Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/OcU1aCir7x5ZDAB0SDO85ir2vLs.roa
File: OcU1aCir7x5ZDAB0SDO85ir2vLs.roa (raw, json)
Hash identifier: WJWgjZA7WfRlKV6lm0oqVs5ZaPA407AGVO1IW26xyww=
Subject key identifier: 39:C5:35:68:28:AB:EF:1E:59:0C:00:74:48:33:BC:E6:2A:F6:BC:BB
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 0197C2769C0621A50437355FE0354215948F
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/OcU1aCir7x5ZDAB0SDO85ir2vLs.roa
Signing time: Mon 30 Jun 2025 20:10:42 +0000
ROA not before: Mon 30 Jun 2025 20:10:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.149.94.0/24 maxlen: 24
80.246.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 16:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:76:9c:06:21:a5:04:37:35:5f:e0:35:42:15:94:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Jun 30 20:10:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39c5356828abef1e590c00744833bce62af6bcbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:22:76:f3:8f:22:02:0c:c1:77:03:48:22:7f:
16:5f:b4:7a:d4:e9:6b:30:c3:6a:b2:87:3f:05:23:
f5:73:57:f7:47:55:22:5e:d3:c6:50:a1:ee:b7:34:
59:fa:41:78:08:2c:f0:d1:27:a4:1a:e6:b3:83:29:
31:99:2d:10:02:43:b3:f7:59:74:ca:fd:46:45:a5:
9b:b1:13:9a:19:65:11:cc:ed:83:f5:11:9f:a3:83:
7c:56:98:27:13:b4:a7:7f:5c:ef:c5:4c:46:b4:a3:
eb:26:6d:e5:5e:ac:74:41:5a:7b:cf:d2:9b:c0:12:
b5:33:2f:ca:ad:2f:24:5e:0d:09:9b:22:a4:1b:29:
58:a9:5a:50:28:65:13:12:75:af:10:d3:61:b6:1e:
55:66:20:25:ba:18:28:2b:4c:3b:12:96:9d:0e:ba:
d0:36:f4:95:ca:ab:01:59:6b:53:13:2e:82:f5:6a:
c2:11:15:10:eb:ee:da:f6:22:c9:7c:28:e5:01:38:
33:91:bf:ec:39:bb:15:4d:f7:ff:64:7a:b8:f4:d9:
93:57:7b:79:f7:be:e9:09:a9:f5:57:c9:57:9a:ed:
0f:0a:17:78:ed:d0:24:84:9e:a3:48:dd:1d:42:c1:
af:60:bc:94:21:04:74:51:2d:0d:87:86:de:5c:2c:
96:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C5:35:68:28:AB:EF:1E:59:0C:00:74:48:33:BC:E6:2A:F6:BC:BB
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/OcU1aCir7x5ZDAB0SDO85ir2vLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.94.0/24
80.246.230.0/24
Signature Algorithm: sha256WithRSAEncryption
74:8b:71:9a:4f:63:3a:9a:09:17:cb:61:b2:56:63:11:33:06:
35:8a:ad:b5:a4:47:b0:57:82:22:9d:3f:d8:60:78:80:42:e3:
ce:1e:b7:8b:d7:2f:b0:42:e1:b8:9a:e7:0a:d8:3f:7a:1c:12:
77:99:14:f3:7a:a3:f3:93:7e:5c:3c:bf:ce:eb:09:62:d9:f6:
78:61:3c:f0:fd:d6:68:3d:5a:55:43:c6:72:b9:b1:42:f3:0f:
4b:41:a6:69:97:02:cf:49:4b:8f:47:72:ec:47:6f:24:30:c5:
a2:2f:86:41:1c:12:42:3b:d5:26:d7:6a:e6:bd:e6:ba:0c:0d:
af:4b:6e:a8:61:42:5b:24:db:91:46:5f:6f:dd:02:c3:4b:4e:
4f:94:28:fb:d0:ed:b8:b9:ce:47:02:1c:88:77:71:5c:27:b4:
ef:a9:62:29:bd:59:d9:b0:4f:ba:e4:24:7b:19:42:33:43:02:
66:53:97:ec:93:e6:5b:c9:f8:57:1e:e4:6d:56:82:de:a5:5f:
73:86:53:c3:50:66:b7:2e:3e:ee:d4:f0:65:be:a5:db:26:94:
0d:70:7d:87:5b:2b:a7:9e:c8:9d:ec:6b:37:c5:a3:a1:22:a6:
39:07:d5:6a:b1:18:64:8f:6a:71:4b:14:4c:17:49:04:fa:5b:
92:13:62:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 21:14:52 2025 by rpki-client