Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/iicMMQ10XQ8008nX6Ae3eVbgmL0.roa
File: iicMMQ10XQ8008nX6Ae3eVbgmL0.roa (raw, json)
Hash identifier: 4yoFwH/IX5emKUCfLbjY375QCCNLF8adRjOGmDCS7Hw=
Subject key identifier: 8A:27:0C:31:0D:74:5D:0F:34:D3:C9:D7:E8:07:B7:79:56:E0:98:BD
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019428248FB2AF3B23F8D41C9C10D3CFCC2B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/iicMMQ10XQ8008nX6Ae3eVbgmL0.roa
Signing time: Thu 02 Jan 2025 17:51:12 +0000
ROA not before: Thu 02 Jan 2025 17:51:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58061
IP address blocks: 87.121.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:8f:b2:af:3b:23:f8:d4:1c:9c:10:d3:cf:cc:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a270c310d745d0f34d3c9d7e807b77956e098bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cf:f4:23:c0:c4:13:69:16:9f:1c:f5:8d:95:
09:b4:13:b2:37:ec:0b:83:2e:39:c7:96:7f:4c:09:
98:dc:9b:18:da:e2:f3:34:ac:e0:19:ce:e3:5c:1b:
ad:37:2c:c5:db:b7:f1:10:29:0a:12:93:af:36:e7:
5b:d1:30:f1:9c:bb:e7:89:11:d4:09:8a:1b:62:b0:
5a:cb:74:c1:ea:b2:35:c9:72:a7:59:63:e5:18:e4:
ac:df:4d:97:52:f5:8b:61:fe:0d:1d:57:52:78:36:
61:a8:e2:38:3f:0d:0a:15:6b:fb:12:37:a6:67:b3:
56:61:64:df:9d:91:aa:38:a6:43:85:ab:62:af:07:
ed:ac:49:20:1e:ee:bd:da:36:1d:17:28:6a:c9:70:
f1:0a:c6:21:ec:ac:63:37:72:8e:ee:f8:8b:a5:98:
7e:80:b2:28:56:da:3c:bf:d4:1b:7e:2b:b8:92:f7:
cb:8a:16:c1:bf:b1:7e:d7:10:25:59:e7:1c:51:44:
94:99:5b:03:ae:7d:bb:06:8d:9d:de:bd:6c:35:af:
79:7e:60:00:d2:6a:ac:4c:33:ad:a6:a9:2d:2c:5e:
a7:d5:61:c7:3a:a6:e5:e9:89:19:ae:75:15:9a:6c:
cc:4f:c4:74:83:8c:ff:df:74:30:38:8b:7d:f3:de:
03:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:27:0C:31:0D:74:5D:0F:34:D3:C9:D7:E8:07:B7:79:56:E0:98:BD
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/iicMMQ10XQ8008nX6Ae3eVbgmL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.163.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:93:37:ab:44:dd:69:cf:55:4f:b4:5b:d5:01:50:b9:34:1b:
11:ad:87:36:dd:0f:dc:43:4c:e6:a9:72:1d:6a:33:64:4e:5e:
70:28:6a:38:41:66:0b:a9:f1:1e:58:2d:d0:80:d7:18:18:b2:
bb:fc:93:28:51:9c:f0:2c:ea:e9:6d:dc:e8:39:5f:97:bd:3a:
d8:4f:89:20:34:47:b3:c2:6a:70:f3:bd:41:f8:e6:12:8e:41:
71:a2:3b:ab:ce:08:3c:9d:25:98:64:dc:a4:0a:04:9c:72:d7:
24:6d:9c:7a:33:bb:a9:9b:90:22:14:7d:cf:39:fa:1f:e3:7b:
74:cd:14:69:d4:a6:b5:cd:de:61:6f:1c:e3:1c:37:38:5b:ad:
af:f1:35:cd:56:28:de:6c:34:09:47:74:32:d2:5b:e4:a6:31:
78:5a:f9:9f:43:5c:bf:89:2d:8c:d5:2e:20:12:12:f8:35:d4:
c5:9f:fe:c6:ad:51:75:fe:8d:8b:e9:a3:ed:3e:7b:d1:6f:88:
e6:77:5d:3b:05:11:58:60:53:97:c8:30:a7:e9:dd:dd:ed:e0:
d3:ec:bd:02:a9:88:d3:c8:af:34:a5:b8:55:c4:6a:77:b0:42:
76:83:87:56:13:54:92:a4:4d:6e:4c:dd:d5:58:e5:49:29:2a:
41:98:af:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:47:40 2025 by rpki-client