Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/IrS_FAeo7ooc2f0ynHvuFdypznI.roa
File: IrS_FAeo7ooc2f0ynHvuFdypznI.roa (raw, json)
Hash identifier: TS/DBO48YVVoe6NmoNSxb9VjzjtWbDtfeR9vV0R/jHI=
Subject key identifier: 22:B4:BF:14:07:A8:EE:8A:1C:D9:FD:32:9C:7B:EE:15:DC:A9:CE:72
Certificate issuer: /CN=32010f70276e418d58f08c56a79a82b99aca1763
Certificate serial: 019420D6601B4106D2CD26A94979184C1E69
Authority key identifier: 32:01:0F:70:27:6E:41:8D:58:F0:8C:56:A7:9A:82:B9:9A:CA:17:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MgEPcCduQY1Y8IxWp5qCuZrKF2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/IrS_FAeo7ooc2f0ynHvuFdypznI.roa
Signing time: Wed 01 Jan 2025 07:48:27 +0000
ROA not before: Wed 01 Jan 2025 07:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 45.88.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/MgEPcCduQY1Y8IxWp5qCuZrKF2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/MgEPcCduQY1Y8IxWp5qCuZrKF2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/MgEPcCduQY1Y8IxWp5qCuZrKF2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:60:1b:41:06:d2:cd:26:a9:49:79:18:4c:1e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32010f70276e418d58f08c56a79a82b99aca1763
Validity
Not Before: Jan 1 07:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22b4bf1407a8ee8a1cd9fd329c7bee15dca9ce72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f1:06:cd:08:a3:db:23:d6:92:3d:9c:09:37:
c9:53:74:8f:4d:a5:41:55:79:49:af:58:d7:7d:ac:
b5:49:c2:0f:45:b3:56:e1:a9:10:39:36:ec:03:2d:
83:9d:7b:8c:55:05:a7:02:77:eb:ec:3c:fd:e8:0a:
53:97:7f:9c:00:f3:61:2d:fc:44:5c:2f:55:21:cb:
4d:6e:83:08:6f:62:70:f5:16:73:40:ab:e6:18:b4:
10:0d:43:17:79:92:78:d6:4f:32:ef:73:b0:18:50:
ba:8a:8d:b6:ba:52:29:86:f4:5c:91:f9:62:58:6e:
94:09:eb:e1:5c:fd:b0:54:8a:21:4b:57:d9:3c:06:
e2:d5:90:81:5a:74:81:d9:25:0b:ae:ff:36:6d:30:
03:13:14:93:cc:79:7f:f6:2f:b3:6e:19:99:fe:58:
b6:f1:e8:ac:ee:c5:91:75:bd:1d:b7:e8:7f:44:11:
6f:2e:de:e3:26:61:0c:98:53:c6:e0:a7:98:30:93:
b3:6d:70:2c:9c:ec:59:e4:d0:45:e3:09:21:bd:46:
32:b2:81:f1:ae:d1:a0:9c:6a:88:e7:5a:96:01:33:
21:45:25:fd:ea:6e:c6:08:b2:7e:2b:a0:9a:cc:35:
49:29:90:06:20:a9:3a:e0:7b:71:d9:05:80:0d:cf:
78:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B4:BF:14:07:A8:EE:8A:1C:D9:FD:32:9C:7B:EE:15:DC:A9:CE:72
X509v3 Authority Key Identifier:
keyid:32:01:0F:70:27:6E:41:8D:58:F0:8C:56:A7:9A:82:B9:9A:CA:17:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgEPcCduQY1Y8IxWp5qCuZrKF2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/IrS_FAeo7ooc2f0ynHvuFdypznI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/MgEPcCduQY1Y8IxWp5qCuZrKF2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.248.0/22
