Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/iGMhmXXBNt2s7l-0mx0YRvUMWSo.roa
File: iGMhmXXBNt2s7l-0mx0YRvUMWSo.roa (raw, json)
Hash identifier: McOC3wl39qVTP2IvApkUHWGgt9CHnxQ9E9acv2S4LQA=
Subject key identifier: 88:63:21:99:75:C1:36:DD:AC:EE:5F:B4:9B:1D:18:46:F5:0C:59:2A
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 0195468D56EA64577DC7E309CD7EDF913CD0
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/iGMhmXXBNt2s7l-0mx0YRvUMWSo.roa
Signing time: Thu 27 Feb 2025 08:37:02 +0000
ROA not before: Thu 27 Feb 2025 08:37:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 94.124.160.0/24 maxlen: 24
193.160.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:46:8d:56:ea:64:57:7d:c7:e3:09:cd:7e:df:91:3c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Feb 27 08:37:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8863219975c136ddacee5fb49b1d1846f50c592a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0d:7f:48:64:9d:f0:1b:ce:45:22:dd:86:53:
b0:03:db:7d:45:58:bd:3d:de:87:61:e4:81:0e:f6:
67:97:fb:6b:98:1c:8d:3b:81:8f:b8:e5:bf:41:fe:
68:2a:77:7b:61:6f:79:4c:29:04:33:ba:de:42:70:
e1:11:f9:2e:eb:7c:f2:45:8b:08:98:ad:38:b7:07:
25:a5:86:3d:91:2f:03:a3:72:91:27:ec:94:64:cd:
b1:c3:f3:9b:71:ba:19:52:ba:1d:10:fa:11:5e:96:
2e:1e:79:bc:b2:b2:c2:b7:ba:6f:35:ac:cb:67:24:
0b:96:74:87:6a:1e:a5:93:50:91:fc:de:57:cf:6e:
2c:2f:e6:38:8d:dd:d4:0f:e4:7e:16:29:53:de:b7:
f3:41:8e:9d:87:7e:e7:95:84:b5:35:8c:5f:5a:b4:
87:8d:2e:8f:11:b8:ec:fa:87:18:2a:01:23:7d:f3:
6a:61:15:44:a3:0f:22:61:b1:fb:44:49:1e:d8:6e:
80:86:0f:ca:0f:c4:a1:3b:9d:56:60:d5:9e:0a:48:
b8:f0:53:2c:ee:75:52:3d:6f:00:74:7c:c3:6e:54:
f7:8a:1a:36:75:1a:3f:ec:2f:56:5f:4c:d1:21:fb:
6b:89:6c:40:72:0c:3a:3c:82:9f:0d:6c:6a:1e:59:
6a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:63:21:99:75:C1:36:DD:AC:EE:5F:B4:9B:1D:18:46:F5:0C:59:2A
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/iGMhmXXBNt2s7l-0mx0YRvUMWSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.160.0/24
193.160.8.0/24
Signature Algorithm: sha256WithRSAEncryption
05:c7:20:df:5b:c1:c2:d9:3c:27:63:87:30:8a:fa:41:51:dd:
5b:9b:58:8b:98:da:ef:51:10:29:1c:1f:b1:48:85:75:8c:a7:
e1:65:24:08:29:20:aa:68:99:c3:e1:4e:5b:ab:8e:5d:b4:db:
17:b9:b0:f0:51:b4:ba:32:e4:16:0e:78:d3:4d:b5:48:59:89:
ba:6f:14:36:e9:6c:47:d9:9d:42:c0:52:e6:88:ca:61:f9:61:
e7:1d:a0:57:8d:db:23:b0:26:2f:7c:b5:bd:37:a2:07:c3:dd:
34:5e:89:ec:cb:f2:62:52:ce:76:04:b8:c5:93:53:fd:67:54:
59:0e:51:92:fc:8c:c5:e5:2f:63:62:63:56:c5:34:5f:98:9f:
c9:fd:87:3f:1b:c5:92:59:ab:af:9f:67:65:ce:15:a4:5e:82:
95:06:80:41:0e:9c:c9:c0:65:48:a3:12:d5:14:3e:fd:4e:51:
0f:bf:3d:87:1c:10:15:66:81:99:2c:d2:13:d0:5a:c5:02:0d:
4c:05:29:ac:ef:90:1f:c6:7e:1a:38:fb:d0:5c:81:55:4b:2f:
c3:06:8d:3a:70:2e:a9:93:00:9a:7b:39:c0:da:35:3f:84:30:
46:b7:4a:5b:b4:f2:91:df:5c:d8:68:8e:d0:ee:2c:f4:1e:d1:
c0:74:ba:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:52:42 2025 by rpki-client