Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/IkF96KTgPgfMCZAziIdLfk4CHBQ.roa
File: IkF96KTgPgfMCZAziIdLfk4CHBQ.roa (raw, json)
Hash identifier: 5v2sSRWKmFa4cQtma0OIYRNUNhVsh7WNqsJdxScuV44=
Subject key identifier: 22:41:7D:E8:A4:E0:3E:07:CC:09:90:33:88:87:4B:7E:4E:02:1C:14
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0196CD41E72CB33EA305194FDD169E34A6C5
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/IkF96KTgPgfMCZAziIdLfk4CHBQ.roa
Signing time: Wed 14 May 2025 05:26:10 +0000
ROA not before: Wed 14 May 2025 05:26:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6830
IP address blocks: 85.121.18.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:41:e7:2c:b3:3e:a3:05:19:4f:dd:16:9e:34:a6:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: May 14 05:26:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22417de8a4e03e07cc09903388874b7e4e021c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:11:64:d7:65:c2:8f:d9:0a:15:6a:2e:96:d2:
b9:29:50:d4:d2:3e:23:cb:ec:5f:5e:dd:30:a6:d6:
81:41:5f:4e:ad:d1:76:83:7c:e0:ff:76:c0:b7:59:
24:95:ce:9f:8d:6b:23:58:85:0a:ab:30:b9:9d:ac:
a6:6b:42:27:aa:76:5c:ab:09:83:b0:7a:86:c9:f1:
32:70:c0:6a:95:b7:26:24:bd:d3:64:a4:32:72:2f:
3d:25:f8:b7:65:14:22:e7:75:c0:86:f1:ed:e5:52:
cf:6a:d3:90:3c:21:ce:0c:4b:46:5c:c1:8b:b9:52:
9a:d0:03:55:d1:73:36:0d:77:ae:db:e9:03:8c:4f:
83:c2:c6:3f:72:00:71:4a:d0:55:6f:e8:73:7c:9e:
1e:84:69:1a:2c:11:51:ae:86:82:05:c1:c0:da:7e:
c2:75:ea:51:95:2f:c5:30:aa:d1:4d:dd:6f:10:b0:
d6:a4:b7:bf:18:4c:5d:0b:76:43:11:6b:4c:0d:23:
9d:78:93:c1:e6:80:7e:75:65:7c:c1:63:ca:11:34:
5a:b0:f5:96:45:9a:c9:1c:30:40:bc:25:54:2a:52:
66:ce:ee:ad:4c:5b:78:dd:e7:38:42:00:0f:b6:fc:
28:58:fb:92:e2:64:cc:4d:27:62:a2:10:dc:7d:44:
1d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:41:7D:E8:A4:E0:3E:07:CC:09:90:33:88:87:4B:7E:4E:02:1C:14
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/IkF96KTgPgfMCZAziIdLfk4CHBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.121.18.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:b3:6d:25:01:a0:e9:68:2c:e7:60:16:99:54:b1:07:30:04:
ae:9c:a0:34:17:1c:b5:3a:1d:5c:31:43:29:4b:13:ac:c3:2f:
c7:68:ca:d3:43:bc:07:6e:d4:cf:3f:58:b7:d4:bb:e3:a1:41:
66:88:c2:96:13:b3:19:3d:00:e7:aa:18:ee:3e:d2:50:b0:b7:
af:e3:6c:23:4f:be:6f:e8:6b:ed:60:45:4e:3b:a1:1d:37:ad:
49:4f:6d:29:8d:74:20:e7:1a:6b:01:42:2c:f8:93:7d:20:9a:
d1:54:3f:9f:d2:49:2c:9d:3e:fc:2f:ba:cd:82:da:f4:0c:1f:
a1:16:94:3a:1b:24:2c:c7:76:9e:db:1f:89:c2:36:e6:b9:38:
be:18:d1:09:10:20:c4:ec:f0:c7:c3:3b:ba:2d:83:32:37:11:
bc:29:8b:fe:76:a3:27:99:3a:26:d1:b2:0d:20:87:6d:8d:5b:
9f:aa:de:08:5c:a4:42:3c:56:56:b4:98:9e:46:d3:b2:42:b5:
02:8c:42:dc:a7:99:97:c4:b1:35:e0:97:68:b2:a7:f3:28:9c:
04:38:ab:34:e7:2f:4f:09:84:22:41:46:d8:79:61:0c:37:ca:
b2:2b:c8:7b:6e:53:3d:ba:7b:68:f8:17:03:e6:b7:77:62:2c:
9f:3c:b7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:16:12 2025 by rpki-client