Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/E-jdz4kn2LPdJf5QVKVAm3sqo4M.roa
File: E-jdz4kn2LPdJf5QVKVAm3sqo4M.roa (raw, json)
Hash identifier: 4zQl2icIu37+l8utYvzmPi1LpFilOr4D8jLJykuSit8=
Subject key identifier: 13:E8:DD:CF:89:27:D8:B3:DD:25:FE:50:54:A5:40:9B:7B:2A:A3:83
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0197C2CD961333A948401D05860C17994AF2
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/E-jdz4kn2LPdJf5QVKVAm3sqo4M.roa
Signing time: Mon 30 Jun 2025 21:45:42 +0000
ROA not before: Mon 30 Jun 2025 21:45:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152672
IP address blocks: 45.86.73.0/24 maxlen: 24
45.89.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:cd:96:13:33:a9:48:40:1d:05:86:0c:17:99:4a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jun 30 21:45:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13e8ddcf8927d8b3dd25fe5054a5409b7b2aa383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:37:ab:1d:a2:96:7e:44:4d:5a:86:1d:e3:fc:
c2:39:47:51:9d:11:eb:d3:2d:e5:bc:fd:49:64:07:
bb:01:ed:42:80:3e:47:b1:82:27:97:b4:7b:f7:a5:
45:73:18:58:eb:55:16:1d:6a:81:a7:b8:41:32:48:
84:ce:35:5c:58:c5:f3:12:59:3e:90:f8:ed:b5:30:
42:3b:4c:ba:67:27:74:a6:71:e4:3d:d6:29:31:d0:
46:12:62:03:64:a9:a0:64:c9:13:89:2b:fb:f8:b3:
ae:e7:79:7e:f8:e2:39:b6:96:fb:e8:41:1a:7c:f2:
77:93:58:3a:e4:4a:b6:42:74:a4:73:3a:1e:3e:d5:
7c:1b:af:01:09:70:37:11:76:03:45:09:8e:1b:d8:
15:04:b6:b5:d4:ea:4c:b9:88:5e:e1:f7:c3:d5:a9:
ff:26:a9:55:14:10:e6:1c:52:5e:d5:29:1a:2a:4d:
89:81:f6:e2:92:3e:95:9d:c5:2c:11:2b:25:c2:5c:
fa:df:69:7c:e3:ef:08:39:6f:74:cc:58:16:7f:75:
a0:52:e2:6d:cd:ff:de:15:39:23:bd:32:41:b7:96:
4d:0f:4b:42:4a:b4:91:4d:de:cd:0e:53:0d:ed:09:
f4:61:b4:67:0f:e1:9c:80:2d:ab:1e:33:30:51:16:
45:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E8:DD:CF:89:27:D8:B3:DD:25:FE:50:54:A5:40:9B:7B:2A:A3:83
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/E-jdz4kn2LPdJf5QVKVAm3sqo4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.73.0/24
45.89.104.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:ea:62:24:f1:a2:52:9d:78:72:8e:d4:3c:fb:1d:75:ad:43:
c3:f7:fb:17:d9:9d:ab:8c:fc:b9:dd:ef:67:92:67:04:c4:fc:
fd:2c:df:09:b3:f6:f5:af:62:2a:a3:7a:3d:7a:56:71:ac:82:
5b:02:14:55:6e:37:31:d4:66:bf:96:78:78:92:0d:1a:d4:35:
dd:f2:7c:c0:63:b1:27:a1:3d:65:c1:01:38:09:30:c9:be:44:
a0:31:09:9f:ce:5a:cd:a4:dd:32:36:75:d1:4c:7c:3e:ba:f5:
7e:96:7e:51:fa:a3:e2:c6:a0:9a:21:56:00:57:38:ef:f2:b5:
a8:95:6c:0c:ae:a9:c7:22:65:23:09:5d:9c:ab:05:fc:67:46:
fa:fd:0f:90:ab:7f:a4:47:61:04:3f:9f:5c:ac:79:38:0d:a3:
61:67:74:dc:e3:5e:f6:8b:47:7d:18:33:bf:2c:cc:04:cd:0f:
24:ef:53:da:e2:39:49:0d:a8:a9:23:2f:35:55:07:a8:9f:40:
6b:09:b4:2d:2d:3c:40:1f:4e:90:e9:73:e0:4b:46:d9:a5:0d:
d2:00:55:e1:2b:05:be:9a:6b:0e:28:4d:39:6f:b4:99:c6:06:
6b:b9:a1:a1:4b:de:ed:2d:0e:10:49:38:f5:9d:3f:d9:f5:22:
b5:52:16:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:03:58 2025 by rpki-client