Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/e5LKwEIyhLuJUllPdxKHDzzzHsc.roa
File: e5LKwEIyhLuJUllPdxKHDzzzHsc.roa (raw, json)
Hash identifier: uuJtqZyAbmOgfbG70JQAloanhQqeauP2CeSTZsIpTZI=
Subject key identifier: 7B:92:CA:C0:42:32:84:BB:89:52:59:4F:77:12:87:0F:3C:F3:1E:C7
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0196E3B2D681E741530290CB355A6FD3C86E
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/e5LKwEIyhLuJUllPdxKHDzzzHsc.roa
Signing time: Sun 18 May 2025 14:01:10 +0000
ROA not before: Sun 18 May 2025 14:01:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20326
IP address blocks: 45.90.147.0/24 maxlen: 24
185.227.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 09:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e3:b2:d6:81:e7:41:53:02:90:cb:35:5a:6f:d3:c8:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: May 18 14:01:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b92cac0423284bb8952594f7712870f3cf31ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4e:89:74:33:89:bc:2a:5a:e1:f1:87:66:05:
a9:54:ea:5a:4a:73:0a:ce:62:d9:f4:d5:94:4f:d2:
34:f5:51:fe:63:9b:8f:86:d9:28:f5:27:99:35:3d:
8a:c0:fb:a3:87:5a:81:db:d5:cd:50:2e:61:e5:a0:
3e:30:3c:7f:59:d0:8d:c1:c2:b2:21:36:d9:82:a6:
56:e3:b8:d6:51:11:66:3f:bd:4e:ef:fc:e2:86:2d:
8d:c8:14:9f:cf:69:dc:1a:27:11:53:c6:8f:40:2b:
42:0b:16:2d:2d:90:7c:f0:a8:bf:18:93:f8:09:ee:
50:f6:e8:fd:a3:a8:26:4e:a0:17:f1:26:a2:6b:af:
22:35:a1:26:01:df:3f:e8:5c:9b:aa:85:20:6d:88:
a0:c6:43:93:c5:67:24:21:6e:fb:fc:c5:fc:fe:9a:
3b:df:3c:39:43:db:0a:96:dd:bc:8c:48:a8:c8:de:
fe:3a:a7:b1:14:20:30:ab:c8:d2:13:ec:48:5f:d0:
42:5e:3d:5d:78:47:97:35:bb:f7:9c:37:40:cf:8e:
76:96:2f:54:dd:1d:1e:91:ba:26:ea:df:f9:ee:8f:
53:47:10:42:3f:92:ba:77:b8:47:22:57:6b:ee:11:
05:9c:74:01:da:79:68:90:4c:ae:fe:26:49:68:c7:
c9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:92:CA:C0:42:32:84:BB:89:52:59:4F:77:12:87:0F:3C:F3:1E:C7
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/e5LKwEIyhLuJUllPdxKHDzzzHsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.147.0/24
185.227.69.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:30:1b:df:f6:0d:54:5e:20:f3:51:06:ee:a7:9a:f4:57:4d:
b9:17:0f:12:c7:d1:2a:35:56:d1:70:4f:9e:a6:e5:f1:fb:9f:
8a:a3:cd:97:d2:10:66:fa:65:6a:6b:ce:bc:fe:85:73:f2:90:
a4:bf:74:1e:2f:e8:34:7b:82:4b:be:eb:aa:f5:a8:0c:b4:b2:
3c:4a:bc:30:70:6a:39:19:ba:88:c7:3d:3b:ec:74:15:2f:a3:
6b:b5:f5:2a:04:49:4e:52:1d:15:64:2b:7f:7b:03:dd:df:b1:
8c:f7:97:d2:6d:ea:4e:3d:7b:d7:19:c8:b9:2d:40:b9:10:d8:
2f:8f:a3:62:e8:49:f5:2a:3d:dd:e6:9b:5f:31:41:82:e6:03:
bb:1e:47:d3:65:1b:21:0d:38:df:e2:4d:75:39:ca:41:10:7c:
b3:57:70:f0:e1:9b:be:f2:08:04:84:68:e6:bb:f8:41:41:10:
40:7b:d7:d5:41:db:e1:6e:cc:be:08:0f:20:70:1b:58:0c:42:
14:db:30:ea:4e:7f:f7:d8:61:89:56:26:29:c4:49:53:e4:f7:
6e:1e:88:94:1e:4d:d5:c3:56:c5:cd:44:51:9b:20:be:d1:d2:
5c:3e:25:71:ad:f8:4f:19:e9:08:45:0c:dc:5b:9e:81:b1:14:
6c:1b:62:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:06:31 2025 by rpki-client