Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/okhJ7BqkGhTPJacZKnyMF7FpvQ8.roa
File: okhJ7BqkGhTPJacZKnyMF7FpvQ8.roa (raw, json)
Hash identifier: PP2SOa1PUXoaR6Tk5zpio+Z7uVcLQSgh5mFtZ+rtmMU=
Subject key identifier: A2:48:49:EC:1A:A4:1A:14:CF:25:A7:19:2A:7C:8C:17:B1:69:BD:0F
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 0196C493010B1C2E126C1A3E0915B83DCB12
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/okhJ7BqkGhTPJacZKnyMF7FpvQ8.roa
Signing time: Mon 12 May 2025 12:58:10 +0000
ROA not before: Mon 12 May 2025 12:58:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 22427
IP address blocks: 45.152.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:93:01:0b:1c:2e:12:6c:1a:3e:09:15:b8:3d:cb:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: May 12 12:58:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a24849ec1aa41a14cf25a7192a7c8c17b169bd0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:81:4d:a7:2e:10:7d:29:cf:59:25:1a:21:e5:
53:91:47:bc:58:ec:02:4c:11:42:6c:e7:51:46:8e:
c7:53:b5:21:a4:bc:fc:7b:a8:c1:f6:9c:43:1d:b8:
4a:c2:00:29:0f:a5:f4:35:5f:74:f1:f9:70:2e:b2:
55:24:d7:7e:5b:c2:be:4d:d4:8f:cd:69:c3:a0:86:
e0:8a:4c:23:99:56:bd:6a:89:cf:57:c2:0f:03:a1:
72:38:02:e7:94:41:96:5b:2b:37:c6:c7:c7:8a:62:
e9:14:03:d7:48:b5:11:2e:b1:c1:b1:65:c6:d3:e5:
c4:9b:24:ac:e5:4e:d6:f5:c8:93:2a:9f:b0:8c:e5:
8d:ce:57:e2:7c:17:de:8b:de:2a:96:1e:3e:56:08:
6e:11:11:13:d2:6a:b2:ca:ae:2c:d0:a2:fb:b1:55:
b0:ed:f6:51:5f:79:bd:86:e3:92:c0:54:27:a6:be:
29:be:d4:05:f8:02:0d:56:20:38:0a:da:7f:b2:56:
f9:bc:8e:92:6c:6d:b5:ec:e9:c3:46:86:fc:c0:c8:
a9:ba:f8:20:77:a1:b9:3b:19:8a:90:0c:c1:f1:89:
8d:07:b8:2d:84:0e:b9:3f:fa:66:aa:a1:54:6e:c8:
02:9c:d0:77:55:ab:6d:7e:d4:ff:17:fa:f0:83:65:
3d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:48:49:EC:1A:A4:1A:14:CF:25:A7:19:2A:7C:8C:17:B1:69:BD:0F
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/okhJ7BqkGhTPJacZKnyMF7FpvQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.164.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:6b:cb:f8:4c:67:d5:17:d6:23:52:1b:e7:b1:b3:93:34:bb:
f2:0c:20:e5:60:7e:3f:0d:0b:f0:83:5c:03:1c:54:cb:9a:99:
43:18:42:5a:19:0a:8e:3d:c8:35:ee:5e:e2:af:7e:1a:79:1f:
7f:3f:27:ef:b8:c0:14:b6:ac:e6:ca:80:02:24:fe:2a:81:08:
2d:c3:11:24:41:55:bf:81:af:31:c9:5c:11:71:e3:8e:e4:bc:
7b:61:70:2f:2e:6d:bc:a8:c6:43:14:f9:93:2a:45:36:f9:f9:
d5:60:75:80:78:36:12:f1:3d:37:e6:91:56:02:70:7e:95:0d:
fc:cd:c2:43:83:88:9d:11:69:22:20:3c:53:7d:3c:9b:ca:e9:
f7:d2:3d:dc:40:f5:ce:4a:f8:af:d0:c4:6c:b8:98:cf:2e:d2:
c4:53:a7:f8:be:46:4f:10:94:20:df:71:20:bc:b8:e6:5f:47:
53:0c:f8:03:4f:66:a4:61:4a:b8:a1:ed:57:d1:36:c3:0a:5d:
1d:9c:be:75:ff:14:61:58:0c:32:a1:07:9a:45:70:a4:81:e1:
6d:67:c3:c8:e8:ba:92:62:a8:48:3d:a6:ad:34:38:31:a2:27:
76:46:d7:4f:cd:f5:ac:5e:07:7b:14:a7:e3:d9:7b:86:4b:88:
07:4e:35:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:53:50 2025 by rpki-client