Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/IYKB-HSEiCq4O7HvrSnxClTqE4I.roa
File: IYKB-HSEiCq4O7HvrSnxClTqE4I.roa (raw, json)
Hash identifier: HbfqesX7Z3CjfGeH5MdNYm5FcZQ54JXRPRk/orWo/qA=
Subject key identifier: 21:82:81:F8:74:84:88:2A:B8:3B:B1:EF:AD:29:F1:0A:54:EA:13:82
Certificate issuer: /CN=8e626c909eb4951154bcee8221e43951b4257624
Certificate serial: 0194282587809AB295DBB073FF841820395A
Authority key identifier: 8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/IYKB-HSEiCq4O7HvrSnxClTqE4I.roa
Signing time: Thu 02 Jan 2025 17:52:15 +0000
ROA not before: Thu 02 Jan 2025 17:52:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6762
IP address blocks: 46.244.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:87:80:9a:b2:95:db:b0:73:ff:84:18:20:39:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e626c909eb4951154bcee8221e43951b4257624
Validity
Not Before: Jan 2 17:52:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=218281f87484882ab83bb1efad29f10a54ea1382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a3:f8:59:89:1a:06:27:cf:0c:55:06:c5:06:
26:19:01:7c:0d:cc:a1:9a:f5:81:e5:b1:b2:9d:80:
bb:c9:60:63:fa:6c:aa:6a:0c:a4:a2:f3:17:7c:f2:
fb:d6:5c:0e:3e:a9:a3:56:01:5e:9f:2a:02:63:a8:
1f:ba:e0:28:fd:93:bc:1c:60:02:76:0d:a6:0e:f6:
bb:f2:b6:8a:0f:16:ad:3f:01:1b:3e:0b:57:15:e9:
a0:e9:be:20:a8:07:86:f7:a8:27:3d:61:54:7f:5c:
1a:b4:5b:24:91:85:2f:3d:d3:87:f0:1a:29:8d:63:
d9:1d:30:5c:06:14:2f:d7:da:6e:a4:d6:e4:39:ae:
25:0b:4d:c4:b1:80:c9:32:a8:a6:e6:53:72:66:92:
92:ed:8a:ab:f5:25:dc:92:e0:41:5e:58:1b:b8:80:
eb:4f:84:5e:d7:f0:b3:45:ce:9b:ed:19:b8:f0:72:
ae:59:9a:25:77:83:19:47:51:40:f0:ab:74:a2:86:
8e:9e:71:f5:af:45:23:cf:90:51:b5:c0:db:3f:25:
45:61:4d:91:51:eb:c0:83:0f:a9:43:9d:80:14:6b:
ff:10:6e:1a:6e:e0:b0:6d:0f:41:76:a1:11:b1:a9:
1a:1e:d3:f1:ce:e5:2f:e4:bb:c4:ec:7f:9b:b5:ea:
0c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:82:81:F8:74:84:88:2A:B8:3B:B1:EF:AD:29:F1:0A:54:EA:13:82
X509v3 Authority Key Identifier:
keyid:8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/IYKB-HSEiCq4O7HvrSnxClTqE4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.244.111.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:83:93:6e:f1:b4:81:27:9f:f9:c1:58:2e:2b:5d:8f:b9:0b:
f0:4a:86:09:a2:17:d5:80:46:27:d2:d4:2b:ee:e0:dd:5c:c8:
25:aa:ab:c2:fd:ae:7e:85:a7:8b:90:40:52:17:17:96:65:53:
99:a1:a3:46:bc:3f:d8:3a:87:a6:94:84:4a:0d:50:74:c6:04:
a0:73:e1:1c:90:28:9a:d5:c8:7f:0f:02:01:e6:a2:99:e6:03:
6c:ef:b4:6b:90:28:25:53:50:4d:67:e8:d0:9a:fd:51:be:02:
5d:ac:9a:c1:cb:a3:94:ac:36:96:63:23:c8:7f:7f:99:09:ff:
b5:b1:4c:80:de:fb:b1:d1:e6:89:dd:d9:a2:d3:51:a4:10:5d:
1e:35:93:6d:4e:68:1c:1e:0c:61:78:c9:92:c6:9c:5a:85:a9:
7d:34:f1:c6:6f:e3:7f:58:f5:d0:13:7c:46:24:18:ec:5c:13:
90:78:e0:f3:b9:41:de:ff:48:1b:e9:e0:c3:c7:74:59:cf:98:
cb:71:d6:bd:9c:1a:49:30:ca:1e:20:cf:5b:7f:62:c0:82:41:
0c:45:79:9f:7a:7e:38:80:05:3c:a5:1d:28:ba:a4:72:d2:f1:
ed:48:8c:df:fe:7e:18:26:1a:57:22:11:33:2f:16:35:cb:dd:
39:61:0e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:01 2025 by rpki-client