Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/rIL66Wr2JO0hUiDgtrzPfwsPCdg.roa
File: rIL66Wr2JO0hUiDgtrzPfwsPCdg.roa (raw, json)
Hash identifier: IzHYSyi3wxidgryTdPg9C85nPJtyfKau5Hu7/N9OG4I=
Subject key identifier: AC:82:FA:E9:6A:F6:24:ED:21:52:20:E0:B6:BC:CF:7F:0B:0F:09:D8
Certificate issuer: /CN=a5164a468165e9c693bd8184c3ca566ca70fd560
Certificate serial: 0196ECDB8069565652EA8B13AFF4B049564D
Authority key identifier: A5:16:4A:46:81:65:E9:C6:93:BD:81:84:C3:CA:56:6C:A7:0F:D5:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pRZKRoFl6caTvYGEw8pWbKcP1WA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/rIL66Wr2JO0hUiDgtrzPfwsPCdg.roa
Signing time: Tue 20 May 2025 08:42:10 +0000
ROA not before: Tue 20 May 2025 08:42:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41644
IP address blocks: 45.81.64.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pRZKRoFl6caTvYGEw8pWbKcP1WA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ec:db:80:69:56:56:52:ea:8b:13:af:f4:b0:49:56:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5164a468165e9c693bd8184c3ca566ca70fd560
Validity
Not Before: May 20 08:42:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac82fae96af624ed215220e0b6bccf7f0b0f09d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f6:18:1f:86:cc:84:66:5f:01:3a:0e:e8:1f:
e2:07:be:5f:bc:9e:75:46:6c:e7:dc:71:70:e4:3a:
c5:a2:47:38:1c:6a:a5:d2:50:ee:cd:93:9b:be:f9:
b9:bb:7e:f8:94:a7:40:13:c1:66:67:f9:87:58:71:
e9:d9:bb:b3:59:e1:e5:71:01:be:36:b8:5f:91:07:
46:a7:9a:fa:24:46:f0:b4:08:79:de:a0:1c:9c:3f:
2e:6d:ae:f5:66:34:06:3f:ef:f0:b1:2a:4b:62:c7:
6d:9c:e6:dd:f1:2e:3a:c4:aa:6f:28:33:fc:60:5f:
42:99:c1:0d:c3:46:54:69:b5:90:f0:8f:8d:e0:7b:
eb:3d:6f:8f:57:bf:1c:b8:e4:bb:00:59:77:69:ce:
8d:34:e3:7d:22:e0:81:9b:12:d7:86:50:6f:57:05:
f6:8e:b1:b5:fe:00:59:bd:67:f8:30:72:ba:30:10:
42:e5:32:09:35:05:6b:80:f2:cb:e3:a8:e1:8f:c1:
9b:d1:4a:3a:45:6b:04:6c:07:38:b7:be:42:59:cb:
2d:45:c0:b7:ff:9b:69:13:19:28:d5:cf:39:1a:08:
91:b6:5e:be:86:5e:17:6f:02:20:17:c8:46:97:a7:
b1:02:5b:16:89:fe:22:f2:87:4b:7c:d9:9d:b5:e5:
d5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:82:FA:E9:6A:F6:24:ED:21:52:20:E0:B6:BC:CF:7F:0B:0F:09:D8
X509v3 Authority Key Identifier:
keyid:A5:16:4A:46:81:65:E9:C6:93:BD:81:84:C3:CA:56:6C:A7:0F:D5:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pRZKRoFl6caTvYGEw8pWbKcP1WA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/rIL66Wr2JO0hUiDgtrzPfwsPCdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.64.0/22
Signature Algorithm: sha256WithRSAEncryption
