Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/lI3KcK_JQBvOB3k2IueM3WHtrfw.roa
File: lI3KcK_JQBvOB3k2IueM3WHtrfw.roa (raw, json)
Hash identifier: Gb7bXt8QtmOseHG0MDJ5JR67PlBq2vdcxr+aQTeaaZE=
Subject key identifier: 94:8D:CA:70:AF:C9:40:1B:CE:07:79:36:22:E7:8C:DD:61:ED:AD:FC
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 01941FFA2E623A04701177BDD160259CE001
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/lI3KcK_JQBvOB3k2IueM3WHtrfw.roa
Signing time: Wed 01 Jan 2025 03:47:57 +0000
ROA not before: Wed 01 Jan 2025 03:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6762
IP address blocks: 185.71.222.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 23:34:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:2e:62:3a:04:70:11:77:bd:d1:60:25:9c:e0:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: Jan 1 03:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=948dca70afc9401bce07793622e78cdd61edadfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:41:d8:76:84:a0:b8:50:25:39:2a:95:b5:e6:
0f:65:8b:c1:36:a2:a3:7a:df:c8:86:89:1c:de:da:
c8:88:42:46:cb:39:de:b4:99:fe:4d:25:be:c5:79:
49:bf:c2:dc:26:49:12:d3:ba:81:84:23:4a:e8:e4:
f3:b0:30:f6:7c:48:41:c6:9a:46:7e:6d:e9:2b:93:
8c:15:59:eb:4f:d2:35:90:39:f1:5c:3d:2a:66:b2:
06:b6:43:49:09:85:ca:3a:e4:47:08:29:ab:8c:82:
90:ee:42:0b:d8:07:df:3c:b6:ea:ab:4f:a4:0f:6f:
db:12:17:76:b5:21:46:41:a7:90:f5:3c:c0:b8:b0:
17:bb:0b:8d:87:d3:fe:85:9c:dd:14:9c:00:06:44:
e6:8d:eb:34:f9:1c:fa:57:5e:65:72:e1:0b:cb:c0:
65:4d:6d:33:01:b6:cf:34:41:ef:95:92:ef:2d:fc:
d5:37:95:a1:dc:01:c1:40:89:49:4c:1e:97:3b:9a:
bf:3d:5b:9b:9a:4c:51:f7:a2:ad:47:e8:e3:a7:0e:
2c:d1:bd:2b:8c:e4:f0:eb:52:08:19:32:26:d7:63:
18:a7:83:63:56:d2:63:47:a5:dc:23:33:f5:9c:6b:
4d:f1:36:5b:92:17:8c:46:7c:67:6e:6c:bf:53:90:
c7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:8D:CA:70:AF:C9:40:1B:CE:07:79:36:22:E7:8C:DD:61:ED:AD:FC
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/lI3KcK_JQBvOB3k2IueM3WHtrfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.222.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:0e:fd:e7:c7:53:0d:1c:08:0e:eb:66:fc:01:99:20:33:b6:
d4:d0:f8:07:11:df:3b:aa:f6:1d:93:b6:9b:da:f5:67:ec:a6:
fb:25:49:8b:cf:f3:08:26:33:33:4c:76:38:98:ed:e0:06:dd:
3f:5e:18:96:87:18:90:58:d5:2c:43:a0:41:3e:aa:0d:63:44:
e6:4f:00:7e:48:03:31:41:b1:6c:9d:ab:86:64:9c:3b:53:38:
94:d9:2b:6d:5c:97:95:6e:17:8f:14:52:1f:25:36:c0:a4:8f:
72:4b:ee:0c:57:1f:86:83:cf:4e:f6:6e:f8:01:15:90:6d:3c:
e7:e8:c3:41:63:8e:1e:5e:2a:be:5f:13:4f:fd:f4:18:99:f8:
79:c1:af:37:25:a7:6f:3a:b9:e1:b9:40:6c:1b:29:36:73:8f:
23:d5:2f:a3:b5:ca:ab:c4:7f:71:bd:ea:94:2d:f4:ae:0d:bc:
99:5c:10:e1:f9:f6:17:10:11:8c:c1:df:aa:e3:1b:57:9a:c3:
90:35:c8:b9:eb:97:d1:72:af:d8:2a:e4:50:e2:4b:e4:a3:38:
a2:1d:29:be:c4:98:85:3b:3d:20:56:60:13:0c:73:fe:22:73:
fa:d0:f4:49:b3:2b:f6:a6:7e:38:ea:76:68:31:32:fc:e8:57:
0d:c5:2a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:30:25 2025 by rpki-client