Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/n7hwbldHUqHFpcKtEAhruQdbnjQ.roa
File: n7hwbldHUqHFpcKtEAhruQdbnjQ.roa (raw, json)
Hash identifier: L90qrrkLfiuxMR2N8pdC3OkH79/LYJzbW4o0QtjWOas=
Subject key identifier: 9F:B8:70:6E:57:47:52:A1:C5:A5:C2:AD:10:08:6B:B9:07:5B:9E:34
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 0196C493EB9520919D6F4ED4ACEE53E673C5
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/n7hwbldHUqHFpcKtEAhruQdbnjQ.roa
Signing time: Mon 12 May 2025 12:59:10 +0000
ROA not before: Mon 12 May 2025 12:59:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 393942
IP address blocks: 45.152.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:93:eb:95:20:91:9d:6f:4e:d4:ac:ee:53:e6:73:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: May 12 12:59:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9fb8706e574752a1c5a5c2ad10086bb9075b9e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f2:5d:dc:ee:8a:b5:00:6b:7d:e3:7e:04:0f:
84:7f:1d:c1:bf:cf:12:8a:3e:4e:f6:75:39:9e:45:
aa:ac:2c:15:66:d3:9d:70:57:8b:9a:f9:bd:33:5a:
48:f7:09:a6:15:14:47:77:f7:57:46:f3:ff:e0:65:
15:78:19:dc:f0:ca:b7:cf:31:ee:28:ec:23:99:e4:
fb:36:ff:e2:5e:3e:9b:70:54:bc:df:33:e0:61:89:
b1:46:34:ab:02:bd:33:60:f8:c2:c9:e7:fa:ac:37:
ea:1c:ef:6a:17:72:5f:ac:0b:f7:87:8f:f1:0c:be:
d8:c8:3b:2c:b3:22:1c:67:31:e5:40:1b:87:42:9e:
e3:d5:5a:2e:25:2d:02:3e:df:51:00:c1:11:fd:8c:
42:79:7c:bb:f2:0c:d2:a5:67:09:f5:38:2d:61:53:
36:f3:30:f5:68:85:58:51:c5:79:f9:79:51:20:c9:
b2:0c:bd:2e:20:d5:d3:8c:99:15:44:6a:f5:8c:46:
c1:85:31:b7:6f:8f:d9:d9:1e:4a:10:47:6d:ac:b1:
8d:d3:86:b4:cd:ed:76:ee:27:0a:df:d9:88:48:ad:
b4:c7:26:7f:d6:64:21:96:13:02:99:54:d8:10:b7:
e6:7b:a9:00:fb:1f:b7:ee:4a:90:9a:12:21:02:39:
5c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B8:70:6E:57:47:52:A1:C5:A5:C2:AD:10:08:6B:B9:07:5B:9E:34
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/n7hwbldHUqHFpcKtEAhruQdbnjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.166.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:bb:05:22:65:8c:44:5c:17:52:89:10:e6:9c:17:3e:9a:54:
d7:ab:3e:ee:5e:41:ee:65:2e:7f:19:0a:c6:fa:19:c2:45:ad:
bc:d4:d0:15:8c:a3:a0:8d:c2:aa:47:cc:e5:39:5d:2c:9c:a1:
36:4f:96:df:71:de:df:e3:e3:57:2c:c4:86:07:85:19:11:66:
b0:ee:7a:96:3e:24:5b:89:35:0a:f5:ae:9e:fe:6a:8f:2e:46:
ef:ce:25:6e:2c:02:74:0f:0f:64:7c:35:58:af:9f:e0:81:be:
f8:91:b0:d9:d5:2a:9a:9b:7a:6e:79:b2:d4:f7:91:fc:b3:26:
13:8d:92:3c:68:52:f5:8c:42:44:24:eb:60:1e:30:d8:13:7e:
ee:9a:bf:d1:70:99:fb:62:a3:1b:4b:0a:85:ab:fd:04:61:09:
8f:20:d7:12:43:fd:b6:88:8d:bf:b2:d6:74:dc:33:a5:ee:ed:
83:49:d8:bb:4e:55:98:e0:e2:ae:ab:f3:5b:4d:b6:bf:a0:44:
d7:6f:c9:21:f5:28:71:46:d2:ec:e3:ef:7e:e1:e4:cc:dd:f3:
b1:e4:5c:55:7d:5e:55:84:1f:97:5d:8a:a3:19:d2:70:60:27:
c2:ff:65:4c:b2:ff:2d:c0:e8:65:03:a3:b2:a3:4f:63:7e:4a:
e1:26:63:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 12:24:59 2025 by rpki-client