Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/ItUhScrgPwKkKUyhqEMMP6UQG5o.roa
File: ItUhScrgPwKkKUyhqEMMP6UQG5o.roa (raw, json)
Hash identifier: gmpeHaOEVGgSYmwc/n6Xey1Y6I6lJR2qqLtWqmrTzmc=
Subject key identifier: 22:D5:21:49:CA:E0:3F:02:A4:29:4C:A1:A8:43:0C:3F:A5:10:1B:9A
Certificate issuer: /CN=21b82fc8ed88f99cab57d76803176eb27a9f0bfa
Certificate serial: 019425216E4094EFFA4AEA39CA25AD142550
Authority key identifier: 21:B8:2F:C8:ED:88:F9:9C:AB:57:D7:68:03:17:6E:B2:7A:9F:0B:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbgvyO2I-ZyrV9doAxdusnqfC_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/ItUhScrgPwKkKUyhqEMMP6UQG5o.roa
Signing time: Thu 02 Jan 2025 03:48:55 +0000
ROA not before: Thu 02 Jan 2025 03:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60845
IP address blocks: 185.113.164.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/IbgvyO2I-ZyrV9doAxdusnqfC_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:6e:40:94:ef:fa:4a:ea:39:ca:25:ad:14:25:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21b82fc8ed88f99cab57d76803176eb27a9f0bfa
Validity
Not Before: Jan 2 03:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22d52149cae03f02a4294ca1a8430c3fa5101b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:64:54:7b:21:4e:0f:b9:1b:9b:76:e9:f1:61:
ff:3f:6e:6f:12:0d:26:62:0e:59:98:7c:03:2e:5d:
43:ce:e3:7a:00:b5:61:d1:92:3c:a5:fc:40:ab:c9:
44:4d:25:26:07:a4:68:0b:30:37:16:0a:b0:63:1d:
23:d7:00:d1:d7:c9:fa:f5:91:14:25:57:1c:92:67:
20:ef:62:61:da:9d:54:9e:0e:01:e4:6a:c3:15:99:
9b:43:8a:46:e0:cb:69:c7:6a:df:2e:52:7b:21:aa:
98:94:77:a1:91:c1:e7:21:22:5a:e9:b1:7b:01:d8:
3b:b8:18:c1:73:99:82:0b:60:ce:dd:7e:16:62:75:
99:f4:fc:fd:a7:e2:54:49:4b:c1:01:c7:11:1d:d1:
85:a0:a8:db:3d:fa:04:cf:5d:8f:24:eb:a5:93:9d:
3a:6c:88:6e:3a:e6:5b:a9:33:cb:13:91:b2:3b:93:
81:0a:6b:7d:2b:5f:3f:ad:f4:da:17:07:0a:c7:e2:
37:dd:1e:f8:e8:95:f3:61:65:c2:d5:cb:89:1d:a0:
72:25:2f:68:70:30:72:a6:7f:7c:b1:df:d3:3f:cf:
e3:77:cd:f4:76:e6:5d:da:e1:2d:f8:28:1d:f1:46:
eb:4a:15:dd:f9:0f:c5:72:0f:bb:7d:9a:94:91:ba:
d2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D5:21:49:CA:E0:3F:02:A4:29:4C:A1:A8:43:0C:3F:A5:10:1B:9A
X509v3 Authority Key Identifier:
keyid:21:B8:2F:C8:ED:88:F9:9C:AB:57:D7:68:03:17:6E:B2:7A:9F:0B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbgvyO2I-ZyrV9doAxdusnqfC_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/ItUhScrgPwKkKUyhqEMMP6UQG5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.164.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:22:c9:f3:cb:d5:64:5f:8c:0b:98:45:7e:b7:f9:0b:cb:b3:
d2:f5:08:6b:ab:56:d8:22:99:ee:f0:d2:ef:41:94:55:5f:09:
01:c8:21:c3:b1:ce:c7:57:07:ba:8f:67:19:42:e5:4a:24:f6:
4f:d7:4a:a0:e8:60:4f:7f:71:70:89:e1:bf:64:71:09:bf:23:
f4:c9:75:01:a9:6d:0b:ed:e6:7d:62:f2:77:61:c0:f8:1b:be:
00:e0:1a:c0:4e:9b:7e:0b:b2:b5:2b:51:8e:1b:cc:2b:03:da:
2e:21:9b:6c:ba:cc:8c:98:5c:ff:54:f7:45:a6:47:a2:c4:82:
bf:34:da:d9:83:f9:20:40:63:d7:f6:fc:dd:fb:6a:83:41:2e:
00:15:9c:fe:5a:86:96:a9:fe:57:57:91:9e:80:58:e8:9c:31:
f1:4d:2a:ea:e4:48:30:b4:a2:04:a9:cc:fb:ba:c0:72:fc:85:
12:50:c2:5a:6a:27:1a:29:6a:db:07:ee:ba:37:0b:b7:c7:76:
e7:27:1c:28:7c:7e:09:80:e8:18:31:3a:ea:fe:10:75:c5:37:
7b:c3:6e:ef:66:3d:39:fb:91:85:96:e9:c0:cb:5d:49:c8:fe:
78:b2:19:b3:aa:27:22:66:43:93:c9:2a:74:59:ab:1f:19:18:
31:ad:c3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:58:36 2025 by rpki-client