Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/i0znYyDIsk78QzCDDCTg60lK9ig.roa
File: i0znYyDIsk78QzCDDCTg60lK9ig.roa (raw, json)
Hash identifier: aeDo1wq5VczgcfrDX0J+4eB6IcjwVsRwiJM6vkXROSk=
Subject key identifier: 8B:4C:E7:63:20:C8:B2:4E:FC:43:30:83:0C:24:E0:EB:49:4A:F6:28
Certificate issuer: /CN=913836859c6ce1869340edf1f273709b8094d9d4
Certificate serial: 019420D611AB6C8A10D9F08D5D77A1EED1EC
Authority key identifier: 91:38:36:85:9C:6C:E1:86:93:40:ED:F1:F2:73:70:9B:80:94:D9:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/i0znYyDIsk78QzCDDCTg60lK9ig.roa
Signing time: Wed 01 Jan 2025 07:48:07 +0000
ROA not before: Wed 01 Jan 2025 07:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200727
IP address blocks: 185.98.68.0/22 maxlen: 22
2a00:7bc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:11:ab:6c:8a:10:d9:f0:8d:5d:77:a1:ee:d1:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=913836859c6ce1869340edf1f273709b8094d9d4
Validity
Not Before: Jan 1 07:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b4ce76320c8b24efc4330830c24e0eb494af628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:20:97:38:d9:fb:4c:be:3e:89:c2:a1:38:67:
68:02:a5:f0:cc:cf:c8:c4:94:3b:25:fb:6f:36:41:
6c:88:5a:cb:a6:9c:2e:6e:8f:b8:06:f2:01:f6:64:
14:fe:48:15:ca:cb:74:7e:07:76:3e:b7:02:53:05:
d7:97:5d:c7:f3:e0:0b:80:77:a7:ee:ad:4f:39:6b:
53:02:3b:e9:f9:dd:22:18:67:a7:30:86:cc:02:30:
2b:ab:e8:82:0f:15:95:d6:31:63:03:f9:65:4e:0f:
a1:3b:c9:48:f0:22:0a:29:fa:2f:99:52:5b:13:1d:
02:9e:64:2a:f7:26:b0:3d:0c:f1:92:bb:84:0e:3a:
e6:2e:64:89:1e:a9:0a:e9:ea:b9:70:ce:6a:2e:34:
9b:1f:7a:8c:61:ca:3f:f6:9e:d6:b4:d2:cc:4e:0c:
78:da:d8:30:44:23:22:43:7c:e4:a7:c0:d5:f4:85:
23:4f:d6:f6:4e:df:a1:90:bc:d5:5c:7c:9b:e9:1b:
5b:c5:b3:2c:c6:c4:07:7b:c9:4c:80:0c:18:e2:a7:
63:70:3e:e0:2f:81:ee:44:bb:95:7d:67:c6:52:a6:
2a:95:ba:42:ac:43:a1:fd:05:ad:b5:9f:2d:c6:5c:
fe:5b:3c:ee:66:d7:1c:5c:c6:90:d0:fe:3d:32:e2:
d9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:4C:E7:63:20:C8:B2:4E:FC:43:30:83:0C:24:E0:EB:49:4A:F6:28
X509v3 Authority Key Identifier:
keyid:91:38:36:85:9C:6C:E1:86:93:40:ED:F1:F2:73:70:9B:80:94:D9:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/i0znYyDIsk78QzCDDCTg60lK9ig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.68.0/22
IPv6:
2a00:7bc0::/32
Signature Algorithm: sha256WithRSAEncryption
91:06:b3:71:9c:7a:f6:92:0a:18:0f:2e:d5:43:b6:c7:d2:0e:
01:b0:c3:bd:ed:bf:98:f4:92:29:54:e7:8b:30:73:a8:e8:cc:
56:82:2f:92:0d:a9:e5:8f:f6:dc:a6:83:4f:3b:77:24:55:18:
32:c4:f1:0b:fd:57:43:ba:d4:f9:53:2a:7e:24:df:50:7a:52:
d9:d5:9a:89:4e:d6:da:1a:d7:2b:f2:ac:f1:4b:02:a7:ca:d6:
c1:77:9b:ec:43:9a:28:58:5d:05:01:b7:18:f0:05:b7:5c:b0:
09:01:17:f9:c4:83:01:8a:70:2f:ba:f2:cd:da:9c:97:ff:41:
f3:b7:72:2c:d1:5d:41:af:07:07:4a:74:c9:d5:63:bc:14:4f:
22:c6:2d:fb:3c:1d:ba:ae:d9:dd:d6:20:d6:a9:2e:bc:06:aa:
61:4a:f8:9e:67:f8:9e:6c:93:34:3c:87:a5:e2:d6:8c:75:35:
ef:9b:f5:cc:63:17:66:48:a5:7d:f7:1c:9b:11:bd:d0:6c:db:
02:a2:b6:b7:ea:09:e9:97:f4:a4:0f:be:98:b8:10:7c:8b:ab:
eb:4f:8e:c7:e2:a3:f8:c5:ca:01:fa:df:5c:ea:c3:2a:37:d6:
ce:87:00:54:63:cb:35:37:e8:e5:63:6e:b4:d5:3e:2b:f5:2a:
c8:7a:b6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:03 2025 by rpki-client