Signature Algorithm: sha256WithRSAEncryption
87:9b:f6:d1:f8:52:ce:45:46:3b:39:b1:bf:fa:3a:5d:e9:1f:
f8:47:ca:b7:ee:3a:85:04:c4:f9:ed:2e:73:e2:bc:06:54:a9:
f0:bf:42:05:7a:b4:e3:5b:8f:57:04:1f:58:7a:45:34:86:f6:
3a:9a:86:6c:1d:10:7b:02:83:63:5e:a4:c5:ba:53:25:cb:c2:
fd:f6:2d:56:95:ca:9f:8c:5c:09:ef:15:c0:68:d8:3d:b6:27:
22:94:8b:ad:68:13:27:f5:a4:09:3f:52:e7:2f:a7:ae:91:bc:
59:e3:ff:fa:14:64:dc:b3:b1:a7:92:0e:a1:1b:db:d2:d9:93:
dd:cc:ed:a7:79:79:ec:46:9d:0a:ce:00:7c:59:ed:ad:11:5b:
8b:b1:bf:3c:b2:b2:fa:cd:55:45:6a:4a:1c:8c:34:d5:0e:93:
90:b8:12:e8:be:36:17:fe:73:20:e7:60:fb:02:32:00:31:a5:
ce:1f:52:ea:82:e6:6b:05:2c:b8:8f:3c:8d:60:29:5a:3c:62:
65:82:9b:85:e9:11:9a:66:a3:c1:aa:6d:5b:08:d5:b8:10:0c:
9c:42:ea:97:28:be:8b:7a:a7:53:6a:c4:e9:55:36:e7:cb:6a:
23:2c:b3:0f:f3:c6:f3:12:09:26:55:0a:03:e5:d8:68:b3:b1:
14:09:2f:21
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1mAbQQbSzSapSXkYTB5pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMDEwZjcwMjc2ZTQxOGQ1OGYwOGM1NmE3OWE4MmI5OWFj
YTE3NjMwHhcNMjUwMTAxMDc0ODI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMmI0YmYxNDA3YThlZThhMWNkOWZkMzI5YzdiZWUxNWRjYTljZTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/EGzQij2yPWkj2cCTfJU3SPTaVB
VXlJr1jXfay1ScIPRbNW4akQOTbsAy2DnXuMVQWnAnfr7Dz96ApTl3+cAPNhLfxE
XC9VIctNboMIb2Jw9RZzQKvmGLQQDUMXeZJ41k8y73OwGFC6io22ulIphvRckfli
WG6UCevhXP2wVIohS1fZPAbi1ZCBWnSB2SULrv82bTADExSTzHl/9i+zbhmZ/li2
8eis7sWRdb0dt+h/RBFvLt7jJmEMmFPG4KeYMJOzbXAsnOxZ5NBF4wkhvUYysoHx
rtGgnGqI51qWATMhRSX96m7GCLJ+K6CazDVJKZAGIKk64Htx2QWADc94AwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCK0vxQHqO6KHNn9Mpx77hXcqc5yMB8GA1UdIwQY
MBaAFDIBD3AnbkGNWPCMVqeagrmayhdjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWdFUGNDZHVRWTFZOEl4V3A1cUN1WnJLRjJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iNjQ4ZmItZjUwYi00Y2MyLWEyYjEt
MmY2ODIxNmI3NDI0LzEvSXJTX0ZBZW83b29jMmYweW5IdnVGZHlwem5JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9iNjQ4ZmItZjUwYi00Y2MyLWEyYjEtMmY2ODIxNmI3NDI0
LzEvTWdFUGNDZHVRWTFZOEl4V3A1cUN1WnJLRjJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVj4MA0G
CSqGSIb3DQEBCwUAA4IBAQCHm/bR+FLORUY7ObG/+jpd6R/4R8q37jqFBMT57S5z
4rwGVKnwv0IFerTjW49XBB9YekU0hvY6moZsHRB7AoNjXqTFulMly8L99i1Wlcqf
jFwJ7xXAaNg9ticilIutaBMn9aQJP1LnL6eukbxZ4//6FGTcs7Gnkg6hG9vS2ZPd
zO2neXnsRp0KzgB8We2tEVuLsb88srL6zVVFakocjDTVDpOQuBLovjYX/nMg52D7
AjIAMaXOH1LqguZrBSy4jzyNYClaPGJlgpuF6RGaZqPBqm1bCNW4EAycQuqXKL6L
eqdTasTpVTbny2ojLLMP88bzEgkmVQoD5dhos7EUCS8h
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:15:09 2025 by rpki-client