Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/iXO3PWE_FsU0xKYk8Y2XbQDtbQM.roa
File: iXO3PWE_FsU0xKYk8Y2XbQDtbQM.roa (raw, json)
Hash identifier: iCHtjZhnNNI84krnhRcpRLsDA1PIVF/eAzRpZb4b+rQ=
Subject key identifier: 89:73:B7:3D:61:3F:16:C5:34:C4:A6:24:F1:8D:97:6D:00:ED:6D:03
Certificate issuer: /CN=ec2e821d88de7a011341704202346f7c2bb9ebcf
Certificate serial: 019425FD32F2A1277D811AFC1AA38EF40282
Authority key identifier: EC:2E:82:1D:88:DE:7A:01:13:41:70:42:02:34:6F:7C:2B:B9:EB:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/iXO3PWE_FsU0xKYk8Y2XbQDtbQM.roa
Signing time: Thu 02 Jan 2025 07:48:58 +0000
ROA not before: Thu 02 Jan 2025 07:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50599
IP address blocks: 91.219.184.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 13:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:32:f2:a1:27:7d:81:1a:fc:1a:a3:8e:f4:02:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec2e821d88de7a011341704202346f7c2bb9ebcf
Validity
Not Before: Jan 2 07:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8973b73d613f16c534c4a624f18d976d00ed6d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c1:aa:c7:b0:ca:60:e6:04:04:45:7b:ed:c6:
bd:7d:99:4f:84:3a:69:1d:32:bf:31:d5:b2:38:35:
74:94:6a:fb:d2:37:c4:c2:ce:b2:6f:a3:97:9c:9e:
4a:d2:5d:8f:1e:6d:c9:a6:e2:74:e5:85:6a:f7:b2:
e3:54:c3:97:95:57:75:80:45:e7:2e:2c:23:34:6f:
62:96:79:5a:4e:73:22:1a:39:26:0f:78:ee:86:b6:
35:3b:c4:a8:a9:16:4e:ff:c1:a1:36:ca:ea:ac:fb:
32:b7:82:37:ec:fa:d2:ef:2f:c9:33:87:49:25:86:
0a:3e:a9:81:c2:69:75:de:8d:08:28:8e:e8:d7:85:
88:a0:2f:16:88:73:01:86:0c:c1:40:d9:9a:3a:5d:
b7:b4:54:57:d5:66:3d:d3:0b:55:ac:2b:43:62:15:
63:cc:e7:ac:c5:00:50:46:30:2a:21:36:f9:26:b2:
da:08:be:07:43:47:77:66:9a:63:fd:1f:52:bf:af:
5f:9f:bd:6d:2b:20:5d:d4:95:1a:3a:60:9e:1e:b3:
b1:e9:98:48:aa:c9:1f:13:49:c5:ac:f7:71:bd:9a:
e3:38:08:07:34:38:57:f4:78:37:bb:96:e5:37:8e:
a1:13:4e:4e:c7:42:a6:7e:a5:b8:fc:1b:cc:7b:7f:
bb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:73:B7:3D:61:3F:16:C5:34:C4:A6:24:F1:8D:97:6D:00:ED:6D:03
X509v3 Authority Key Identifier:
keyid:EC:2E:82:1D:88:DE:7A:01:13:41:70:42:02:34:6F:7C:2B:B9:EB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/iXO3PWE_FsU0xKYk8Y2XbQDtbQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.184.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:a6:9f:93:3c:8c:f3:9f:19:6b:e6:35:90:69:02:c0:25:e4:
da:1e:8f:10:9e:5d:1d:91:cd:bb:ee:6c:87:3a:09:74:2e:09:
7a:97:b9:00:f1:a9:49:d0:18:0e:8c:35:4c:0b:6a:91:e5:7d:
7f:09:f7:ef:d2:ab:1f:86:93:31:19:66:5f:a9:e1:34:94:23:
14:75:70:a0:15:4d:1e:93:af:94:3f:77:ce:1f:bf:1e:5b:63:
2f:51:1b:1e:cc:ca:7f:a0:8c:db:74:be:c1:61:ef:34:e3:f3:
74:66:6c:db:a3:de:08:b8:3c:be:9f:c5:5f:b7:66:91:6f:3d:
77:4e:66:1b:98:55:ab:c4:0b:77:bb:58:23:1e:40:fb:91:73:
2f:b1:87:e7:6e:6d:5e:81:a5:96:66:33:78:fd:ef:48:07:6c:
3a:ed:50:bd:c1:ea:47:d9:a0:6a:90:67:12:ce:cf:ff:57:79:
dd:fc:64:d0:59:8e:9f:4d:14:2d:1c:1d:7c:57:14:d8:30:d6:
85:1d:92:f2:9a:9e:3d:4c:df:0b:10:26:53:e5:ae:cb:de:2c:
a8:9d:61:2b:72:00:7e:48:d6:b0:e0:19:4f:3d:11:8f:15:0b:
57:1c:4b:84:82:dd:c3:70:32:37:9a:7d:e8:aa:e3:89:86:d9:
e2:e7:89:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 22:44:01 2025 by rpki-client