Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/7umXVXVg1N6hwSqwkGrW9hbU9MY.roa
File: 7umXVXVg1N6hwSqwkGrW9hbU9MY.roa (raw, json)
Hash identifier: Nx/ebQomWetNO1nfMgsjmCDshpmpbfiPCVmWHYlcCPw=
Subject key identifier: EE:E9:97:55:75:60:D4:DE:A1:C1:2A:B0:90:6A:D6:F6:16:D4:F4:C6
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 0196CE382E69ECD3B4BFEBDA1AEADC490475
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/7umXVXVg1N6hwSqwkGrW9hbU9MY.roa
Signing time: Wed 14 May 2025 09:55:10 +0000
ROA not before: Wed 14 May 2025 09:55:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.149.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:38:2e:69:ec:d3:b4:bf:eb:da:1a:ea:dc:49:04:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: May 14 09:55:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eee997557560d4dea1c12ab0906ad6f616d4f4c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a0:ec:16:2b:46:90:e9:6f:c5:c9:7e:6e:f9:
b6:6a:79:7a:81:e7:28:e5:ee:a2:11:e3:00:a2:ae:
a9:30:a0:d9:e1:ae:29:b6:91:d6:49:64:e6:fa:9b:
8b:9e:76:b0:f3:79:5d:fc:de:45:5e:40:59:e4:3b:
4a:66:29:04:79:d2:19:a5:82:4a:58:ef:66:8c:2d:
79:19:69:bf:48:87:65:04:9e:99:c8:20:67:88:98:
cc:65:c2:08:9c:5c:9e:69:b5:5c:db:8e:f1:24:40:
c5:8b:5e:2e:8f:73:1c:60:8f:98:fa:5a:39:bf:51:
c8:2d:92:83:ee:60:cb:bc:53:c8:e3:c1:02:f8:7a:
21:55:a4:0a:40:a4:c8:8e:5f:44:ca:66:78:49:f4:
88:81:b9:14:9c:7b:1e:9f:ac:7b:15:61:2b:e1:b0:
b8:78:5c:46:99:f8:29:18:20:ae:42:50:c0:ae:1c:
e2:27:9a:58:bc:7d:2c:7c:c7:d3:c9:c3:9f:62:c2:
f2:96:a1:20:04:f3:2a:f7:73:db:41:5e:a6:94:4a:
91:3b:f4:74:d0:b5:21:54:c1:35:a6:8e:6e:0b:4f:
c2:79:22:b0:b9:4e:b4:5d:41:10:b7:a6:83:51:05:
ee:31:11:cc:3c:85:fc:27:27:f0:8e:78:5f:bf:f1:
8a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E9:97:55:75:60:D4:DE:A1:C1:2A:B0:90:6A:D6:F6:16:D4:F4:C6
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/7umXVXVg1N6hwSqwkGrW9hbU9MY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.4.0/24
Signature Algorithm: sha256WithRSAEncryption
59:c4:6b:4a:98:59:44:94:c2:2a:e6:6d:23:97:0b:21:6f:8e:
f6:ff:27:d9:67:d5:9e:1d:7d:31:f8:df:b5:de:8d:5f:63:c9:
ea:e9:63:57:8c:bb:39:8a:d7:b4:46:b3:86:5f:42:96:bf:22:
ff:f2:ee:d9:79:09:f2:83:70:97:4c:60:ec:4d:d5:ed:5e:d8:
21:96:a7:c0:96:36:2e:ec:95:2c:23:7f:5c:ea:93:e3:ae:4e:
b6:53:7d:a2:73:6f:6d:dd:07:9a:a5:66:88:5b:ad:53:4c:25:
ce:04:0a:d2:83:a2:31:d3:d0:17:8d:9b:70:e8:10:1b:77:61:
1f:e3:a5:59:d5:59:a2:33:6a:de:5a:84:a1:d4:0d:70:55:bf:
8c:27:f2:ec:02:c1:bc:b0:ef:3c:76:9b:ad:b6:bb:70:cb:39:
a9:40:a5:7c:dc:12:c6:64:5e:a3:15:9c:dd:f0:da:79:69:b0:
69:e9:c5:1a:52:39:07:63:3b:ac:17:71:59:fd:15:dd:63:71:
c8:70:62:df:4d:8a:c4:1f:61:1b:8d:32:9e:ca:60:82:10:ae:
8d:6d:e1:ca:c3:3d:4a:04:e2:c1:3b:d9:93:9c:0d:11:8f:24:
d4:e3:46:05:df:4a:9c:60:77:12:d4:f5:81:f4:35:4f:80:0d:
0b:06:8d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:34:40 2025 by rpki-client