Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/iZnCkTImCvQJuWE6Uos60nsBeAc.roa
File: iZnCkTImCvQJuWE6Uos60nsBeAc.roa (raw, json)
Hash identifier: A+XXsOgpp9E8wrC4jlevUH3rfTq9qVISkfFyAQgNpWw=
Subject key identifier: 89:99:C2:91:32:26:0A:F4:09:B9:61:3A:52:8B:3A:D2:7B:01:78:07
Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Certificate serial: 01983D80C33AA20399F1638CFA1C2ABBE2B1
Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/iZnCkTImCvQJuWE6Uos60nsBeAc.roa
Signing time: Thu 24 Jul 2025 17:35:05 +0000
ROA not before: Thu 24 Jul 2025 17:35:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41745
IP address blocks: 45.112.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3d:80:c3:3a:a2:03:99:f1:63:8c:fa:1c:2a:bb:e2:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Validity
Not Before: Jul 24 17:35:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8999c29132260af409b9613a528b3ad27b017807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:19:74:e6:3e:36:56:19:b4:22:7d:e7:ee:a8:
1a:95:ba:b0:ca:b1:de:54:8e:5c:5e:de:6e:f2:c3:
b7:66:4e:5f:63:0c:d5:dc:0e:a8:4a:aa:28:21:a1:
1e:71:12:69:d3:58:50:b4:69:6a:87:d8:5c:41:d3:
0c:63:b4:42:49:9e:46:34:2e:48:fa:c3:8f:bd:cf:
83:39:79:93:e6:ae:fd:d9:a4:84:3d:13:a0:71:9b:
cc:44:a6:38:14:f0:7b:13:da:24:f2:3c:5f:c7:49:
31:52:ed:2f:e8:f6:24:85:c8:17:55:12:86:e2:3d:
89:0f:36:2f:bc:e3:10:9b:3c:11:bd:7a:ff:4e:37:
46:2f:8c:8c:60:d2:05:a3:55:27:38:0f:ec:aa:e0:
20:7d:93:52:ef:33:e7:42:49:9d:97:0d:be:5a:e6:
14:8c:bc:92:a9:51:22:36:ca:be:23:27:e7:8d:6b:
d7:56:9e:dd:2f:ca:6b:6c:32:f8:5d:d6:37:0c:bb:
6d:89:b3:64:82:05:c0:fe:b0:a8:5c:c8:0b:3a:d7:
70:d3:84:bf:4d:d7:ec:44:76:5b:23:c4:75:93:f9:
4a:0d:42:0f:2b:24:29:8b:98:63:3c:bc:67:d1:61:
ee:b1:fa:43:fd:1b:b3:e2:ca:d7:39:2e:db:3d:08:
2e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:99:C2:91:32:26:0A:F4:09:B9:61:3A:52:8B:3A:D2:7B:01:78:07
X509v3 Authority Key Identifier:
keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/iZnCkTImCvQJuWE6Uos60nsBeAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.112.194.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:b0:47:b6:8d:72:47:6f:64:20:ec:22:d2:b9:9c:97:d0:38:
58:5f:57:e8:58:00:d2:20:41:8b:83:d7:e2:ac:7f:d7:ed:0c:
c7:f4:b7:89:e8:ef:51:d2:a4:1c:81:0c:9d:86:2f:a8:4a:b4:
f9:21:9c:4d:dd:26:7f:70:01:8d:35:01:33:12:b7:8b:e3:0e:
bb:7a:a3:08:00:72:22:6e:50:9c:d6:5a:08:ca:71:2f:2b:2c:
68:7e:c0:cb:a1:de:6c:fb:c9:e6:ca:60:d6:99:72:c8:99:09:
f4:80:e0:d8:d5:f0:00:22:cd:22:ca:c9:87:2a:79:18:57:d1:
5e:f8:ed:8c:96:37:ef:e7:92:1d:2c:ba:b4:d7:b0:d1:96:93:
0a:eb:13:99:24:ca:85:02:9b:f4:0d:d8:36:5e:8a:e2:ab:20:
f5:75:18:36:4c:b5:f4:9f:90:78:00:98:1f:8a:fc:83:26:c2:
37:2c:22:97:0a:7c:dd:f4:e7:3d:22:a7:6d:05:11:4b:de:8c:
fc:de:56:d4:74:d9:89:a7:cc:e1:1b:76:93:19:78:f0:03:e0:
e5:14:1b:b3:14:a4:d1:7e:d1:ea:64:07:40:c3:53:b1:15:df:
c6:f9:36:cc:73:da:67:d9:d6:71:cb:df:f8:9c:39:3d:66:1d:
56:d7:6d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:50:08 2025 by rpki-client