Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/ih4Xi9U8eHvhfA_BVqOMjQqdgFw.roa
File: ih4Xi9U8eHvhfA_BVqOMjQqdgFw.roa (raw, json)
Hash identifier: eEUTwk1w/9e8mftqE64A5S57ko7hGXNfTskpiKPmWM8=
Subject key identifier: 8A:1E:17:8B:D5:3C:78:7B:E1:7C:0F:C1:56:A3:8C:8D:0A:9D:80:5C
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 019425FCA6DCB7CD802368EC705C646C9613
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/ih4Xi9U8eHvhfA_BVqOMjQqdgFw.roa
Signing time: Thu 02 Jan 2025 07:48:22 +0000
ROA not before: Thu 02 Jan 2025 07:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24724
IP address blocks: 193.111.37.0/24 maxlen: 24
193.111.38.0/24 maxlen: 24
212.91.8.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:a6:dc:b7:cd:80:23:68:ec:70:5c:64:6c:96:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 2 07:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a1e178bd53c787be17c0fc156a38c8d0a9d805c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:42:c5:31:fd:92:29:31:bf:21:58:ff:e5:dc:
93:17:c8:15:50:9f:ed:00:5d:19:0b:e8:d9:d8:80:
c4:89:c2:a5:73:98:5e:ea:cd:21:d7:e8:ae:77:4c:
b4:3c:a0:63:db:db:6a:44:4d:9f:97:7b:08:3c:ce:
d9:e8:37:be:75:02:cb:23:80:2d:60:83:70:a5:81:
59:29:6d:61:c3:28:ed:0e:74:2a:79:61:c8:0e:e6:
46:ea:d0:88:41:8e:a1:61:5f:9f:6f:96:0d:b9:a3:
57:a3:3d:3c:d3:dc:94:38:55:34:9f:1d:45:25:6a:
3d:80:cf:bf:18:4c:85:be:8f:0c:5f:e8:fe:49:e5:
e3:7d:05:5e:7a:a4:af:b1:03:69:fc:51:88:69:d0:
8a:f0:bc:c2:a5:ef:3e:fa:0d:b9:1c:07:64:ca:57:
8e:75:ad:b7:ff:43:e1:17:c3:23:e1:ca:d8:ed:57:
4c:e0:de:7b:a5:81:ad:dd:d0:c7:42:30:18:8c:06:
d4:f4:41:ba:55:92:86:12:48:4e:b9:79:25:65:56:
a3:fe:0e:c1:a7:7c:9c:00:b4:50:63:7b:7a:79:c1:
df:64:c2:6e:e3:4d:b6:59:7e:6c:ae:1f:c1:5c:5a:
46:cb:9a:a8:87:a5:24:5a:f0:5f:3e:0d:a6:43:8e:
ca:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:1E:17:8B:D5:3C:78:7B:E1:7C:0F:C1:56:A3:8C:8D:0A:9D:80:5C
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/ih4Xi9U8eHvhfA_BVqOMjQqdgFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.37.0-193.111.38.255
212.91.8.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:f4:5d:59:5f:b4:be:17:8f:2a:ba:70:10:71:b5:fd:de:9d:
d6:cb:84:3e:a4:29:ec:30:4e:85:71:d4:b4:65:ba:2f:61:4d:
9c:30:20:8e:b5:1d:ab:95:13:7c:c3:a4:68:6e:0d:2b:e1:2c:
fb:1d:46:5a:3a:7a:55:59:33:29:de:84:f3:c7:55:66:46:4e:
3c:fa:01:22:48:3d:a2:fa:83:94:fe:b3:67:c9:96:6c:bf:b9:
20:00:6d:17:6d:a5:53:d6:c0:36:1b:0e:bf:df:e5:38:d1:5d:
77:d3:a6:94:b9:07:ef:8a:ee:3d:16:07:f7:0f:6e:68:7f:5d:
8d:33:13:37:68:89:03:d4:54:82:ba:bc:4d:73:1e:14:b4:ac:
0a:5c:cb:70:98:3e:7a:1a:a5:bd:c9:df:c4:5d:eb:ca:42:a9:
6d:71:cb:54:36:30:be:76:39:0c:5e:d2:ea:50:98:d5:2f:3e:
f8:ad:e0:0a:b7:b6:fe:9d:ca:da:ce:1b:10:0b:68:da:fb:48:
77:15:43:5f:dd:93:61:dd:a5:06:a5:c9:6e:81:34:7f:c3:a6:
97:ad:79:65:d5:78:d4:56:52:44:a0:d0:42:39:55:f7:43:cf:
34:05:07:65:8f:ac:43:b3:9c:cb:b1:b0:6e:14:0b:64:fb:8f:
50:60:4e:50
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:36 2025 by rpki-client