Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/iTss4dVuEO8u2zrybey6wjkQ5CM.roa
File: iTss4dVuEO8u2zrybey6wjkQ5CM.roa (raw, json)
Hash identifier: iS+Pl9gnUh0T0PMsvXCrH+rna0Q4YPkZDZcMC+K1GTQ=
Subject key identifier: 89:3B:2C:E1:D5:6E:10:EF:2E:DB:3A:F2:6D:EC:BA:C2:39:10:E4:23
Certificate issuer: /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Certificate serial: 019427B69633C3183CEC6B703B1B5D7B664E
Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/iTss4dVuEO8u2zrybey6wjkQ5CM.roa
Signing time: Thu 02 Jan 2025 15:51:04 +0000
ROA not before: Thu 02 Jan 2025 15:51:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 194.76.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:96:33:c3:18:3c:ec:6b:70:3b:1b:5d:7b:66:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Validity
Not Before: Jan 2 15:51:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=893b2ce1d56e10ef2edb3af26decbac23910e423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9d:b1:4e:dc:60:d0:58:e6:65:f0:4d:42:f5:
82:0d:77:cb:33:58:8d:e5:6e:ba:af:2f:86:0c:ec:
ac:d0:30:fe:22:64:19:a5:9a:2d:91:5b:b9:43:31:
00:5d:52:1a:72:a0:85:f6:42:88:dc:e9:07:89:7e:
cb:d8:99:61:8a:12:5c:ef:94:65:54:b4:64:14:60:
3d:69:8f:98:65:77:19:ad:f1:08:05:8e:7b:f9:21:
42:45:20:db:99:a6:18:89:d3:4d:b9:af:d7:75:5a:
be:7b:27:5d:99:d6:d1:53:38:5e:bf:54:68:5d:f0:
9e:ae:8a:c3:bb:1a:6e:a5:e5:89:ec:fd:c6:6c:9d:
cc:b9:c3:d5:15:40:60:86:6c:75:e6:00:3e:7b:79:
95:56:4e:ac:c1:37:8b:8c:3a:16:f0:29:6c:41:97:
e0:4a:4c:d2:29:52:b3:db:d8:70:e6:e0:7f:b7:26:
f1:aa:2c:30:42:c5:87:cb:ff:bf:03:62:82:bf:18:
af:38:44:54:9a:a9:7b:76:b3:d2:56:5d:95:a4:6c:
d5:77:42:b7:16:5f:25:01:52:09:88:cd:95:bf:9a:
91:bd:88:db:7b:a5:51:43:1c:4a:a4:71:c4:22:9e:
bb:e2:ef:94:27:ef:2a:73:fd:c4:9f:7b:11:3d:dd:
58:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:3B:2C:E1:D5:6E:10:EF:2E:DB:3A:F2:6D:EC:BA:C2:39:10:E4:23
X509v3 Authority Key Identifier:
keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/iTss4dVuEO8u2zrybey6wjkQ5CM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.113.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:3e:5b:22:12:d0:50:cd:4d:58:99:9b:f1:b1:6e:c0:65:1c:
17:3b:91:1c:f5:e1:6b:fa:e0:01:1e:02:a6:de:38:72:10:d9:
87:b7:31:3f:82:41:94:c8:3a:a2:02:fc:84:98:36:2d:1c:a6:
93:2f:4b:7f:cf:a4:a9:55:70:81:e5:6a:da:e8:85:78:3d:3b:
1a:6b:ee:e5:ea:39:ae:55:b2:e8:8e:51:70:fa:69:d1:9f:a9:
cd:9e:fb:d5:75:05:3f:68:1a:4d:db:9e:ba:03:eb:7f:8e:00:
b8:32:e1:23:91:c0:fd:ad:3c:62:62:77:b5:e1:79:be:2c:ed:
ed:04:20:5a:f0:b4:26:42:4c:34:d8:94:d1:fb:3e:6d:27:b9:
b2:8f:70:c4:c0:be:92:be:b5:0c:f3:76:71:58:26:7d:ed:28:
89:9d:be:1a:69:ec:84:30:9a:4e:22:23:d2:e8:60:99:f4:83:
8d:f2:c0:8d:08:ba:dd:5a:cb:4a:b7:40:18:1f:2e:e4:66:6b:
56:51:d1:0c:48:03:72:b4:76:91:cf:4e:75:0e:b5:c8:77:0d:
81:1f:de:d7:80:54:a1:76:3c:e7:dd:54:8a:15:e0:cf:8b:ac:
5d:bd:11:c6:56:2e:bf:80:67:8a:3d:be:93:ee:25:07:3e:28:
f0:84:bc:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:03:47 2025 by rpki-client