Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/IYTFbsH2zrYimow5PfBhyISAXgE.roa
File: IYTFbsH2zrYimow5PfBhyISAXgE.roa (raw, json)
Hash identifier: 3Ol+0d4dyS1miwyxB+aBgXHbVV5ki9Vv7rh4KQYX/5Y=
Subject key identifier: 21:84:C5:6E:C1:F6:CE:B6:22:9A:8C:39:3D:F0:61:C8:84:80:5E:01
Certificate issuer: /CN=2890da765a999f719875c51eecf4c7d6148a1bd9
Certificate serial: 019421442A79E52C3701729597D2D4437278
Authority key identifier: 28:90:DA:76:5A:99:9F:71:98:75:C5:1E:EC:F4:C7:D6:14:8A:1B:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/IYTFbsH2zrYimow5PfBhyISAXgE.roa
Signing time: Wed 01 Jan 2025 09:48:22 +0000
ROA not before: Wed 01 Jan 2025 09:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205293
IP address blocks: 45.143.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:2a:79:e5:2c:37:01:72:95:97:d2:d4:43:72:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2890da765a999f719875c51eecf4c7d6148a1bd9
Validity
Not Before: Jan 1 09:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2184c56ec1f6ceb6229a8c393df061c884805e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0b:99:c7:fd:5f:17:6c:30:1b:ac:67:83:c3:
3e:43:14:58:dd:fa:21:8f:69:74:8a:9c:ae:38:72:
2d:70:2a:a1:fa:3a:2e:3b:a6:96:88:d0:af:b0:e7:
1d:d0:db:fc:a2:81:66:a4:24:c2:87:b0:dc:2b:a6:
fa:43:4e:18:21:2c:84:53:3a:fc:d5:14:64:d1:9f:
93:b1:ca:a5:9f:b7:52:7c:4b:bf:5e:02:14:9e:1f:
64:14:f4:15:84:70:80:38:6d:1d:66:b4:80:3d:d0:
bc:c5:1a:39:ac:e2:a6:3c:57:24:58:48:1f:83:6d:
57:2e:ff:fe:27:f7:03:7f:a5:09:47:da:01:76:f7:
08:c1:8e:21:1c:f1:1e:c2:87:81:03:39:b1:e3:f7:
3f:23:64:af:6f:d6:90:04:3c:9c:9c:1c:27:58:9b:
54:67:67:f5:61:63:e9:d6:40:21:17:32:70:cf:fb:
84:51:63:ed:55:9f:61:71:1d:9f:97:00:1d:51:88:
25:db:52:be:c3:fa:11:a4:87:00:e2:75:c8:32:48:
f3:69:01:65:c6:a2:58:4f:d5:90:89:9f:e1:4a:f6:
ca:1a:3b:75:a4:78:0e:32:40:21:66:b4:63:4e:37:
77:13:df:c2:1a:ab:95:7e:2f:fd:2d:c7:c4:21:48:
77:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:84:C5:6E:C1:F6:CE:B6:22:9A:8C:39:3D:F0:61:C8:84:80:5E:01
X509v3 Authority Key Identifier:
keyid:28:90:DA:76:5A:99:9F:71:98:75:C5:1E:EC:F4:C7:D6:14:8A:1B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/IYTFbsH2zrYimow5PfBhyISAXgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.206.0/24
Signature Algorithm: sha256WithRSAEncryption
19:82:6f:f6:6a:87:45:41:02:6c:c8:41:3a:42:fe:dc:28:b0:
b9:de:cd:97:69:1c:ca:83:31:a8:60:6b:65:9d:6b:cf:fc:37:
cc:51:5d:d7:34:c4:e8:39:d0:a3:f0:57:86:7f:2d:04:40:a7:
50:27:47:c1:60:3d:f1:b2:40:a1:6d:94:9c:f7:c0:19:ba:82:
a1:d5:af:47:80:62:03:d6:2b:01:12:71:5b:53:ac:ed:07:77:
2e:8c:d9:89:63:09:38:df:5e:2b:02:a9:78:f6:14:fc:cb:a1:
00:9c:5e:0a:33:e0:d6:12:21:b3:5f:9a:31:aa:38:f3:8e:0b:
31:9c:f3:a9:3d:2f:51:9a:05:29:d8:d8:58:c0:73:c2:08:5d:
ea:4e:d5:0f:07:ab:9d:aa:4f:f4:1b:5a:6e:c2:ae:f5:eb:6f:
7a:73:9b:db:f8:58:1c:e8:4f:f0:28:7c:55:67:0f:20:96:db:
16:bf:a9:ca:27:e4:b7:7b:32:ef:50:df:12:d7:b7:2a:b8:e2:
1d:16:88:65:bf:89:2a:c8:6c:99:5a:92:fb:3a:ca:7a:35:0d:
00:a9:b9:51:e9:f7:51:1c:a2:cf:ec:e8:03:36:55:c4:9d:f4:
48:72:48:6f:84:59:93:77:11:6d:4c:0e:5e:fd:19:5f:81:e4:
c9:67:12:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:15:49 2025 by rpki-client