Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/IUtzJwVEl2eiZvQUWQo7jwMicqo.roa
File: IUtzJwVEl2eiZvQUWQo7jwMicqo.roa (raw, json)
Hash identifier: mx5eZUafZMl2cTWLPuWLAAi2UvAZbJ7kPWQe2Wchn18=
Subject key identifier: 21:4B:73:27:05:44:97:67:A2:66:F4:14:59:0A:3B:8F:03:22:72:AA
Certificate issuer: /CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
Certificate serial: 019812E67F9A1839E958C2E2CBBB57976471
Authority key identifier: A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/IUtzJwVEl2eiZvQUWQo7jwMicqo.roa
Signing time: Wed 16 Jul 2025 11:02:32 +0000
ROA not before: Wed 16 Jul 2025 11:02:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 46.236.254.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.mft
rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:12:e6:7f:9a:18:39:e9:58:c2:e2:cb:bb:57:97:64:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
Validity
Not Before: Jul 16 11:02:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=214b732705449767a266f414590a3b8f032272aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e5:09:7f:dc:e1:a3:5c:e1:bc:7b:98:24:6f:
08:8b:da:69:98:e4:3f:d3:7a:88:ba:76:67:7c:35:
b5:54:fb:f7:fa:bc:32:50:cc:e6:19:94:1e:6b:0e:
9f:39:4b:ca:82:18:9d:4e:93:06:37:4d:f9:b4:fc:
87:de:de:69:67:2c:2d:fb:09:f3:93:39:91:51:24:
62:a2:00:72:d0:50:c0:66:2f:65:ad:bf:2c:ae:10:
1b:79:59:72:a6:bc:82:54:33:76:81:08:a5:e4:90:
2c:0b:0d:6e:98:55:d2:45:f3:b3:2e:19:47:82:58:
11:75:25:48:36:11:6b:9d:17:d4:ec:b5:a3:2a:07:
cc:4c:cb:56:6a:4b:da:b2:81:d3:b0:27:ff:43:fb:
1e:f2:64:32:d4:3e:06:89:9e:9b:c9:45:b5:de:71:
dd:fa:c5:95:b2:b7:cf:5a:fb:8d:d5:38:51:44:ac:
33:3b:dc:97:fb:d0:86:e4:5f:a3:c1:05:5e:10:90:
5b:a7:19:32:9d:3d:42:f6:c5:e3:4f:6d:3b:c0:5b:
2f:f2:db:0b:ff:9d:3a:26:9c:32:83:ae:4d:5a:2d:
8e:a1:55:37:0d:3c:ea:fc:12:fb:50:08:a9:23:84:
5a:a2:c7:c6:cf:b3:af:bc:51:c1:f1:ff:d3:36:cf:
8e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4B:73:27:05:44:97:67:A2:66:F4:14:59:0A:3B:8F:03:22:72:AA
X509v3 Authority Key Identifier:
keyid:A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/IUtzJwVEl2eiZvQUWQo7jwMicqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.254.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:de:a2:cf:a2:b4:16:f3:ea:c1:dd:fe:15:70:24:2b:ba:f8:
89:35:9a:fd:22:a9:19:cd:a2:40:83:73:d3:2e:b5:c4:c2:4f:
e9:b8:2d:77:28:ba:73:7b:0d:6c:62:e2:5e:57:50:8d:62:ec:
10:c2:9a:59:60:f5:50:a7:02:11:34:bb:3f:9e:ab:f0:44:58:
bd:7c:b9:0e:61:d5:05:63:e8:d8:b6:c6:cc:e3:e3:bf:d1:cc:
ca:97:58:7f:c6:88:d2:1f:5f:27:dc:11:d4:ab:19:c6:20:46:
8e:d1:b2:bf:f4:c1:55:53:ce:92:3d:3b:80:57:f4:3d:7a:7e:
9f:24:05:0e:66:f2:46:36:97:78:a7:6f:03:86:80:57:ad:5b:
2f:47:04:86:d7:ec:68:a9:94:c7:cf:27:36:24:23:9e:72:15:
f3:28:0a:c3:6d:6e:6a:ee:e2:0e:8a:de:90:59:fc:92:5c:85:
71:e7:d4:77:d4:b3:9a:85:26:35:66:54:08:72:cb:f4:63:52:
58:81:e6:22:4c:1e:6f:78:20:74:6a:21:e4:f3:3c:61:62:8a:
4d:74:88:aa:36:cd:a6:6c:c6:47:ac:3a:a6:78:48:63:e8:c4:
32:df:c9:7c:b8:27:a7:dd:0d:57:55:89:bd:60:1f:57:ed:8d:
19:38:7f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:03:05 2025 by rpki-client