Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/1-wklC6TSt7N7HRWBFGDFnaI9WKk.roa
File: 1-wklC6TSt7N7HRWBFGDFnaI9WKk.roa (raw, json)
Hash identifier: UoScuu7gPfPB588Zd0Ba8V3hu4Sz3u9pZMaY+haZKHU=
Subject key identifier: FB:09:25:0B:A4:D2:B7:B3:7B:1D:15:81:14:60:C5:9D:A2:3D:58:A9
Certificate issuer: /CN=7dbacb1fc2c2063042781631b517ce475233a2bd
Certificate serial: 01973AEBBED2FCAECE8F81D4AE8C598ACA97
Authority key identifier: 7D:BA:CB:1F:C2:C2:06:30:42:78:16:31:B5:17:CE:47:52:33:A2:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/1-wklC6TSt7N7HRWBFGDFnaI9WKk.roa
Signing time: Wed 04 Jun 2025 12:30:17 +0000
ROA not before: Wed 04 Jun 2025 12:30:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207903
IP address blocks: 45.81.168.0/24 maxlen: 24
45.81.168.160/29 maxlen: 29
45.81.168.168/29 maxlen: 29
185.88.64.0/22 maxlen: 22
185.88.64.0/24 maxlen: 24
185.88.65.0/24 maxlen: 24
185.88.66.0/24 maxlen: 25
185.88.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3a:eb:be:d2:fc:ae:ce:8f:81:d4:ae:8c:59:8a:ca:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dbacb1fc2c2063042781631b517ce475233a2bd
Validity
Not Before: Jun 4 12:30:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb09250ba4d2b7b37b1d15811460c59da23d58a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cb:57:b5:7d:93:50:e0:42:dd:1d:ab:12:83:
8e:f4:85:98:fd:67:18:e5:23:91:6a:94:15:54:00:
a5:5e:7f:4d:f4:76:88:fa:b1:38:e5:2f:60:88:24:
ee:93:88:c6:7b:59:ec:55:4c:31:b4:bb:a6:38:3a:
9d:5a:17:d6:e3:30:26:9f:0c:99:3f:12:99:79:88:
78:24:a2:c4:91:c7:7c:36:74:e5:d4:34:7b:4d:07:
08:68:38:f4:cf:a3:44:55:94:83:ee:d2:8f:ce:97:
c2:74:95:83:b6:42:63:67:13:ae:4c:20:fe:54:27:
52:9a:3a:56:42:9e:3a:48:80:10:63:61:27:1c:65:
9c:37:55:c4:f2:37:45:43:c4:8e:17:a3:0d:0c:f2:
c6:b5:71:5d:2b:73:2a:fe:82:18:60:61:78:5a:a3:
2d:8b:04:0a:d8:b5:8c:f3:fa:17:b4:f1:76:20:83:
e3:78:4e:bc:4a:b8:29:ae:b3:5e:f1:24:b8:73:e6:
9c:f1:c2:d9:b5:e7:4c:93:5a:4a:c2:eb:b9:8a:f2:
e5:fc:77:91:d3:5e:6d:42:42:33:e6:7d:b8:c5:e0:
84:8f:01:06:95:0c:3b:fe:b7:dd:9d:4c:0c:16:d8:
80:24:cd:60:43:a6:68:c5:b9:66:7f:fe:13:54:c3:
b6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:09:25:0B:A4:D2:B7:B3:7B:1D:15:81:14:60:C5:9D:A2:3D:58:A9
X509v3 Authority Key Identifier:
keyid:7D:BA:CB:1F:C2:C2:06:30:42:78:16:31:B5:17:CE:47:52:33:A2:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/1-wklC6TSt7N7HRWBFGDFnaI9WKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.168.0/24
185.88.64.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:da:89:99:8c:ca:9a:32:26:df:35:dc:2e:c5:82:98:3d:83:
00:f3:3f:da:ca:0f:f9:3b:8d:8c:0b:e3:bf:dc:6f:8e:06:f6:
a1:85:cc:23:62:7e:88:6d:6c:dd:ce:81:00:e0:19:28:85:15:
07:1d:9f:12:0e:0c:fb:6e:47:aa:a9:78:2e:57:46:19:29:90:
56:41:04:bd:92:db:b1:98:a7:fb:f9:d6:56:d5:18:7a:e7:ab:
7a:0f:16:e8:72:d1:45:9a:79:2f:9b:c4:8e:ca:bf:6d:02:a0:
bc:95:20:ba:7a:28:4d:4d:54:ba:0b:31:c2:fe:db:93:39:29:
0d:6f:bc:b7:78:86:c4:1e:18:d7:a5:70:11:da:ef:51:47:18:
92:66:91:04:df:a1:8a:a0:82:f7:7b:28:43:39:ea:85:f4:32:
33:f8:f4:68:09:fe:c8:11:53:1e:7c:e4:52:be:9a:46:5d:7d:
be:54:4c:79:8d:f1:5f:4f:91:e3:a5:d0:ba:d7:a0:8c:21:10:
d7:c1:a0:06:d5:d8:7e:77:5f:8b:4e:5c:16:d6:a3:ce:ca:c7:
4a:be:1e:d0:12:38:f8:5b:21:a5:f8:3a:09:4f:c4:73:44:a8:
3f:8b:6a:48:22:70:c7:6f:c1:08:30:0b:5b:38:59:e9:93:51:
64:7d:ae:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:45:40 2025 by rpki-client