Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/IXB7KzKujGJB9qHSV-0muRiEa80.roa
File: IXB7KzKujGJB9qHSV-0muRiEa80.roa (raw, json)
Hash identifier: BqHzdDeRfi2F8mGR+zPLtSwSdgCJjnyKcweTv1mlvB4=
Subject key identifier: 21:70:7B:2B:32:AE:8C:62:41:F6:A1:D2:57:ED:26:B9:18:84:6B:CD
Certificate issuer: /CN=03090fac3cc42f1997455a12e643064637c69dc3
Certificate serial: 019420D5957A78F794C543C50AEB5490D32B
Authority key identifier: 03:09:0F:AC:3C:C4:2F:19:97:45:5A:12:E6:43:06:46:37:C6:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AwkPrDzELxmXRVoS5kMGRjfGncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/IXB7KzKujGJB9qHSV-0muRiEa80.roa
Signing time: Wed 01 Jan 2025 07:47:35 +0000
ROA not before: Wed 01 Jan 2025 07:47:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34593
IP address blocks: 185.96.112.0/24 maxlen: 24
185.96.113.0/24 maxlen: 24
185.96.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft
rsync://rpki.ripe.net/repository/DEFAULT/AwkPrDzELxmXRVoS5kMGRjfGncM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:95:7a:78:f7:94:c5:43:c5:0a:eb:54:90:d3:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03090fac3cc42f1997455a12e643064637c69dc3
Validity
Not Before: Jan 1 07:47:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21707b2b32ae8c6241f6a1d257ed26b918846bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e1:a3:14:86:fa:37:d9:bf:c8:31:9f:bd:22:
09:28:2a:57:bd:ed:27:83:c5:c4:ed:6f:8e:00:64:
cd:cf:d7:d5:de:e9:0f:ad:9e:08:c0:18:4f:de:5d:
ed:a4:2b:21:f6:13:f7:bc:c7:3a:01:ab:27:e8:cc:
23:5d:2d:fd:1c:7f:da:a0:80:50:df:90:32:99:d4:
09:98:22:55:27:5b:9c:87:95:27:00:85:ef:0a:38:
02:1e:9d:65:e1:11:1e:0b:e8:d4:6d:7c:56:97:96:
a5:d5:bd:e6:db:fa:6a:dd:05:ac:38:7c:2f:19:67:
6f:48:89:0e:e4:58:54:64:d3:aa:f2:1d:27:86:fe:
97:21:d0:00:d6:2d:34:fd:6c:84:97:3b:dc:e1:cf:
f7:05:ec:c3:12:c6:ee:06:3d:d6:3a:8e:aa:25:84:
2c:8d:dd:e3:d7:9d:f3:a7:43:9d:84:98:3b:f9:37:
76:fa:fc:80:27:cd:ec:57:a7:0a:e7:aa:8e:bd:01:
12:75:a6:77:b7:86:2b:7d:45:27:24:cb:21:1a:95:
3d:3d:2d:07:f0:27:c6:b4:c0:b9:9c:b3:9f:a6:90:
8e:5a:12:7b:c4:0b:eb:23:96:9d:1f:4d:d9:3c:80:
b9:27:b2:77:6a:c7:9a:4c:75:27:98:94:93:82:88:
a7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:70:7B:2B:32:AE:8C:62:41:F6:A1:D2:57:ED:26:B9:18:84:6B:CD
X509v3 Authority Key Identifier:
keyid:03:09:0F:AC:3C:C4:2F:19:97:45:5A:12:E6:43:06:46:37:C6:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwkPrDzELxmXRVoS5kMGRjfGncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/IXB7KzKujGJB9qHSV-0muRiEa80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.96.112.0-185.96.114.255
Signature Algorithm: sha256WithRSAEncryption
9f:4c:e0:48:01:cf:40:15:86:5f:97:90:6c:93:f2:61:11:f5:
ea:59:72:a1:35:d7:a8:07:36:f1:e9:8f:eb:6c:2f:8c:66:0a:
58:6e:87:95:48:17:78:76:a8:04:66:03:00:5f:6e:48:77:a1:
e0:52:3b:7f:b2:55:c6:2b:25:9f:e2:85:f5:d4:f1:30:41:08:
6c:30:a3:f5:1f:46:d6:23:13:bc:44:74:35:cc:78:0e:2a:64:
fb:83:93:03:16:35:a1:9a:0f:93:49:a5:f8:86:b5:8e:cd:44:
d5:15:51:a2:21:dc:d0:62:eb:58:3d:ef:d4:1d:c8:d2:39:1c:
b7:8a:d5:b4:bc:1d:0d:18:db:5e:5f:9a:88:a9:69:07:9d:77:
1f:81:79:9c:91:6a:20:b8:d2:56:b2:91:f8:3e:f3:b3:fe:5b:
a8:90:d0:37:8d:8e:75:1b:01:25:c1:96:87:30:8b:ca:94:75:
53:06:58:d5:a5:23:56:9c:60:bb:1c:77:69:63:0a:c2:c2:76:
76:17:b9:3c:d8:5c:f8:74:71:ac:c7:5b:23:76:18:fb:3a:b2:
72:cd:ff:8c:c2:9f:ac:1a:4a:16:5a:0c:c8:ac:76:30:66:5b:
3d:e6:37:f1:ca:5f:b9:78:ac:f3:78:ee:9a:3a:57:e6:8d:a5:
7a:a9:29:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:35:07 2025 by rpki-client