Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/6BKOzeR_jkv8Td7naSCpGwK2cbo.roa
File: 6BKOzeR_jkv8Td7naSCpGwK2cbo.roa (raw, json)
Hash identifier: NdsdWgq7FNtTGsjv+sGoOHpLX3rHnRlY3SsmvrWzKc4=
Subject key identifier: E8:12:8E:CD:E4:7F:8E:4B:FC:4D:DE:E7:69:20:A9:1B:02:B6:71:BA
Certificate issuer: /CN=dd982f979a2d25ebb2dab2654b8c27c928cf5ac7
Certificate serial: 01975BA212E115031D10E8C82201E0938B7A
Authority key identifier: DD:98:2F:97:9A:2D:25:EB:B2:DA:B2:65:4B:8C:27:C9:28:CF:5A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/6BKOzeR_jkv8Td7naSCpGwK2cbo.roa
Signing time: Tue 10 Jun 2025 20:57:17 +0000
ROA not before: Tue 10 Jun 2025 20:57:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49225
IP address blocks: 45.158.40.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:a2:12:e1:15:03:1d:10:e8:c8:22:01:e0:93:8b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd982f979a2d25ebb2dab2654b8c27c928cf5ac7
Validity
Not Before: Jun 10 20:57:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8128ecde47f8e4bfc4ddee76920a91b02b671ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9c:6c:48:33:6c:ed:30:82:8f:a4:a6:50:43:
fc:0a:46:a5:42:52:56:13:73:85:47:f6:bf:e0:b4:
47:79:d6:ad:7b:65:1d:93:06:80:63:fb:b3:b7:06:
0d:74:fe:f7:32:40:96:d2:14:66:b5:68:ad:17:7b:
1f:2a:53:32:03:24:f4:3c:36:7e:d9:59:96:83:82:
32:30:33:01:2c:84:d3:9b:60:70:4e:35:e9:ed:ad:
4e:4e:5b:35:7a:5b:71:0a:e4:27:c5:8c:c5:ba:0f:
f5:d4:b3:fa:d2:1e:a4:80:87:8d:75:51:dd:87:e0:
78:20:f4:26:ea:6b:b7:9b:2d:cb:9b:53:7c:e5:8b:
f9:10:32:be:8f:70:cc:de:cc:35:1c:77:8e:ba:b7:
92:23:0e:ad:11:aa:3e:7e:86:97:33:d1:99:41:31:
74:f4:61:0e:df:fb:38:27:39:22:bf:29:0b:44:41:
89:6a:33:1d:7c:6e:75:67:d4:70:19:cc:16:7c:2a:
e9:ff:62:f3:ec:72:8f:26:16:f3:6f:2e:01:98:07:
dc:90:38:da:d1:c2:c9:44:a5:bb:b5:a5:2b:76:23:
39:03:e3:09:1f:e3:f3:d7:e1:fd:dc:9a:a3:16:79:
d4:b6:58:c3:f0:af:8e:d3:1d:9a:85:28:02:ea:88:
ce:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:12:8E:CD:E4:7F:8E:4B:FC:4D:DE:E7:69:20:A9:1B:02:B6:71:BA
X509v3 Authority Key Identifier:
keyid:DD:98:2F:97:9A:2D:25:EB:B2:DA:B2:65:4B:8C:27:C9:28:CF:5A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/6BKOzeR_jkv8Td7naSCpGwK2cbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.40.0/22
Signature Algorithm: sha256WithRSAEncryption
34:b4:90:69:6c:84:ad:ad:f0:c3:4d:63:1d:52:71:95:37:82:
b9:6d:20:3b:32:1c:03:81:2f:ae:44:95:20:34:ad:72:c1:44:
3e:c1:5b:8c:1b:f2:91:f8:01:d7:1d:45:73:2d:a8:19:c5:b4:
e2:7d:f3:d3:44:aa:62:db:52:f1:e0:27:fa:ed:9e:b1:8f:65:
dc:93:1f:7a:3b:5a:8c:dc:5a:ce:44:1a:a4:50:a8:e4:9e:17:
aa:09:bf:31:c5:f0:6f:99:13:42:16:f6:29:3b:60:c1:b7:ae:
a0:e3:f7:43:d3:6f:4a:03:5a:fa:16:71:64:1d:b6:36:de:5b:
0e:64:17:b5:a0:dc:1a:73:0e:d0:b3:4e:10:ed:20:3d:f0:80:
7e:a5:26:92:73:6f:16:f8:69:a3:42:5a:d3:6d:c4:04:fa:cb:
47:c3:a4:02:2f:22:29:38:79:d1:43:e6:d7:83:fc:cc:6f:74:
14:7a:6c:9f:9c:eb:34:22:0f:e4:65:77:1e:e3:57:81:1f:06:
02:47:c9:48:5a:2c:1b:0e:2b:42:7c:ee:5e:cc:a9:2f:2d:25:
39:8f:aa:f6:32:07:d9:1b:b5:20:2b:9d:e8:81:88:f4:f1:03:
b5:4e:ff:2e:1b:4f:8b:85:ef:d5:b7:5c:a3:e7:27:6a:19:d3:
3e:96:b0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 01:22:14 2025 by rpki-client