Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/lEdJbG5PMyA9KIkT66CKXtQGW_Q.roa
File: lEdJbG5PMyA9KIkT66CKXtQGW_Q.roa (raw, json)
Hash identifier: eC740RLc+JSO8slUuAGKtORLX+0YoknoSCggZAaMEqw=
Subject key identifier: 94:47:49:6C:6E:4F:33:20:3D:28:89:13:EB:A0:8A:5E:D4:06:5B:F4
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0197CB43BA2E7DE944302CE1B3F26FB814AC
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/lEdJbG5PMyA9KIkT66CKXtQGW_Q.roa
Signing time: Wed 02 Jul 2025 13:11:42 +0000
ROA not before: Wed 02 Jul 2025 13:11:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50053
IP address blocks: 45.9.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:43:ba:2e:7d:e9:44:30:2c:e1:b3:f2:6f:b8:14:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 2 13:11:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9447496c6e4f33203d288913eba08a5ed4065bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b4:d7:4e:a4:ae:a1:75:74:c1:3e:1c:d9:64:
8c:2c:56:ae:50:bb:1d:20:2c:62:29:61:1d:4b:5a:
8c:17:b3:66:b4:d9:47:b5:1f:fa:23:dc:fe:53:43:
a1:f2:d4:9e:ee:00:bb:04:1b:dd:b4:c9:41:bf:b5:
cd:79:f7:7b:8c:aa:c2:da:e3:78:12:d0:0d:1b:00:
78:4a:13:31:82:58:f4:41:2f:1a:52:d3:1e:9a:10:
13:02:8d:5a:e5:74:99:eb:8d:40:31:ae:60:49:66:
5b:ca:a8:38:ad:2a:a6:84:f4:ba:28:57:a4:aa:cd:
06:4f:24:45:a5:e6:56:e6:03:4a:f4:96:30:60:ef:
3e:18:fc:44:36:74:56:7c:3e:63:8a:35:dc:0a:24:
3c:5a:20:ce:b3:50:11:74:d4:74:3f:d6:ed:9a:17:
8f:a5:0d:fd:39:ad:4f:cb:24:57:cf:30:99:30:19:
f5:27:1f:c9:3b:9e:16:2e:6e:80:73:3c:3c:f3:54:
18:e6:95:7f:88:c9:1e:b9:ac:3b:9d:92:01:b8:8e:
e7:78:e3:69:37:85:20:65:1c:65:10:35:64:2e:39:
ee:11:df:49:9c:17:f2:5f:ef:68:5b:04:85:2a:fc:
7b:47:30:8a:b3:0b:89:83:7e:82:f9:d8:1d:31:66:
0e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:47:49:6C:6E:4F:33:20:3D:28:89:13:EB:A0:8A:5E:D4:06:5B:F4
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/lEdJbG5PMyA9KIkT66CKXtQGW_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.116.0/24
Signature Algorithm: sha256WithRSAEncryption
34:45:c3:54:ca:d4:ad:aa:25:2e:70:9a:d0:2f:56:bf:52:f3:
c7:bd:8c:b5:b2:29:ae:40:be:91:af:ee:fc:fa:60:2e:64:0c:
95:07:be:37:45:71:ae:2a:01:42:9e:b6:a0:10:92:80:56:7c:
f3:67:70:a0:9b:79:3a:86:9e:3e:f4:3f:d9:f4:0e:60:0b:0c:
75:12:e7:b0:79:3d:00:ef:6c:48:38:5b:9b:19:93:a3:f4:d3:
5d:ec:98:c8:bc:52:f9:41:ed:a2:49:98:c5:1e:ca:4a:dd:0d:
fc:5e:ff:0f:c4:3f:1a:22:e7:91:56:0b:98:54:a9:fe:b2:98:
1f:93:d9:dc:ce:63:55:d7:f7:8c:16:c3:64:6c:4a:10:80:fd:
ec:26:a9:bc:45:67:8b:25:95:0c:14:ba:91:ed:4d:31:02:24:
68:97:da:c7:f7:0e:b7:92:a3:f8:bf:52:25:91:65:e2:50:ff:
93:31:50:b9:44:a4:4d:f9:03:58:f0:82:ba:29:6a:ab:8e:18:
15:d2:4d:22:e1:9c:44:b7:1a:84:c5:f0:53:38:60:66:c3:95:
ee:58:71:1c:e0:e3:fa:f0:f4:19:10:94:a3:43:64:57:ae:be:
3c:2e:80:91:52:b7:31:ee:a9:c4:fc:4d:16:f2:ff:e7:fe:0b:
cb:c5:77:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 02:45:34 2025 by rpki-client