Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/IaQkr4wJmPFX7MlGIC068T5SLas.roa
File: IaQkr4wJmPFX7MlGIC068T5SLas.roa (raw, json)
Hash identifier: LZsKSu9vsLm4Oqz5UZoGBpM3ebW0TaSiuaWmenP7SS0=
Subject key identifier: 21:A4:24:AF:8C:09:98:F1:57:EC:C9:46:20:2D:3A:F1:3E:52:2D:AB
Certificate issuer: /CN=cecd391c660c3e57c53b87c0b52ec0d2f2f42775
Certificate serial: 01942669E016E6C84AAAE280F4B5A6B5566D
Authority key identifier: CE:CD:39:1C:66:0C:3E:57:C5:3B:87:C0:B5:2E:C0:D2:F2:F4:27:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/IaQkr4wJmPFX7MlGIC068T5SLas.roa
Signing time: Thu 02 Jan 2025 09:47:40 +0000
ROA not before: Thu 02 Jan 2025 09:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31400
IP address blocks: 193.107.120.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:69:e0:16:e6:c8:4a:aa:e2:80:f4:b5:a6:b5:56:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cecd391c660c3e57c53b87c0b52ec0d2f2f42775
Validity
Not Before: Jan 2 09:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21a424af8c0998f157ecc946202d3af13e522dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:97:da:97:70:99:6a:b3:15:71:3c:c7:69:a3:
c1:18:72:12:c2:1d:37:8d:a6:7d:87:f6:0e:22:2f:
75:31:0d:3a:73:c2:92:c0:02:42:bb:83:bf:c8:95:
b2:34:d6:a6:1b:c2:dc:84:9d:95:7b:43:cd:32:a4:
95:8a:d2:03:87:4c:79:b9:0f:f2:96:e4:13:d4:a0:
eb:e0:cc:37:62:70:ba:9b:4e:5b:55:fa:42:90:f5:
aa:26:a8:d1:ad:e8:a7:6b:5a:7c:b0:bf:57:42:7a:
65:d1:c6:c3:66:9a:ba:3d:47:cf:7c:b3:d7:cf:8c:
57:f5:e7:7b:a3:21:c4:d0:45:0a:78:bb:0f:ce:96:
79:73:9b:d0:b6:3c:54:54:2c:22:50:1b:63:ea:22:
99:1d:2c:a0:39:e6:39:2d:1d:1a:7e:4d:bd:20:71:
5b:5e:c4:1e:15:86:43:9c:c4:41:7a:4f:99:fe:12:
ef:56:91:fc:78:41:b7:da:04:31:20:df:2b:35:45:
b8:ca:1d:77:ec:7c:3a:af:e1:3e:fe:dc:b9:fd:e3:
92:1a:9d:90:b8:3d:03:13:72:3e:2b:41:b4:da:0e:
72:53:09:a3:ec:2a:6f:00:7e:63:93:58:13:e5:5c:
27:59:b4:74:8c:91:75:94:27:7d:96:89:31:6b:e9:
a9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A4:24:AF:8C:09:98:F1:57:EC:C9:46:20:2D:3A:F1:3E:52:2D:AB
X509v3 Authority Key Identifier:
keyid:CE:CD:39:1C:66:0C:3E:57:C5:3B:87:C0:B5:2E:C0:D2:F2:F4:27:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/IaQkr4wJmPFX7MlGIC068T5SLas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.120.0/22
Signature Algorithm: sha256WithRSAEncryption
d1:fc:9e:7b:07:d6:09:04:8f:0a:5a:55:a8:41:97:d8:62:53:
2f:28:6f:a0:53:ad:c4:49:5c:8a:68:38:d0:f9:ce:59:88:ec:
23:61:dd:a8:0b:f4:8d:86:08:a8:18:1d:3f:20:0f:13:13:d9:
64:be:0d:b4:3a:21:c4:63:12:4a:d1:d0:d8:7c:17:96:1f:02:
db:52:e3:bc:75:8e:0d:cd:c0:a8:2b:e7:7a:5d:08:96:ce:ab:
11:a2:b2:0c:ca:44:83:58:b9:38:e3:bf:dd:82:0a:1f:c1:5c:
88:70:43:09:e2:ee:13:c2:0b:0a:d7:a0:7e:87:44:3d:df:68:
0c:73:cd:52:5f:bf:53:d0:87:ff:ba:eb:86:65:1a:39:55:48:
f0:31:f8:71:ea:93:da:d2:fc:73:c3:94:2e:ab:6f:6d:41:90:
13:4c:c3:26:e7:9a:c2:5b:b0:a8:74:74:10:e1:03:99:bf:f3:
9b:92:8a:22:be:df:ef:71:59:3e:3b:5c:c2:f3:f4:36:f8:ae:
a7:65:45:03:57:12:92:cf:81:02:47:07:d4:f9:e0:f7:7f:a7:
67:32:0e:09:a6:0f:29:91:31:6c:62:68:e5:a6:61:71:bc:f5:
e0:d7:2c:30:16:56:73:cb:29:a2:b6:b7:19:3b:aa:14:98:a2:
92:ce:e9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:30:55 2025 by rpki-client