Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/IarevL5_EzIJs87Wc8QNEXezxEg.roa
File: IarevL5_EzIJs87Wc8QNEXezxEg.roa (raw, json)
Hash identifier: 3HU1Yl+/zUftCbIriX5nyjFf4lXlFXWqr+wjeiwWuSc=
Subject key identifier: 21:AA:DE:BC:BE:7F:13:32:09:B3:CE:D6:73:C4:0D:11:77:B3:C4:48
Certificate issuer: /CN=6fa86d1c1676a59a46acf37336192e985cff0e5b
Certificate serial: 01980A4D357359BE5FA382CBB579081198C2
Authority key identifier: 6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/IarevL5_EzIJs87Wc8QNEXezxEg.roa
Signing time: Mon 14 Jul 2025 18:58:08 +0000
ROA not before: Mon 14 Jul 2025 18:58:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204451
IP address blocks: 45.14.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.mft
rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0a:4d:35:73:59:be:5f:a3:82:cb:b5:79:08:11:98:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fa86d1c1676a59a46acf37336192e985cff0e5b
Validity
Not Before: Jul 14 18:58:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21aadebcbe7f133209b3ced673c40d1177b3c448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8b:29:97:05:78:ba:e9:78:79:5f:cf:69:ce:
60:9c:7e:3b:a0:6f:be:a6:6c:df:a0:85:7a:26:3f:
46:39:08:5c:4b:6f:04:9b:e5:82:c0:e5:26:71:21:
19:37:80:e5:7d:e7:ce:6d:c5:ca:84:86:08:9e:06:
50:21:02:81:84:70:da:5d:7c:87:32:69:34:4b:78:
04:14:df:8c:c3:e2:d2:47:0f:9a:b7:ea:e8:38:c2:
c6:b1:93:eb:d1:a7:20:09:0d:63:52:20:9a:a9:47:
9c:a2:44:7f:19:cd:d8:6a:99:bb:21:40:e0:9b:c4:
e8:83:db:8f:38:1b:7a:06:ca:12:74:8d:39:9a:cf:
08:f3:59:3c:cc:a9:23:4c:e5:64:19:ec:02:3c:e6:
a6:cf:ba:65:9a:f9:58:9c:93:b9:84:05:2b:92:e3:
c6:e8:4c:5b:16:5f:db:e7:b5:2a:fb:1a:4e:ed:5e:
5b:6c:a5:89:2e:d1:13:f9:48:dc:b1:7e:7b:a4:56:
b1:11:79:55:a5:e7:0d:df:f7:0d:2a:c9:95:22:55:
e2:1f:81:51:27:06:e2:58:a1:c5:e3:d7:ac:8f:d2:
93:2b:ae:5c:e5:23:6f:99:d6:d5:f9:8a:ae:7b:0c:
91:3f:ad:18:23:fa:e5:1e:b0:61:37:bf:96:f6:74:
61:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:AA:DE:BC:BE:7F:13:32:09:B3:CE:D6:73:C4:0D:11:77:B3:C4:48
X509v3 Authority Key Identifier:
keyid:6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/IarevL5_EzIJs87Wc8QNEXezxEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.175.0/24
Signature Algorithm: sha256WithRSAEncryption
51:dc:40:a8:55:9e:3c:90:92:54:37:5f:0e:01:f3:39:d8:05:
a9:f6:36:33:74:29:ae:7f:ce:56:59:f3:f7:df:44:97:0e:66:
91:d5:ed:0b:72:03:ea:48:93:91:b1:e5:81:3c:5f:69:70:df:
a7:35:9f:51:69:8d:86:b9:e1:95:bb:94:6a:72:7c:4c:7f:55:
e5:a9:e2:60:51:fe:90:ed:ff:f7:cf:3e:d8:24:39:f9:95:54:
1b:38:07:d1:42:ff:f0:4e:17:96:6d:af:8c:15:b5:99:73:0c:
7c:bb:8f:7c:32:b4:6d:54:62:0e:13:e7:44:9c:e8:84:1e:8c:
6b:f4:0c:fe:1b:85:45:61:20:8b:3f:7c:6f:bc:5c:5a:f1:ff:
7a:ac:7b:46:d7:97:c1:ef:a9:f4:36:80:c7:9d:14:95:08:4c:
8e:51:4d:da:0a:0b:64:b4:ad:ce:ae:20:1e:52:5b:93:16:2d:
6c:d2:cb:19:84:a9:26:18:3d:34:4c:8f:e1:19:ba:a4:64:30:
9b:09:ab:1a:6f:bd:d3:bc:b7:b7:b6:39:73:48:29:61:e0:eb:
93:33:3c:1b:24:dc:87:03:5e:09:39:aa:e0:15:cf:ef:93:69:
d3:cf:d6:30:81:2e:71:db:12:b8:5f:48:35:6e:42:76:e3:d6:
1b:da:54:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:18:06 2025 by rpki-client