b:7a:b1:
39:b6:a2:96:96:04:bf:ff:1e:50:40:aa:40:f2:07:b2:fe:b6:
96:3d:ee:78:ef:cc:12:44:9b:68:da:85:0a:43:a2:cd:42:a8:
dd:aa:3b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:44:03 2025 by rpki-client