Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/iux_LlL1URdHkvLd7fAfLBxykv0.roa
File: iux_LlL1URdHkvLd7fAfLBxykv0.roa (raw, json)
Hash identifier: M1Nd08we+k/ASmFQwA5UcSXOQBR76kEfrTmGDQJqshY=
Subject key identifier: 8A:EC:7F:2E:52:F5:51:17:47:92:F2:DD:ED:F0:1F:2C:1C:72:92:FD
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01975170D4C7BF557071932B67778E96CC0D
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/iux_LlL1URdHkvLd7fAfLBxykv0.roa
Signing time: Sun 08 Jun 2025 21:27:18 +0000
ROA not before: Sun 08 Jun 2025 21:27:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 45.8.205.0/24 maxlen: 24
45.9.5.0/24 maxlen: 24
85.208.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:70:d4:c7:bf:55:70:71:93:2b:67:77:8e:96:cc:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jun 8 21:27:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8aec7f2e52f551174792f2ddedf01f2c1c7292fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e7:fe:f5:83:10:94:8f:c0:58:ac:16:1a:5c:
a0:0a:69:73:76:d8:d0:37:5d:61:e1:51:55:da:2f:
31:74:6d:92:4e:4d:92:54:71:cb:fa:6a:61:63:6f:
44:86:cd:20:5a:8f:ce:8f:d7:9f:39:65:d7:c7:36:
3e:66:81:31:77:7b:ba:94:dd:d7:aa:3d:6a:e4:b8:
64:36:36:80:75:99:c0:f6:36:68:8b:21:5c:1b:06:
96:70:36:18:72:f1:d8:50:8b:a6:bc:ec:26:17:64:
ef:f7:30:dd:7d:73:97:88:78:4e:e0:9d:ea:01:30:
6d:09:3c:d0:eb:24:ee:83:42:89:66:13:ca:62:64:
67:0c:2a:dc:cc:ee:5c:aa:05:01:c5:9f:04:fd:b1:
cf:0e:ae:3c:46:fa:27:0e:24:ef:81:60:4e:05:d9:
a3:b8:d4:c3:f1:bb:1e:59:bf:51:44:01:73:48:bb:
8e:46:51:2b:8b:db:ef:03:9f:fe:95:97:91:46:d3:
ec:05:f8:9f:86:16:f2:5c:ec:8b:5a:7f:8d:8f:c8:
b5:b3:fc:c9:a5:57:9d:16:62:c5:e8:20:81:ed:6d:
d4:f3:01:26:d8:d3:e0:4f:35:19:41:82:46:29:91:
f8:31:48:d3:63:ee:ef:39:e6:32:a5:ec:2c:52:0b:
55:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:EC:7F:2E:52:F5:51:17:47:92:F2:DD:ED:F0:1F:2C:1C:72:92:FD
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/iux_LlL1URdHkvLd7fAfLBxykv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.205.0/24
45.9.5.0/24
85.208.105.0/24
Signature Algorithm: sha256WithRSAEncryption
71:ea:8a:51:f1:f2:16:3d:4c:b3:f1:00:ba:4f:c0:02:d2:ca:
e9:d8:99:7c:e4:70:06:9c:28:b7:18:c7:ed:69:42:55:37:9b:
50:37:d8:70:31:16:0a:4c:b9:b4:da:84:51:a6:31:eb:19:67:
6b:86:56:82:b8:0f:37:58:df:6d:32:01:a6:56:91:12:d2:a5:
6c:9a:82:ee:53:d3:e2:17:48:1d:62:ec:22:7c:b6:72:22:b1:
49:db:0e:04:c9:69:bc:9d:bf:4c:d9:d7:5e:6d:ac:ab:91:92:
7e:62:6b:28:5e:fb:b5:17:8d:c2:48:2a:52:e8:30:cb:94:a2:
ac:ad:f2:de:7f:01:9e:ce:e3:85:d8:53:47:12:42:22:1b:b9:
b1:38:d3:96:85:6d:7f:86:69:d3:e8:e9:64:4d:2d:21:96:2e:
e9:37:47:da:7d:0c:fb:ab:b4:db:ce:e0:f7:72:6b:da:9c:20:
5b:c2:c7:eb:41:d5:23:11:4f:e8:e0:09:c3:45:09:e3:8b:86:
93:1e:e4:f5:9e:b9:bf:57:4f:3a:50:0e:2d:d5:5d:5a:a2:94:
a4:ca:e5:71:f8:dc:55:1a:2c:97:fa:14:d1:e9:df:49:48:44:
a6:cb:bd:aa:2f:bc:47:57:bd:07:cb:9e:d7:2e:a0:96:d0:45:
a8:f2:65:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:16:25 2025 by rpki-client