Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/12a0ipAHl5HJyqLJLtX-LoYRrXM.roa
File: 12a0ipAHl5HJyqLJLtX-LoYRrXM.roa (raw, json)
Hash identifier: TnK4o3d13YBRBJ8LTBq2YYzMppBqNrf4+1qoGHx92pI=
Subject key identifier: D7:66:B4:8A:90:07:97:91:C9:CA:A2:C9:2E:D5:FE:2E:86:11:AD:73
Certificate issuer: /CN=f030658f16d2d88d34164592fcd4de13131f1695
Certificate serial: 0197173249C00610541465B28001E6255F63
Authority key identifier: F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/12a0ipAHl5HJyqLJLtX-LoYRrXM.roa
Signing time: Wed 28 May 2025 14:01:01 +0000
ROA not before: Wed 28 May 2025 14:01:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60042
IP address blocks: 45.15.157.0/24 maxlen: 24
45.15.158.0/24 maxlen: 24
45.15.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:17:32:49:c0:06:10:54:14:65:b2:80:01:e6:25:5f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f030658f16d2d88d34164592fcd4de13131f1695
Validity
Not Before: May 28 14:01:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d766b48a90079791c9caa2c92ed5fe2e8611ad73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:10:d3:ef:34:7e:45:4e:ff:30:f6:9b:07:51:
65:03:f7:c0:f7:f2:cd:8e:20:2c:f7:04:c8:9a:ad:
51:36:09:c4:24:af:f0:de:e5:e5:b7:c4:de:c2:f3:
ba:79:9d:a0:83:06:f1:cd:c9:3c:39:88:f5:be:83:
49:24:01:ac:58:70:a1:76:ff:5d:6f:8e:9f:a0:6a:
c3:5b:db:72:75:36:af:7e:58:9c:7e:ad:0a:a1:db:
26:78:7c:0b:55:b1:c1:5f:f4:b5:2f:60:03:b1:69:
f2:df:95:93:b1:83:5f:2e:92:3d:58:6e:a9:3a:ae:
34:8a:22:9e:f0:ee:cc:fd:6a:c0:a8:e7:dc:d5:a4:
26:42:6d:57:f8:7c:cb:f2:e7:d4:0b:a3:ff:be:66:
2d:15:7c:d4:0a:d4:ef:7a:4c:95:b9:2f:1b:f4:63:
f8:37:6b:b0:5f:91:1a:68:6e:33:95:dd:d9:42:2d:
21:f9:e9:5f:14:1e:5f:0b:a1:fa:e1:f4:7a:de:4a:
41:73:36:d0:d0:12:e3:6c:13:bc:3b:20:98:e2:b0:
55:49:85:e5:32:42:48:5b:0a:5b:02:87:08:21:7a:
12:9f:28:d4:a7:97:fc:53:b2:b9:d7:89:0a:14:da:
58:13:5f:ab:2a:c4:17:e0:59:41:89:4b:b4:3f:89:
2f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:66:B4:8A:90:07:97:91:C9:CA:A2:C9:2E:D5:FE:2E:86:11:AD:73
X509v3 Authority Key Identifier:
keyid:F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/12a0ipAHl5HJyqLJLtX-LoYRrXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.157.0-45.15.159.255
Signature Algorithm: sha256WithRSAEncryption
6e:37:f8:25:0e:57:1d:5f:40:14:47:fd:d2:7a:2a:11:69:c3:
b0:52:df:d8:53:2d:0b:7c:a0:ac:f8:ac:a0:99:cb:f7:00:b1:
0c:39:5c:fe:c8:2a:c8:be:77:84:74:2b:38:8e:ba:0d:11:88:
b2:e4:87:4c:74:af:2d:11:37:12:1e:a1:22:e5:c2:89:cf:f5:
62:54:ff:9c:bd:da:64:12:e8:af:6b:e6:dd:af:fc:45:4a:a1:
03:aa:fd:84:d7:5a:94:30:93:21:ea:10:ba:13:bb:04:f6:0e:
7a:22:89:6c:c3:04:12:24:c7:89:bf:6f:d3:b4:11:6a:79:85:
56:cc:24:77:e9:aa:62:0d:fa:78:b0:12:3c:c2:f0:4e:72:ca:
29:db:ba:52:f6:e9:61:42:7e:bc:b0:05:a9:e9:75:3d:b9:fe:
c5:4f:0d:12:92:b0:d1:01:cc:28:4d:ef:d1:0c:60:d6:5c:ef:
6f:18:da:9d:9a:38:7e:72:73:bc:a2:77:54:07:d3:c6:87:3c:
0c:95:58:1b:80:b0:2b:27:8f:f3:bc:bc:08:6c:51:32:52:4d:
38:04:24:56:e3:4a:9e:f5:96:15:74:21:f1:77:c0:92:91:ac:
31:50:04:4a:07:77:c0:73:30:40:25:90:d0:43:94:be:8b:91:
f9:42:91:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:16:43 2025 by rpki-client