Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/igifqygwTOksZwnom44nnHV_xfk.roa
File: igifqygwTOksZwnom44nnHV_xfk.roa (raw, json)
Hash identifier: lfflJyAIGtSMljbIYSP5Pooz3OcxcZIfnW4cnFqeqpk=
Subject key identifier: 8A:08:9F:AB:28:30:4C:E9:2C:67:09:E8:9B:8E:27:9C:75:7F:C5:F9
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019424B37CE016A52D61B66441B803A236CF
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/igifqygwTOksZwnom44nnHV_xfk.roa
Signing time: Thu 02 Jan 2025 01:48:50 +0000
ROA not before: Thu 02 Jan 2025 01:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40940
IP address blocks: 213.176.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:7c:e0:16:a5:2d:61:b6:64:41:b8:03:a2:36:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 2 01:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a089fab28304ce92c6709e89b8e279c757fc5f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b3:63:0a:b1:51:33:6d:19:7c:87:89:00:0a:
39:7c:70:51:0b:5e:09:00:cd:bd:58:e7:92:7c:20:
34:ed:2a:07:43:f8:eb:dd:ec:1f:42:1f:da:7e:63:
7b:c1:01:68:de:0f:03:0f:5e:a6:61:76:b7:c8:17:
9f:e5:34:e2:d4:22:34:61:9a:43:13:ae:ac:03:af:
22:fa:5e:bc:da:02:e2:b0:56:a4:19:26:3f:79:ec:
96:71:09:db:e7:9e:ab:41:46:bc:bf:5e:69:2c:d6:
7e:67:b2:63:d0:c0:30:9a:75:e9:e4:f4:e0:c4:21:
cb:68:2c:fc:36:b8:4c:b4:f4:92:24:23:48:fa:68:
de:89:c0:4e:ef:f7:48:3c:d7:63:40:51:06:75:65:
e1:66:bc:f3:49:13:16:17:98:86:e9:4c:73:44:ad:
f3:9e:40:d9:37:8a:bf:51:ac:7b:86:e3:96:19:ba:
df:3c:e5:dd:89:84:80:1c:61:9a:16:58:93:3d:ed:
c4:31:66:68:66:dd:19:68:00:0a:a4:b0:76:d3:28:
71:fb:05:10:1c:a2:91:f0:2d:95:14:0a:e5:f9:a9:
2e:95:03:a5:30:2f:8c:6a:b1:cf:a0:93:f7:91:44:
aa:44:d4:0a:a7:a9:31:6f:a9:f0:8f:36:c4:8e:da:
5d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:08:9F:AB:28:30:4C:E9:2C:67:09:E8:9B:8E:27:9C:75:7F:C5:F9
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/igifqygwTOksZwnom44nnHV_xfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.176.73.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:c8:f5:2d:e0:37:94:f6:4d:9c:07:0d:69:34:9f:00:32:7b:
0d:e4:23:62:a5:63:a0:c3:3c:a6:0d:f4:8e:05:cb:57:0c:f5:
68:38:cd:86:c7:3a:08:2a:05:81:22:5b:2f:98:84:36:6a:c0:
60:a5:77:29:96:4f:32:83:ba:05:48:a9:09:0c:09:d1:b3:8d:
02:20:ba:34:56:15:2a:22:e2:2f:be:99:e7:4b:e8:29:bf:66:
86:4d:3e:5d:51:4d:47:bb:f5:4b:c7:45:a3:52:47:d3:91:92:
1d:7d:cf:5f:61:2e:eb:74:2b:ed:92:41:5d:f4:41:18:8a:74:
37:0c:87:34:86:9e:7c:06:f8:20:51:13:78:fd:f5:9f:a3:4d:
2b:8a:ae:58:92:09:25:9c:dd:18:4b:7c:e2:d0:9d:05:31:37:
0f:de:5d:df:56:aa:ac:46:6e:25:57:9f:20:a1:53:a1:76:ae:
8c:11:b2:69:ec:86:18:39:06:40:a8:c6:c9:92:75:34:57:fd:
6b:63:60:c9:4c:f2:11:d3:81:56:38:08:a0:e4:4d:92:e2:7b:
e9:92:fa:c1:4e:e5:3e:42:1d:d1:c3:97:22:7d:3d:4b:8d:62:
12:77:5c:9f:5b:9b:72:1f:0e:ee:94:3e:45:1d:f8:3e:49:89:
d6:b3:7e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:59:15 2025 by rpki-client