Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/IJD_U3KWZ58BdYUivTasUkoSb14.roa
File: IJD_U3KWZ58BdYUivTasUkoSb14.roa (raw, json)
Hash identifier: QMy/+qKyMyM01JHQHllqOzvjbF1AM/QefZV5csA0T9s=
Subject key identifier: 20:90:FF:53:72:96:67:9F:01:75:85:22:BD:36:AC:52:4A:12:6F:5E
Certificate issuer: /CN=defc2686c29abef18f40b30e7e9513247a66ef13
Certificate serial: 019421446EDFBE918BDA40856011C0DDF153
Authority key identifier: DE:FC:26:86:C2:9A:BE:F1:8F:40:B3:0E:7E:95:13:24:7A:66:EF:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3vwmhsKavvGPQLMOfpUTJHpm7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/IJD_U3KWZ58BdYUivTasUkoSb14.roa
Signing time: Wed 01 Jan 2025 09:48:40 +0000
ROA not before: Wed 01 Jan 2025 09:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58293
IP address blocks: 212.6.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3vwmhsKavvGPQLMOfpUTJHpm7xM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:6e:df:be:91:8b:da:40:85:60:11:c0:dd:f1:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=defc2686c29abef18f40b30e7e9513247a66ef13
Validity
Not Before: Jan 1 09:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2090ff537296679f01758522bd36ac524a126f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6e:b6:89:2a:45:61:4c:31:1c:31:34:90:99:
ef:db:0f:f2:62:77:68:b4:00:1a:29:bc:86:25:0c:
b4:c6:6a:57:50:cc:94:4e:b2:4b:53:45:7f:30:b4:
0b:79:e7:9f:74:77:16:8c:97:57:15:0e:e1:6d:06:
77:11:84:96:b8:9a:1e:a9:1d:e9:9a:14:3f:e7:6f:
d8:ba:b5:47:e1:84:ba:7f:fd:b3:80:f3:ab:57:20:
ea:e9:07:28:f0:dc:e9:42:1a:d6:8e:f6:25:33:01:
65:81:4d:a8:f6:69:f5:2b:dc:43:82:e5:f0:05:d1:
9e:45:ed:ec:73:bb:0a:cd:d5:bf:9f:96:9f:8c:21:
4a:5d:d3:b9:7a:c5:91:47:4c:44:15:7c:09:c0:4a:
ef:0f:8b:e7:46:0e:e2:41:f9:d8:ee:3e:14:4a:13:
ae:ec:a6:c1:01:17:c7:3c:cf:9f:b6:af:a9:3c:b8:
f5:fd:3a:e2:f2:dd:4d:77:aa:d0:2b:34:b5:bb:fc:
f4:37:05:c7:35:3b:92:39:a0:cc:b9:a8:79:50:87:
e8:6c:25:c1:e2:9e:e8:64:0b:e1:8d:fb:e5:d7:72:
f2:7b:c0:a5:07:17:0f:ca:9c:b2:7e:a2:6b:0b:f7:
43:a0:6a:b0:c7:d7:fa:d2:c8:05:40:5c:39:71:f5:
a8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:90:FF:53:72:96:67:9F:01:75:85:22:BD:36:AC:52:4A:12:6F:5E
X509v3 Authority Key Identifier:
keyid:DE:FC:26:86:C2:9A:BE:F1:8F:40:B3:0E:7E:95:13:24:7A:66:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vwmhsKavvGPQLMOfpUTJHpm7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/IJD_U3KWZ58BdYUivTasUkoSb14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.6.33.0/24
Signature Algorithm: sha256WithRSAEncryption
38:6d:e6:33:87:90:da:f2:5e:39:48:e0:32:3f:18:88:91:de:
1f:2f:23:ce:91:b0:e3:e7:39:71:75:af:ec:99:c4:d9:c1:45:
96:2f:5e:e6:2e:d7:48:c3:f0:a9:c8:e6:40:e2:0e:07:51:cc:
f6:50:e1:50:5f:6b:1d:d5:d9:f5:eb:29:3d:61:f4:ce:27:1c:
40:12:53:e5:b9:3c:82:b3:b3:93:26:1e:1d:89:e5:8d:27:ab:
55:7b:87:5f:a1:7a:0a:4c:dc:f5:68:28:15:72:56:a2:97:78:
a0:ce:63:bd:bc:8f:6a:53:08:67:e6:33:fa:ae:ed:24:fa:c3:
6f:00:6f:0c:5b:0c:5b:ee:46:e4:8e:f9:23:28:c0:47:e8:2e:
8c:4c:62:06:d1:0b:e5:a6:76:dc:08:44:00:b3:62:cc:c6:25:
33:13:bb:19:b3:76:8d:dd:ca:6b:3d:e4:8c:f9:46:32:98:45:
f4:f6:4f:25:04:f6:f8:5c:06:52:c8:8e:eb:49:68:12:59:a8:
17:9e:2f:1e:50:d8:8d:63:a5:fb:32:22:92:d5:38:4b:48:51:
c1:6f:23:11:32:18:7f:64:ed:78:cf:56:ae:a9:46:12:93:8a:
19:c5:b7:cf:af:3e:69:56:76:df:50:d3:ce:c1:e1:4d:60:de:
be:dc:e0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:44:47 2025 by rpki-client