65:aa:0d:55:ec:68:c7:0a:a1:fe:df:ce:fc:b9:ac:84:78:e5:
03:c1:13:dd:b0:35:a6:28:a2:f7:de:88:bf:ab:9a:bd:19:fc:
f0:05:08:83:52:19:96:c7:ad:fd:d3:92:45:73:98:ef:93:82:
24:60:13:0d:ae:ee:1a:a9:39:7d:19:91:73:1a:89:34:6c:e7:
a8:2f:e3:d1:30:b5:dc:15:28:b6:f6:80:91:a5:22:6b:b0:59:
d3:9f:ad:b2:f3:13:cf:f6:8a:df:78:ac:b5:ce:c5:80:ef:aa:
d1:58:c2:1f:fe:c6:cb:a9:ce:f1:29:31:2a:dd:ac:8a:00:50:
19:f8:6f:31:dd:bc:2c:f5:f4:6c:0c:12:76:66:9a:4b:00:0d:
81:f5:2b:5f:1f:3b:f4:7f:c3:97:29:00:37:da:ad:5b:e6:96:
71:e9:99:15:6b:4e:2b:2c:0c:04:ae:4a:59:15:8a:97:69:78:
17:06:97:4d:54:c4:db:c2:7d:9b:c1:20:e3:c0:88:97:c9:66:
e5:b9:20:8d:20:dd:bd:18:54:59:bc:db:b1:9d:14:09:dd:e9:
c7:99:f9:dd:6d:1c:6b:6c:8f:a8:37:e9:30:e0:4b:c1:69:08:
d2:7d:37:33:d7:0c:8d:99:f9:ad:06:93:96:1f:b2:bb:9e:e7:
69:58:b3:57
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZbs24BpVlZS6osTr/SwSVZNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1MTY0YTQ2ODE2NWU5YzY5M2JkODE4NGMzY2E1NjZjYTcw
ZmQ1NjAwHhcNMjUwNTIwMDg0MjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzgyZmFlOTZhZjYyNGVkMjE1MjIwZTBiNmJjY2Y3ZjBiMGYwOWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PYYH4bMhGZfAToO6B/iB75fvJ51
Rmzn3HFw5DrFokc4HGql0lDuzZObvvm5u374lKdAE8FmZ/mHWHHp2buzWeHlcQG+
NrhfkQdGp5r6JEbwtAh53qAcnD8uba71ZjQGP+/wsSpLYsdtnObd8S46xKpvKDP8
YF9CmcENw0ZUabWQ8I+N4HvrPW+PV78cuOS7AFl3ac6NNON9IuCBmxLXhlBvVwX2
jrG1/gBZvWf4MHK6MBBC5TIJNQVrgPLL46jhj8Gb0Uo6RWsEbAc4t75CWcstRcC3
/5tpExko1c85GgiRtl6+hl4XbwIgF8hGl6exAlsWif4i8odLfNmdteXV1QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKyC+ulq9iTtIVIg4La8z38LDwnYMB8GA1UdIwQY
MBaAFKUWSkaBZenGk72BhMPKVmynD9VgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFJaS1JvRmw2Y2FUdllHRXc4cFdiS2NQMVdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xZmNmYmEtY2RhMC00YWQzLTk4OTMt
OTQ1ODdkODMzMWY5LzEvcklMNjZXcjJKTzBoVWlEZ3RyelBmd3NQQ2RnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8xZmNmYmEtY2RhMC00YWQzLTk4OTMtOTQ1ODdkODMzMWY5
LzEvcFJaS1JvRmw2Y2FUdllHRXc4cFdiS2NQMVdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVFAMA0G
CSqGSIb3DQEBCwUAA4IBAQBlqg1V7GjHCqH+3878uayEeOUDwRPdsDWmKKL33oi/
q5q9GfzwBQiDUhmWx63905JFc5jvk4IkYBMNru4aqTl9GZFzGok0bOeoL+PRMLXc
FSi29oCRpSJrsFnTn62y8xPP9orfeKy1zsWA76rRWMIf/sbLqc7xKTEq3ayKAFAZ
+G8x3bws9fRsDBJ2ZppLAA2B9StfHzv0f8OXKQA32q1b5pZx6ZkVa04rLAwErkpZ
FYqXaXgXBpdNVMTbwn2bwSDjwIiXyWbluSCNIN29GFRZvNuxnRQJ3enHmfndbRxr
bI+oN+kw4EvBaQjSfTcz1wyNmfmtBpOWH7K7nudpWLNX
-----END CERTIFICATE-----
Generated at Sun Jun 8 12:50:20 2025 by rpki-client