Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1nIxJRWOJXvOBNmh2ET9lbkMsb8.roa
File: 1nIxJRWOJXvOBNmh2ET9lbkMsb8.roa (raw, json)
Hash identifier: K53L9Jw0hJlM7wn6ax7inTU9oQqpe+NvZ9Rv7c4ezTQ=
Subject key identifier: D6:72:31:25:15:8E:25:7B:CE:04:D9:A1:D8:44:FD:95:B9:0C:B1:BF
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01946F9A8DE7B7C8EE8ADD53383AFB5183EA
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1nIxJRWOJXvOBNmh2ET9lbkMsb8.roa
Signing time: Thu 16 Jan 2025 14:53:07 +0000
ROA not before: Thu 16 Jan 2025 14:53:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215925
IP address blocks: 87.121.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6f:9a:8d:e7:b7:c8:ee:8a:dd:53:38:3a:fb:51:83:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 16 14:53:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6723125158e257bce04d9a1d844fd95b90cb1bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:1a:54:29:d5:2a:1a:1b:83:66:16:05:a0:a8:
b2:83:4f:1d:8b:81:d4:a7:25:b4:c7:ff:f6:3f:9b:
88:52:5e:bc:bc:8e:a8:7b:b1:a3:01:a1:6e:fe:4b:
a9:73:2d:e6:2b:f8:ad:5d:a8:c1:3a:01:67:73:c1:
e3:c1:30:c5:21:bf:4e:9e:3d:ea:55:d1:fb:7d:3d:
b0:19:9b:71:60:cb:05:38:9c:11:28:89:76:1e:6e:
56:8e:6c:0f:03:c5:b8:a9:9a:aa:47:c9:4b:b4:3d:
9b:b5:da:e9:d9:c1:dc:77:f5:86:ce:37:ba:28:56:
03:91:aa:b5:1c:c0:e3:a0:6a:1e:65:40:27:8a:2a:
39:62:9d:4e:ca:d0:67:26:e7:f3:58:c8:c7:4d:02:
52:58:f3:91:05:0c:85:99:fc:6a:b1:24:c8:c8:bd:
ab:65:89:a9:db:98:88:5b:af:30:35:2f:1c:46:82:
b2:8d:eb:aa:23:de:ae:31:90:73:52:a8:77:78:f3:
c0:9f:55:7b:f6:15:15:3b:80:a2:99:c3:78:e1:81:
0c:41:20:15:a8:d6:71:62:95:ff:af:5c:46:50:95:
2f:85:b8:50:2f:4d:21:be:b8:8e:0f:ea:e4:e0:4e:
ae:fe:6a:8c:1e:c1:1d:e2:e2:01:2e:26:85:6b:76:
f4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:72:31:25:15:8E:25:7B:CE:04:D9:A1:D8:44:FD:95:B9:0C:B1:BF
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1nIxJRWOJXvOBNmh2ET9lbkMsb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.84.0/24
Signature Algorithm: sha256WithRSAEncryption
46:c5:38:e7:26:75:ee:f7:a4:13:5e:bc:78:8c:eb:43:a6:6f:
9d:ca:41:23:8b:36:6a:ec:af:66:ee:c9:c5:b0:ef:81:89:a0:
35:7d:20:c7:d7:5d:ac:52:f0:e1:a6:2a:62:29:6f:b8:a5:44:
e2:5c:4a:e6:9c:65:5f:07:c8:b2:fd:24:29:e2:5f:a0:16:31:
5d:8c:2b:9d:76:72:70:92:96:e7:62:cc:17:64:61:f2:e3:2d:
b2:b9:8f:d6:19:3a:c7:81:1f:5d:9f:8e:77:c1:5d:93:e0:b5:
17:91:82:d7:ff:b7:09:ac:84:36:93:8a:15:15:d2:3b:fb:3c:
4b:0e:b6:0c:00:e1:64:1c:64:7a:b4:f7:c1:10:8d:b5:cb:03:
28:5b:b4:28:e7:ad:50:31:a9:25:b9:0b:e0:d8:58:d5:aa:4f:
fb:5e:35:51:69:22:02:09:4a:25:c9:17:d0:80:fe:fe:cd:05:
70:27:95:4d:89:02:6a:f3:95:d8:ce:2a:b4:5c:37:29:0c:54:
15:a9:a2:e8:1e:40:d0:3f:04:29:f0:99:71:a6:7d:10:b2:44:
f7:3f:04:2e:34:35:4f:7c:4d:72:5a:b5:a3:82:ea:89:2f:72:
bd:17:d8:cd:ae:fb:74:3d:94:4d:db:6b:09:b1:fe:33:76:08:
47:d3:0f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:53:27 2025 by rpki-client