Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/AiVYsQDnBrNXVZNQHb1QG3ejhWs.roa
File: AiVYsQDnBrNXVZNQHb1QG3ejhWs.roa (raw, json)
Hash identifier: MeOMNj8M3otSolym8ILgKTUapqaRLBLDFhuT2M87Jfs=
Subject key identifier: 02:25:58:B1:00:E7:06:B3:57:55:93:50:1D:BD:50:1B:77:A3:85:6B
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 019787A9D40B5116CC6D9D81C27B50215A83
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/AiVYsQDnBrNXVZNQHb1QG3ejhWs.roa
Signing time: Thu 19 Jun 2025 10:09:03 +0000
ROA not before: Thu 19 Jun 2025 10:09:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51765
IP address blocks: 46.20.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:87:a9:d4:0b:51:16:cc:6d:9d:81:c2:7b:50:21:5a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Jun 19 10:09:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=022558b100e706b3575593501dbd501b77a3856b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:83:32:aa:17:fd:eb:a2:1d:2f:d0:0d:25:1f:
57:b1:7d:d2:41:d2:54:a7:0f:db:ad:67:7a:ff:90:
93:b1:73:b0:d6:59:cf:b4:ee:79:30:90:c8:42:3e:
fe:7c:66:50:b0:36:f2:8b:70:b8:df:f3:69:13:94:
1e:c8:00:51:1f:fc:b7:7e:8d:33:ce:b1:ce:8a:f2:
51:03:0a:c4:8e:dd:75:bf:ca:31:91:ef:95:a5:d4:
aa:96:d6:50:c4:2a:1e:3d:b2:ec:ef:c4:bb:4c:d7:
e2:e0:69:9f:8c:9d:d2:a9:f8:d4:da:51:4e:49:c7:
3d:cb:8c:cf:46:9c:0d:3e:a8:db:38:92:3d:62:3a:
19:9f:e7:c2:12:a6:58:0e:e3:35:5e:21:91:51:46:
2e:7e:d0:6b:8c:8d:f2:47:97:2e:50:c7:35:9f:25:
bb:71:cf:b6:00:a6:a1:a9:72:24:83:5a:31:7e:4a:
33:08:3d:aa:84:8e:08:a2:8d:53:b7:31:50:a6:37:
d0:e2:ab:71:ee:d7:04:a5:7e:59:24:93:4d:f0:96:
52:c8:5d:5b:cb:ab:c5:b7:15:1f:98:96:28:bf:1a:
cc:b7:a3:0d:cb:3d:d9:d6:24:27:cf:0a:73:35:11:
50:d2:e8:13:67:7e:b2:fd:db:31:dc:06:f6:8b:4a:
3b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:25:58:B1:00:E7:06:B3:57:55:93:50:1D:BD:50:1B:77:A3:85:6B
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/AiVYsQDnBrNXVZNQHb1QG3ejhWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.110.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:ea:27:ab:9d:a0:b2:56:0b:17:1b:28:b8:84:dd:b7:83:29:
f1:1a:cd:d9:e0:64:12:b9:68:5b:bf:12:da:77:a0:02:27:b4:
d6:6e:bb:ed:78:71:2d:52:b8:cf:68:1d:ee:89:43:9d:89:40:
2f:ad:3f:cf:65:75:23:6b:5f:4c:38:71:0e:38:f0:67:04:6c:
6f:1b:3d:05:df:48:bc:61:a7:48:35:22:d6:cf:f1:90:7e:94:
21:47:6e:bf:0e:22:42:6e:10:d2:79:ba:f2:68:2e:0a:b6:29:
47:de:4b:8e:6d:59:f6:a2:16:cf:e2:a4:0a:a8:1a:7c:14:93:
8e:f5:be:fa:6e:b1:de:21:3b:25:6a:e4:d3:68:c1:3a:da:f3:
19:3b:5a:c2:dd:0d:28:3a:02:ff:a6:20:30:f6:6a:48:a6:c2:
72:80:7c:05:ec:61:c7:19:02:dd:c4:05:89:6e:3d:2f:ab:2c:
51:79:00:96:6d:e9:8e:2d:79:eb:d7:51:3b:6d:ab:8b:af:cb:
34:8e:49:53:2b:26:64:9c:f4:a5:63:b4:76:13:89:6c:7a:e7:
24:cd:85:71:13:80:ea:4a:7c:44:af:39:55:72:be:68:4f:ec:
c0:a8:f5:9a:8a:2e:ed:f1:6d:43:0d:0a:43:9b:40:74:b8:ca:
5e:5e:ec:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:56:19 2025 by rpki-client