Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/iCveD-Xjd5JabG_WX6frr5x6in0.roa
File: iCveD-Xjd5JabG_WX6frr5x6in0.roa (raw, json)
Hash identifier: 95l1uR3aj9xTQRq9TbMrNh9RKHM6w6gjilx0WBwNahE=
Subject key identifier: 88:2B:DE:0F:E5:E3:77:92:5A:6C:6F:D6:5F:A7:EB:AF:9C:7A:8A:7D
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 01983DB6C85976428B800B3E43932EDE768B
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/iCveD-Xjd5JabG_WX6frr5x6in0.roa
Signing time: Thu 24 Jul 2025 18:34:05 +0000
ROA not before: Thu 24 Jul 2025 18:34:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41745
IP address blocks: 46.20.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3d:b6:c8:59:76:42:8b:80:0b:3e:43:93:2e:de:76:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Jul 24 18:34:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=882bde0fe5e377925a6c6fd65fa7ebaf9c7a8a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6e:90:c2:99:72:bf:f8:7a:6d:fb:07:47:4b:
93:4b:04:43:7a:b4:56:1c:9f:b7:99:bb:8f:24:65:
dc:dd:20:8f:aa:1a:02:40:e8:a7:62:1e:2e:3a:de:
c9:bf:c7:58:c2:34:69:fc:78:4d:3d:65:b7:e4:af:
8d:f7:63:c5:fe:e8:aa:8a:ab:15:44:37:b6:03:ea:
c6:00:29:65:0f:e5:34:20:36:78:08:f5:c1:ee:fc:
d7:54:8b:2f:fc:5f:ea:14:09:83:7c:bd:07:2f:30:
26:60:d5:3b:e1:30:30:24:12:d2:8c:a1:56:ea:0b:
8d:1a:bc:ee:fc:88:c5:c4:2b:54:8c:8a:7d:89:98:
9b:b8:63:87:d2:34:12:73:46:4a:88:cb:e4:16:3d:
dd:08:3b:ba:53:4c:0f:2a:c2:86:eb:85:3a:39:ac:
0f:65:cd:8f:aa:79:ee:6f:f9:1d:7b:7a:0a:96:70:
2e:30:9d:98:d7:92:b9:d7:99:ef:34:46:8b:b2:3a:
b0:92:e9:95:f9:2e:43:c4:51:40:e1:f4:ce:86:e6:
70:53:96:34:d3:a4:31:55:8d:a4:f7:ba:ca:27:c3:
ea:89:c2:be:71:8b:78:1f:dd:b5:9c:bc:9c:46:71:
fe:5e:2e:51:82:c1:83:f9:cb:c7:89:91:9b:15:82:
d9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:2B:DE:0F:E5:E3:77:92:5A:6C:6F:D6:5F:A7:EB:AF:9C:7A:8A:7D
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/iCveD-Xjd5JabG_WX6frr5x6in0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.106.0/24
Signature Algorithm: sha256WithRSAEncryption
78:65:5a:84:41:0d:9d:6d:ac:6a:03:93:e2:02:96:29:97:b7:
fd:49:7a:ca:43:9d:4c:76:5e:9b:52:df:27:d5:e9:34:2a:aa:
db:20:f2:58:84:e4:ce:55:ae:8e:93:0f:7f:9b:94:7a:c0:84:
d4:f6:e6:96:07:7f:77:4a:1b:ff:64:65:9b:51:1d:9f:91:dc:
ff:6e:dc:85:00:d0:30:3a:17:4a:cc:67:04:42:0c:a1:fe:d4:
b3:33:b6:9a:27:d6:3c:ab:15:2b:09:c4:ba:40:f2:6b:19:73:
b0:c2:88:48:c8:72:d4:cd:65:33:70:cb:87:2c:4b:aa:87:c0:
68:a1:17:f7:df:32:68:ea:01:05:4d:aa:33:4d:eb:39:f3:8e:
62:1c:aa:6a:7b:54:a6:45:b5:53:b5:57:ae:cb:96:dc:f9:0e:
62:5e:ec:16:cb:20:27:13:1d:42:74:24:f2:cc:8f:6f:85:06:
fa:f5:96:24:6c:7a:97:f8:86:71:c9:2e:a4:fa:9d:a3:0b:3f:
65:24:30:a9:7f:d9:a4:4f:82:a0:f8:71:c2:49:14:f7:18:6e:
00:51:9d:4e:14:a5:8d:b3:c6:49:1d:8c:f1:85:7d:b7:32:8e:
1e:9b:f6:ea:cb:6c:70:9d:19:ab:56:7c:1a:84:85:d1:16:32:
87:58:77:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:02:48 2025 by rpki-client