Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/iet7MjdD3tNr9H3e8mAcOix2TP8.roa
File: iet7MjdD3tNr9H3e8mAcOix2TP8.roa (raw, json)
Hash identifier: ezXufe6PAorgReJqNNieKsjaS0PdS8wnpJWtjRxO3X4=
Subject key identifier: 89:EB:7B:32:37:43:DE:D3:6B:F4:7D:DE:F2:60:1C:3A:2C:76:4C:FF
Certificate issuer: /CN=cad794ac601ce2505b65f975a7d516a2f00a5b31
Certificate serial: 0198AE2605F61727D48D04C812ED13BF3C61
Authority key identifier: CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/iet7MjdD3tNr9H3e8mAcOix2TP8.roa
Signing time: Fri 15 Aug 2025 14:33:04 +0000
ROA not before: Fri 15 Aug 2025 14:33:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 77.90.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ae:26:05:f6:17:27:d4:8d:04:c8:12:ed:13:bf:3c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cad794ac601ce2505b65f975a7d516a2f00a5b31
Validity
Not Before: Aug 15 14:33:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89eb7b323743ded36bf47ddef2601c3a2c764cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3e:2b:ce:54:65:38:2f:75:8d:7b:79:69:55:
d6:2e:6b:bb:24:12:52:54:7e:ce:08:60:fb:66:f9:
84:d7:75:73:e1:61:f8:10:70:3f:51:40:92:5e:9b:
08:91:d5:a1:d1:74:e8:38:83:7c:ff:5f:16:49:f9:
1a:6b:86:00:c7:8b:d3:30:73:d0:b8:c1:2e:81:96:
60:b2:f8:b7:24:5e:35:63:c7:43:b5:ba:6d:d8:ed:
08:07:f7:9d:7a:2d:29:f1:69:50:c3:be:d0:c0:9b:
32:3a:46:4a:b7:97:cc:3d:5b:23:98:69:d3:b6:1d:
93:09:01:04:49:61:94:c0:3c:58:25:c3:a1:96:08:
0d:7e:43:6f:e9:1d:30:64:36:55:dd:60:7e:ea:f2:
d2:65:d7:bd:63:99:7b:64:da:be:46:65:67:ee:c3:
49:da:7e:15:09:f8:41:a2:c4:c1:07:01:9d:4b:8a:
09:d1:61:cc:7e:7c:4d:6f:8b:b1:55:11:11:cd:a0:
45:c4:bf:37:be:0b:fa:59:ad:d8:53:91:a5:db:7b:
dd:78:e7:a2:e4:8e:24:04:46:63:9d:1f:b4:84:5b:
79:bc:0a:2f:ad:52:89:55:90:e8:29:ab:c0:48:46:
32:31:ee:bb:6d:12:ba:39:5b:b8:95:01:54:f5:cf:
59:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:EB:7B:32:37:43:DE:D3:6B:F4:7D:DE:F2:60:1C:3A:2C:76:4C:FF
X509v3 Authority Key Identifier:
keyid:CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/iet7MjdD3tNr9H3e8mAcOix2TP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.102.0/24
Signature Algorithm: sha256WithRSAEncryption
48:65:cb:01:8b:18:18:96:c1:ea:8f:f1:d5:eb:92:32:42:e2:
41:99:73:6f:cb:70:a2:21:ca:b4:80:5c:d4:82:61:95:70:14:
1e:05:f5:64:4c:29:12:44:9f:e6:a6:10:11:88:84:2d:24:6c:
a3:c9:b7:a5:15:5f:94:ba:75:fc:c5:dc:8e:64:35:12:94:9a:
1f:67:3b:ff:42:d4:b4:72:b0:26:c7:9f:99:33:d3:11:6b:a7:
ad:3c:9a:ff:c0:2a:a3:31:65:a2:60:44:9b:60:94:62:62:a7:
62:08:0d:ba:1a:dc:66:ee:83:9c:4f:55:a2:97:41:fe:73:55:
8f:7b:d1:21:b9:3d:ff:a7:fa:c7:d7:b5:81:74:f7:b3:16:e3:
42:43:cf:24:28:67:29:f5:94:0f:fb:1f:40:f4:b5:6e:3a:05:
80:77:f5:a2:d9:12:c3:47:01:2c:22:14:8f:df:53:2e:42:ba:
0c:f8:18:fb:4c:0e:67:69:e9:07:f8:e5:60:7c:76:c8:f9:f0:
99:cf:8e:19:8b:20:9f:66:2a:2b:e2:4d:b4:97:9d:6f:be:59:
4f:ea:0c:83:19:b0:fb:4f:f7:d0:e0:c1:35:c9:d3:ad:a4:71:
fd:70:0d:34:b7:12:d2:ee:15:d6:a8:11:17:e4:6b:e2:e8:c3:
3b:30:ca:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:11:57 2025 by rpki-client