Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/IyvCi4bscVz-cDd1e8YDDEn65h8.roa
File: IyvCi4bscVz-cDd1e8YDDEn65h8.roa (raw, json)
Hash identifier: +ReDdginBUQu4++Dvo5zNIlV1w8CIv08Gg4t44mG608=
Subject key identifier: 23:2B:C2:8B:86:EC:71:5C:FE:70:37:75:7B:C6:03:0C:49:FA:E6:1F
Certificate issuer: /CN=0cd49ca1901df020930ce971f65cc180a3fcbe81
Certificate serial: 0194266C327A9ECAD282987F6F4B89C840BB
Authority key identifier: 0C:D4:9C:A1:90:1D:F0:20:93:0C:E9:71:F6:5C:C1:80:A3:FC:BE:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNScoZAd8CCTDOlx9lzBgKP8voE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/IyvCi4bscVz-cDd1e8YDDEn65h8.roa
Signing time: Thu 02 Jan 2025 09:50:12 +0000
ROA not before: Thu 02 Jan 2025 09:50:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15405
IP address blocks: 91.198.244.0/24 maxlen: 24
185.22.156.0/22 maxlen: 22
185.159.36.0/22 maxlen: 22
185.202.68.0/22 maxlen: 22
195.162.84.0/22 maxlen: 22
2a03:4c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNScoZAd8CCTDOlx9lzBgKP8voE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:32:7a:9e:ca:d2:82:98:7f:6f:4b:89:c8:40:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd49ca1901df020930ce971f65cc180a3fcbe81
Validity
Not Before: Jan 2 09:50:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=232bc28b86ec715cfe7037757bc6030c49fae61f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ca:9c:54:a3:95:38:cd:8e:34:a9:8d:0f:05:
e0:a5:b2:f0:34:85:ec:b0:5a:fb:a9:00:c2:02:aa:
8d:bb:3e:5c:cb:75:bf:ed:27:b5:a1:84:75:c1:1b:
1a:ab:7b:43:40:ee:c6:dc:67:44:55:af:9b:45:7c:
0b:09:40:e3:76:b2:84:ac:f1:63:8e:12:b3:e9:ad:
13:88:a4:25:2d:61:be:c4:cf:71:4a:f0:42:32:7c:
b8:cd:d7:b3:6f:2e:b1:b9:63:ff:b4:12:a5:2b:70:
b0:f9:db:d2:23:1c:9f:8a:62:92:72:ed:5e:56:9d:
7e:9c:ff:05:43:ee:fc:81:33:29:e4:6c:f9:c8:86:
e2:ed:5e:7b:16:16:1a:73:67:a0:56:8e:5c:51:04:
76:3e:87:3f:30:c4:4a:2b:19:9a:b2:ab:02:04:f1:
f4:05:6a:41:dc:3a:d4:35:ce:39:8f:ea:32:68:51:
dd:56:03:bf:55:42:d5:1a:45:47:39:05:84:10:f9:
bf:55:15:03:3f:09:b0:68:cc:57:d4:a6:8f:1b:41:
63:a0:98:71:9e:bb:80:ff:ba:31:a8:cb:73:9d:e8:
39:72:a4:c0:aa:ca:e0:5f:6d:62:da:a5:86:d7:1b:
1b:ff:1f:9c:31:99:3e:0a:f9:d8:11:98:2a:a2:d8:
8b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:2B:C2:8B:86:EC:71:5C:FE:70:37:75:7B:C6:03:0C:49:FA:E6:1F
X509v3 Authority Key Identifier:
keyid:0C:D4:9C:A1:90:1D:F0:20:93:0C:E9:71:F6:5C:C1:80:A3:FC:BE:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNScoZAd8CCTDOlx9lzBgKP8voE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/IyvCi4bscVz-cDd1e8YDDEn65h8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.244.0/24
185.22.156.0/22
185.159.36.0/22
185.202.68.0/22
195.162.84.0/22
IPv6:
2a03:4c0::/32
Signature Algorithm: sha256WithRSAEncryption
bf:2e:94:fe:83:ad:c5:de:72:db:d8:13:79:2d:ba:12:4d:b0:
c9:1d:a0:f2:3c:9f:11:a4:05:1d:7e:44:c9:9d:9d:7b:b2:c6:
ca:ac:60:6e:38:8f:c4:65:9e:9f:5d:a8:b7:15:13:04:58:be:
6c:8a:e6:05:e7:69:6a:b0:9f:f3:9c:16:05:a4:1d:f7:6f:14:
d3:4c:2c:c7:f4:ad:66:f7:ef:ca:b3:26:e5:ae:49:4d:99:64:
c2:34:47:7e:42:2b:ad:46:cf:97:ae:a3:0b:28:54:db:6c:8c:
c5:33:f2:55:13:bb:60:bf:58:2f:3f:40:d2:b5:20:82:00:6d:
ce:cc:67:7d:fb:e8:98:86:a2:84:84:f5:4e:6e:0a:0c:c0:55:
a9:0c:36:03:fc:2f:31:b4:15:6d:c1:84:ae:65:56:6a:ef:bc:
0e:24:08:1f:71:b3:d8:60:44:81:d8:a2:dd:1d:63:8e:23:ad:
27:39:5c:91:5f:b0:24:db:83:b1:8c:17:e1:ea:84:a4:28:94:
a9:c3:18:29:d6:3d:7a:7c:39:c8:8b:ba:33:a2:09:2b:65:77:
f2:03:c1:f2:ff:b9:cc:95:4f:e1:18:da:3f:c4:6a:a0:b5:c8:
99:41:27:dd:c0:5c:20:10:6d:06:76:0c:a4:74:ce:cb:60:db:
4d:dd:3e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:24:35 2025 by rpki-client