Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/4F7q-ESPAcOoBaJ8HV_6ahTt-Uc.roa
File: 4F7q-ESPAcOoBaJ8HV_6ahTt-Uc.roa (raw, json)
Hash identifier: v234flYnQRm4nRbtw0jT7kDIHH0ZbwZkb6fqcE+qEL8=
Subject key identifier: E0:5E:EA:F8:44:8F:01:C3:A8:05:A2:7C:1D:5F:FA:6A:14:ED:F9:47
Certificate issuer: /CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Certificate serial: 0197FA05B96F6403003F4B46F394EC968D88
Authority key identifier: 8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/4F7q-ESPAcOoBaJ8HV_6ahTt-Uc.roa
Signing time: Fri 11 Jul 2025 15:06:08 +0000
ROA not before: Fri 11 Jul 2025 15:06:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207304
IP address blocks: 5.45.213.0/24 maxlen: 24
2a02:6b8:b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:fa:05:b9:6f:64:03:00:3f:4b:46:f3:94:ec:96:8d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Validity
Not Before: Jul 11 15:06:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e05eeaf8448f01c3a805a27c1d5ffa6a14edf947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:17:fd:fc:e3:59:50:02:47:36:91:3c:a5:54:
2c:db:65:32:0b:05:c8:b7:01:56:60:9a:ee:4d:47:
71:54:3e:db:2e:9f:fb:01:b7:96:84:8c:d1:ca:7b:
a4:de:d5:35:6c:a8:b6:bb:f8:50:96:a1:4e:88:56:
a8:02:3b:25:8e:02:b6:20:8b:38:c5:07:d5:49:c0:
06:9f:f2:e2:9b:45:35:08:9d:ca:6b:96:e2:48:53:
8e:f3:5d:2d:bc:f3:f8:7b:e2:a5:76:c6:5d:22:bd:
96:02:21:3d:9a:e3:44:a7:a0:1e:81:32:60:6c:df:
c8:0f:f0:6a:4b:b2:75:49:74:24:52:36:f2:b5:90:
44:48:20:25:c8:c5:7f:5c:28:91:98:d7:0d:dc:04:
b6:2a:26:5b:67:30:60:01:da:16:3d:41:ea:eb:83:
6d:f0:54:e8:95:6f:91:a0:a2:89:8c:42:a6:34:fd:
21:d9:36:b8:de:04:65:ca:e0:42:b6:53:c9:d8:41:
e1:12:71:e4:88:a0:8b:06:0a:ee:9f:4a:14:81:8d:
c0:a0:25:02:1b:34:ec:99:e1:36:05:73:53:aa:b2:
6d:eb:ca:99:da:ed:25:2d:02:5a:22:77:03:26:66:
36:bd:a6:10:a7:13:45:42:7e:0f:be:14:0a:f5:6d:
bd:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:5E:EA:F8:44:8F:01:C3:A8:05:A2:7C:1D:5F:FA:6A:14:ED:F9:47
X509v3 Authority Key Identifier:
keyid:8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/4F7q-ESPAcOoBaJ8HV_6ahTt-Uc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.213.0/24
IPv6:
2a02:6b8:b::/48
Signature Algorithm: sha256WithRSAEncryption
4a:20:c8:cb:0d:79:0c:d3:4e:c8:c8:4d:34:ad:ec:20:47:46:
f7:49:5e:08:0a:0e:93:fc:97:8c:62:43:fe:56:82:a8:39:51:
c7:f7:01:e6:0f:99:c6:b1:7f:ff:1e:c3:44:97:b0:59:24:0d:
f0:d2:0b:3b:b6:cb:be:c9:e4:d4:75:3b:1e:56:9d:2a:f3:ec:
15:74:03:a9:4b:b2:56:f1:96:2a:b1:6e:ca:39:d0:45:8a:c7:
ba:6c:d6:86:5e:2a:7f:69:5a:fa:1f:65:5c:46:0d:c1:3f:e2:
50:54:24:f1:28:e0:12:6a:13:39:6b:95:c1:16:0a:f1:d3:af:
38:38:34:e2:e1:6c:b1:86:f2:b1:ab:27:7a:e0:86:d9:89:64:
d5:d8:85:97:16:c0:80:f5:14:e9:05:ce:9e:5a:98:f1:b5:b0:
84:b4:56:de:61:e5:54:99:ad:9c:78:92:05:58:a0:ed:06:c6:
78:7a:11:74:15:8a:bd:16:63:99:11:db:fd:8f:42:9e:1b:36:
e1:5d:ea:83:c4:ad:0c:68:27:40:07:7d:77:50:0a:01:32:7a:
22:98:22:00:7a:a8:2c:3c:d1:22:98:53:55:86:90:9c:57:7e:
e5:7d:a9:c3:0c:88:43:04:c5:78:c3:48:72:9f:38:22:01:87:
8b:4b:20:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:49:59 2025 by rpki-client