Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/IRU4oWMPxXGc_Wd31yXCp4kCUgw.roa
File: IRU4oWMPxXGc_Wd31yXCp4kCUgw.roa (raw, json)
Hash identifier: aPT6lFKYPt6Er4JFXYc/4FDbF02sLQQ9pC8iae9OC+Q=
Subject key identifier: 21:15:38:A1:63:0F:C5:71:9C:FD:67:77:D7:25:C2:A7:89:02:52:0C
Certificate issuer: /CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Certificate serial: 019568627DB7BA95F1A4ED352B35D4BC9C13
Authority key identifier: FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/IRU4oWMPxXGc_Wd31yXCp4kCUgw.roa
Signing time: Wed 05 Mar 2025 22:17:20 +0000
ROA not before: Wed 05 Mar 2025 22:17:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 195.210.116.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:68:62:7d:b7:ba:95:f1:a4:ed:35:2b:35:d4:bc:9c:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Validity
Not Before: Mar 5 22:17:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=211538a1630fc5719cfd6777d725c2a78902520c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:48:9a:6c:ed:36:4c:be:34:2f:db:04:7f:a2:
26:d5:95:10:f1:39:4d:e9:5d:66:af:e9:7c:94:84:
d6:56:fe:dc:7f:f1:cc:73:73:2f:cc:87:a8:1c:ff:
5e:bb:33:8a:c7:b2:b3:a7:d1:b2:cb:39:23:b4:eb:
2f:a3:36:e3:e2:d6:c1:89:24:89:aa:93:ae:7d:33:
5f:b4:23:17:cb:3d:a5:03:0c:d4:3f:b3:ed:d2:ab:
0b:35:52:e8:d1:b4:4f:2e:9c:2e:46:7f:ae:c9:6c:
9a:a9:f7:3b:95:83:23:19:a2:18:fd:4b:ff:e9:26:
91:4a:22:c5:b2:af:2d:07:7a:9e:74:16:05:38:89:
9f:46:ce:02:db:e9:d6:fd:80:ed:67:c2:71:78:ac:
d9:13:b7:0a:e5:51:ad:7e:91:c5:62:fb:a4:25:35:
04:d1:ac:a3:e0:fe:1a:fe:57:69:9b:52:10:f0:cb:
e8:22:94:4e:8a:2b:52:6e:80:f9:c0:23:0a:22:99:
04:13:76:a7:a6:19:48:eb:ad:c2:74:5d:b3:4d:70:
b0:f5:be:2f:e9:9d:f6:7c:15:6b:6e:63:39:0f:55:
fa:69:54:fa:5c:7f:8c:11:f2:8d:ef:02:2c:a5:46:
8c:24:84:48:bc:a6:81:3b:1e:d9:c8:cd:60:28:f4:
1f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:15:38:A1:63:0F:C5:71:9C:FD:67:77:D7:25:C2:A7:89:02:52:0C
X509v3 Authority Key Identifier:
keyid:FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/IRU4oWMPxXGc_Wd31yXCp4kCUgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.210.116.0/22
Signature Algorithm: sha256WithRSAEncryption
32:62:46:5e:56:5a:e2:8b:cb:d9:43:7b:15:c0:1b:e7:62:5b:
e4:69:e4:1b:90:fe:7f:20:25:19:5b:d3:e3:45:32:03:9c:aa:
02:de:71:d3:d2:54:18:3a:49:52:e9:39:3e:dc:d1:15:fc:a2:
9e:d3:9d:17:c8:ec:34:89:d9:c7:df:cb:68:fe:d2:fd:d1:84:
49:d4:55:ff:c3:8c:6b:c4:d3:cf:31:10:52:2e:0a:80:93:b9:
c9:5b:b7:ed:f5:40:46:4c:12:c7:95:34:63:3f:59:1e:85:59:
93:57:7a:70:12:2f:7e:27:8e:19:5a:84:9d:c9:71:1f:bc:30:
31:e7:9a:75:3d:cf:8d:a4:ab:c7:a1:15:f6:d4:ef:40:37:87:
7b:29:1a:19:b8:da:8e:bc:d4:61:0d:fe:3e:8d:c9:fd:55:9c:
a4:76:ca:90:f2:b2:a9:09:61:2b:96:66:3c:5b:0b:d2:40:84:
1f:57:a9:fd:98:e1:18:18:4a:79:26:1f:59:47:f5:3f:c3:e1:
f1:ff:5e:fd:17:a7:a0:22:91:e7:db:20:f2:d1:4a:8a:d7:f5:
a2:5c:d2:11:8c:7c:1e:94:3f:13:c3:ca:2f:66:d1:74:56:3c:
56:e0:51:fd:cb:75:2a:39:5e:2e:05:bc:ee:34:e8:f9:ea:8c:
52:7a:19:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:33:16 2025 by rpki-client