Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/iXbG8Yy4w7eWfQ0-5n17Cfr5ECk.roa
File:                     iXbG8Yy4w7eWfQ0-5n17Cfr5ECk.roa (raw, json)
Hash identifier:          +yCrKjJsmg9HLdoyY2KkVQJpvdOdOPVgxPoQ71OHxWA=
Subject key identifier:   89:76:C6:F1:8C:B8:C3:B7:96:7D:0D:3E:E6:7D:7B:09:FA:F9:10:29
Certificate issuer:       /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial:       0197D12883EF3F82C6A82BAB0F403A97F40B
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/iXbG8Yy4w7eWfQ0-5n17Cfr5ECk.roa
Signing time:             Thu 03 Jul 2025 16:39:42 +0000
ROA not before:           Thu 03 Jul 2025 16:39:42 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     204615
IP address blocks:        45.81.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 22:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:d1:28:83:ef:3f:82:c6:a8:2b:ab:0f:40:3a:97:f4:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
        Validity
            Not Before: Jul  3 16:39:42 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8976c6f18cb8c3b7967d0d3ee67d7b09faf91029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cd:b0:d2:18:16:7a:e8:13:1a:36:e1:ee:9c:
                    32:a5:ae:e1:2d:40:90:4b:e4:86:f1:0b:6a:c3:e9:
                    68:bd:12:6d:8c:fd:8f:87:67:76:c9:da:78:e0:bc:
                    18:74:bd:cf:90:3e:87:6f:50:5e:a8:2b:b0:c7:59:
                    fd:fe:fa:4f:b2:ad:dd:c1:4b:ed:33:57:53:d5:86:
                    ef:80:5b:39:35:06:f0:bf:f2:6d:0e:42:b1:ed:3e:
                    a4:ed:7c:55:8b:b8:0d:58:b0:57:13:02:b3:d5:b0:
                    69:4e:11:01:b7:55:82:3a:5f:21:8a:26:f3:23:7b:
                    0d:f2:20:7c:8c:d0:34:af:92:ed:d5:17:2e:76:bf:
                    a6:86:b8:b0:c4:35:c7:1e:3a:19:a8:b0:17:48:3e:
                    73:b7:5c:df:98:16:fa:97:7f:99:83:de:51:e8:cb:
                    e4:32:33:f6:08:16:41:9a:23:1a:df:cc:96:57:a8:
                    34:b3:2e:8d:84:ed:b0:2d:af:12:a1:92:d7:96:9f:
                    de:a2:f3:41:74:6e:28:19:f7:14:01:bb:8e:ac:6a:
                    4a:f3:83:f1:be:59:21:fd:ac:ce:f4:17:60:40:22:
                    41:8c:fd:30:65:5b:1e:35:d9:7f:eb:2a:57:19:30:
                    db:38:58:5f:06:10:e7:06:90:8f:d5:1c:ae:cf:d6:
                    cc:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:76:C6:F1:8C:B8:C3:B7:96:7D:0D:3E:E6:7D:7B:09:FA:F9:10:29
            X509v3 Authority Key Identifier:
                keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/iXbG8Yy4w7eWfQ0-5n17Cfr5ECk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.81.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:4c:c4:de:70:35:6e:4f:5d:b3:3f:96:13:8a:39:95:b2:9e:
         8b:d4:cd:1d:e1:aa:33:45:1d:27:ad:b4:79:9a:38:4d:39:c0:
         ef:d9:e2:9a:6f:cf:12:2a:3f:54:84:f4:e5:ca:b0:3e:60:f3:
         a6:a0:0f:67:a4:b7:bd:06:7f:c4:c5:c1:23:a8:40:fb:24:ed:
         03:28:02:19:f1:a9:bf:3c:14:4a:d7:21:30:79:62:6e:4f:84:
         26:df:27:45:e5:f8:7e:fc:17:d0:b8:92:32:9c:05:5b:51:c9:
         ac:49:68:d7:e7:7f:56:c0:fc:c8:04:f8:7f:2f:ad:e4:39:a0:
         d1:0c:43:f5:ba:81:2b:51:c6:03:94:64:d0:de:62:4d:7a:1d:
         a2:31:43:23:dc:47:79:35:c1:4c:8f:d4:30:08:83:34:c9:e3:
         63:7e:16:0c:84:57:0c:cf:8f:29:85:b2:9e:bd:64:da:b4:6b:
         5a:22:79:3c:ca:8c:40:6b:66:e1:f2:ce:6f:d8:10:2f:8b:e2:
         c8:24:95:45:de:ca:cd:ea:ac:c7:05:3d:80:5f:a1:45:51:be:
         45:4f:fa:bc:9a:6b:ff:ba:28:ba:e7:78:67:b6:7d:7a:61:31:
         c8:02:98:f7:9e:2d:dd:d2:74:82:af:6b:86:9e:6c:76:be:0f:
         ee:c9:2e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:22:04 2025 by rpki-client