Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/I8ts4VChZIvxCXnk3zghDL9Bmu4.roa
File: I8ts4VChZIvxCXnk3zghDL9Bmu4.roa (raw, json)
Hash identifier: Md6prX/mk6M2hIPa7lBG6X8P2VoqSBLYC0PebMg3Wr4=
Subject key identifier: 23:CB:6C:E1:50:A1:64:8B:F1:09:79:E4:DF:38:21:0C:BF:41:9A:EE
Certificate issuer: /CN=03d602b9e1da2b568df544bda50e415799bbb1e2
Certificate serial: 01942745BC373F8AA922913C5AC63DA758EF
Authority key identifier: 03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/I8ts4VChZIvxCXnk3zghDL9Bmu4.roa
Signing time: Thu 02 Jan 2025 13:47:49 +0000
ROA not before: Thu 02 Jan 2025 13:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201112
IP address blocks: 194.110.4.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:45:bc:37:3f:8a:a9:22:91:3c:5a:c6:3d:a7:58:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d602b9e1da2b568df544bda50e415799bbb1e2
Validity
Not Before: Jan 2 13:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23cb6ce150a1648bf10979e4df38210cbf419aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:de:50:43:3d:20:dc:99:7c:2b:f3:5e:72:38:
af:b9:e5:2b:62:12:94:53:57:d7:64:b5:57:4b:fe:
f9:02:56:2c:29:71:4c:a8:a7:7c:a5:2b:36:13:1c:
a4:2a:35:7b:83:3e:9f:66:d4:ff:5b:f4:8f:9c:db:
e8:72:99:31:de:6f:91:ea:dd:59:75:bf:76:8e:d8:
f5:75:71:ab:1c:a7:e6:0c:05:73:73:64:ab:ee:5f:
24:d7:8b:4c:60:f8:99:c3:9c:58:b7:a0:f4:70:4c:
3f:86:82:28:34:13:4e:ba:89:a1:b8:6c:b6:c2:07:
93:73:ec:b5:30:52:bd:3d:d0:6e:89:f4:0a:6e:6e:
f6:eb:c9:ac:bd:dc:d4:d9:77:97:24:94:2a:30:cb:
25:a4:71:1c:cf:a3:fb:35:67:54:83:80:a8:af:be:
89:94:6d:5c:ef:06:69:f4:3c:34:21:47:ec:68:6c:
be:33:4e:02:c8:4a:95:c1:6e:1a:3d:9b:c7:c8:14:
b5:4b:cc:b6:79:68:4f:f0:24:1a:a1:d5:fa:14:8e:
b8:be:94:60:97:01:1f:bd:70:c8:dc:97:f7:68:cb:
42:c0:c5:9f:19:db:e4:37:5e:ef:f5:8f:52:a7:25:
c7:4b:77:5e:c4:a1:8b:24:09:6e:04:c0:b1:e5:4e:
66:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:CB:6C:E1:50:A1:64:8B:F1:09:79:E4:DF:38:21:0C:BF:41:9A:EE
X509v3 Authority Key Identifier:
keyid:03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/I8ts4VChZIvxCXnk3zghDL9Bmu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.4.0/23
Signature Algorithm: sha256WithRSAEncryption
10:76:3f:3b:ff:54:70:21:7a:13:07:c7:03:fb:8b:0c:35:c2:
2c:81:ba:d0:15:c9:fc:64:73:8d:e0:43:8f:fc:e5:03:68:3e:
07:b9:29:9c:26:36:06:ea:ed:73:b6:55:28:5e:22:51:98:45:
9c:f8:c2:04:81:de:42:c2:fb:d1:68:d1:eb:a9:59:e2:6c:3a:
93:ca:0f:af:81:85:1b:c0:19:04:da:85:37:19:a5:8a:ec:e7:
eb:5c:93:8e:96:5c:26:aa:62:70:7a:95:2c:07:bc:5d:92:7c:
3c:af:f8:27:48:d0:c0:06:8b:fd:c6:22:62:dc:f5:e1:33:4f:
89:95:e6:97:01:c2:a0:65:3b:25:39:9a:75:38:65:eb:18:6c:
c6:c7:32:1f:54:d0:ab:a0:73:b0:3f:ae:d8:b4:d1:1c:93:07:
27:f1:80:fd:4f:39:b4:fb:9d:54:42:94:05:ab:99:37:6f:ac:
c7:28:75:32:42:ff:f2:88:e2:99:42:0e:33:bd:3b:e9:6f:0a:
ce:95:ff:32:c3:d1:48:16:89:a0:fa:f5:6c:92:45:dd:07:ba:
e4:d7:85:f7:5c:d5:60:fa:53:a3:db:6e:da:eb:f1:0b:aa:80:
f4:a3:31:6a:d7:ae:3b:d1:24:cb:68:b7:c5:2b:77:d9:bf:8c:
0a:e5:90:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 19:09:41 2025 by rpki-client