Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/iyT2rEaTLGTQJtoCzDixmDHk4q8.roa
File: iyT2rEaTLGTQJtoCzDixmDHk4q8.roa (raw, json)
Hash identifier: DJdcXuwOyrFSr66rkLo/Y+8lRD0xwqdql+52mCZmuDA=
Subject key identifier: 8B:24:F6:AC:46:93:2C:64:D0:26:DA:02:CC:38:B1:98:31:E4:E2:AF
Certificate issuer: /CN=306134bcf59f581d6b76630cfa87867876a29215
Certificate serial: 019423699972BAA92E40B33838445B5925FC
Authority key identifier: 30:61:34:BC:F5:9F:58:1D:6B:76:63:0C:FA:87:86:78:76:A2:92:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGE0vPWfWB1rdmMM-oeGeHaikhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/iyT2rEaTLGTQJtoCzDixmDHk4q8.roa
Signing time: Wed 01 Jan 2025 19:48:30 +0000
ROA not before: Wed 01 Jan 2025 19:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5500
IP address blocks: 193.93.203.0/24 maxlen: 24
2a02:56c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGE0vPWfWB1rdmMM-oeGeHaikhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:99:72:ba:a9:2e:40:b3:38:38:44:5b:59:25:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306134bcf59f581d6b76630cfa87867876a29215
Validity
Not Before: Jan 1 19:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b24f6ac46932c64d026da02cc38b19831e4e2af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3f:83:2d:df:7c:d5:e4:f0:fd:85:9c:3f:f3:
82:3e:62:06:14:3d:db:4e:77:34:a8:c2:46:62:b8:
59:03:1a:2e:1f:42:ff:6d:a8:7d:57:c6:7b:72:c9:
d6:42:96:d1:3a:d0:6c:a9:43:93:26:6b:d9:92:f5:
11:ff:ae:01:2e:aa:7b:0a:e4:86:65:39:8b:77:e4:
b7:fa:01:84:92:e8:dd:0f:3c:be:b4:56:4c:f3:25:
8a:6e:02:0a:9a:60:90:73:0f:e9:19:40:7e:18:5f:
25:50:fa:61:5b:e0:0e:8a:7e:4d:c1:44:32:74:28:
70:5d:b5:26:a9:60:fa:51:7c:31:13:f1:3d:cb:09:
6f:4f:8e:1e:29:8c:00:4a:2b:cb:1b:9d:17:88:3b:
7a:b7:94:48:8a:f7:3f:f5:3c:21:e7:2e:c2:60:5d:
95:ab:bc:ab:a8:fd:e0:7e:9d:af:44:bf:60:08:f9:
48:17:99:de:e5:51:bb:7c:5c:75:92:15:0d:4e:72:
eb:f3:91:3b:08:f9:66:32:b9:69:60:6d:45:15:2b:
c0:c3:62:28:cb:a5:bf:7e:92:02:ae:92:0b:a1:3e:
16:f9:ca:43:32:30:ef:25:87:b1:a5:9a:65:7a:33:
ef:5a:42:a7:df:a9:6d:3f:89:a3:2f:4c:11:36:87:
57:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:24:F6:AC:46:93:2C:64:D0:26:DA:02:CC:38:B1:98:31:E4:E2:AF
X509v3 Authority Key Identifier:
keyid:30:61:34:BC:F5:9F:58:1D:6B:76:63:0C:FA:87:86:78:76:A2:92:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGE0vPWfWB1rdmMM-oeGeHaikhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/iyT2rEaTLGTQJtoCzDixmDHk4q8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.203.0/24
IPv6:
2a02:56c0::/32
Signature Algorithm: sha256WithRSAEncryption
26:60:c4:f3:1b:38:72:b2:5f:6e:a0:14:d7:46:08:62:e0:6c:
9f:74:21:8b:28:9f:f1:8f:1d:2b:87:7e:6b:93:05:d8:d1:cc:
0b:d8:56:1e:1e:e7:10:e5:1c:c3:80:80:fc:dd:26:90:70:10:
73:21:7d:97:40:db:bc:42:41:b6:6f:fc:41:1e:e5:c2:52:74:
53:a0:21:cc:9d:f2:6a:f6:46:21:94:e9:48:6f:7c:ee:8c:38:
58:24:50:f2:65:bd:c9:54:d0:d9:aa:4b:82:fe:9f:88:86:c9:
53:f3:41:dd:4b:a3:12:5a:07:e3:2f:da:a2:11:f4:87:3e:a6:
1a:01:bf:33:89:dd:95:31:c3:b5:7e:7f:24:41:28:3c:f0:e0:
6c:d6:8d:77:b5:fd:f0:84:d0:0f:e7:fc:f0:ad:50:bf:18:28:
91:29:63:16:11:ae:4b:ed:0d:2a:71:de:ce:4d:a8:6c:c9:2a:
b0:8c:28:85:7f:03:b3:ab:10:1a:8f:21:2f:9b:6a:f7:a9:7a:
2d:ad:28:9d:0e:35:20:fa:4b:0d:1e:55:d5:a1:55:24:28:fe:
d7:d5:05:0e:6d:67:1b:42:b7:95:73:10:e4:07:38:7c:9d:4a:
21:c6:3b:87:7e:e2:92:ce:30:60:66:82:cc:9e:6d:fa:e5:1a:
d6:1f:51:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:32:19 2025 by rpki-client