Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/IbhrSRL4bnUd7cnSOKRsJzgkJxM.roa
File: IbhrSRL4bnUd7cnSOKRsJzgkJxM.roa (raw, json)
Hash identifier: b/cViJlJxKUPbwFvpzqTCCVlNXv5JOZkWmVOeYB/zSc=
Subject key identifier: 21:B8:6B:49:12:F8:6E:75:1D:ED:C9:D2:38:A4:6C:27:38:24:27:13
Certificate issuer: /CN=60a851d59356ca95d4ae78fa6936ba1b8a2b1c7a
Certificate serial: 019427B5C1CEAD963E27EB99067960E37A59
Authority key identifier: 60:A8:51:D5:93:56:CA:95:D4:AE:78:FA:69:36:BA:1B:8A:2B:1C:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/IbhrSRL4bnUd7cnSOKRsJzgkJxM.roa
Signing time: Thu 02 Jan 2025 15:50:10 +0000
ROA not before: Thu 02 Jan 2025 15:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59474
IP address blocks: 185.253.110.0/24 maxlen: 24
2a10:adc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 09:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:c1:ce:ad:96:3e:27:eb:99:06:79:60:e3:7a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60a851d59356ca95d4ae78fa6936ba1b8a2b1c7a
Validity
Not Before: Jan 2 15:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21b86b4912f86e751dedc9d238a46c2738242713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:9c:c2:a8:87:d5:b0:91:51:8c:b6:54:7d:54:
39:b5:5d:e1:9d:57:f5:a0:d0:7f:cc:d7:22:b0:11:
71:e9:85:eb:8f:9c:49:b0:8b:cf:46:67:8f:65:7f:
91:3c:fc:b1:9a:12:35:14:02:70:f5:58:0b:60:c7:
c1:32:5e:c8:bc:52:4f:18:27:9a:f1:44:11:ca:7c:
4b:ca:f3:85:27:a3:9d:ea:55:9b:59:ae:82:80:73:
d3:b4:c2:fe:ff:89:fa:55:f6:7c:51:47:78:26:90:
ec:50:95:b5:d7:44:4b:a7:09:1d:62:bd:67:91:cc:
0d:29:d0:95:4d:84:ae:5a:2c:6e:a7:3a:cc:1b:a4:
df:5d:63:bf:bd:30:f8:46:06:e2:2d:87:fb:94:18:
0d:70:83:03:3e:d1:01:44:f2:f9:b6:6c:05:15:00:
25:4a:2c:1e:23:62:d9:6f:4d:29:dc:da:df:6e:92:
54:64:02:5d:e7:1f:8e:59:e4:fa:a8:e4:c9:60:f8:
26:42:6c:f5:80:59:f2:21:09:b8:7a:b9:d1:7b:e2:
a2:73:47:58:ce:a4:dd:c9:1c:7f:4c:16:07:47:b1:
b1:a1:d3:3f:25:2e:45:5c:b2:bc:13:11:d7:64:c5:
4a:98:83:b9:57:95:6e:11:17:95:3a:be:f7:cf:44:
d1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B8:6B:49:12:F8:6E:75:1D:ED:C9:D2:38:A4:6C:27:38:24:27:13
X509v3 Authority Key Identifier:
keyid:60:A8:51:D5:93:56:CA:95:D4:AE:78:FA:69:36:BA:1B:8A:2B:1C:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/IbhrSRL4bnUd7cnSOKRsJzgkJxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.110.0/24
IPv6:
2a10:adc0::/29
Signature Algorithm: sha256WithRSAEncryption
2e:64:71:e1:aa:3e:30:db:49:4f:c7:36:9c:31:e6:61:fc:c9:
a8:ac:1b:19:51:a8:12:6b:22:ee:c5:29:e8:a2:af:c8:df:a2:
08:ef:92:ab:da:90:fd:13:7c:1b:42:bd:91:b2:97:f5:70:3c:
bd:8c:22:70:cc:e0:e2:7c:76:ba:51:d8:c4:25:ec:ca:1c:98:
7c:eb:ec:a0:9b:d0:f0:22:f2:0a:cd:0f:6c:bb:35:0f:0f:43:
56:3b:3d:cb:90:75:66:da:2a:40:fd:f1:7e:23:50:fd:a5:df:
3e:10:bd:77:a0:dc:55:62:96:b3:bf:e3:f8:50:86:f1:fa:d9:
5a:db:c6:e6:4e:fb:8c:dd:64:ee:32:e5:4f:31:24:66:be:0a:
8c:1b:0a:9a:04:f9:c4:44:9f:ed:d7:3f:2e:b1:ab:88:a5:cf:
e2:ce:ed:f7:d1:44:53:f4:86:75:b2:39:06:6c:9d:09:b7:35:
cd:83:9c:ed:76:ba:e9:f9:10:0d:55:36:e3:bd:e5:aa:de:00:
aa:ee:fc:cf:53:35:7f:5e:c6:68:11:46:6d:0a:f5:66:5d:82:
d5:22:8b:7f:6b:cb:5d:5e:45:cd:76:23:a4:dc:ba:9b:11:eb:
66:3c:10:f1:54:e1:cd:05:88:6d:4a:c3:59:cb:ba:56:61:11:
e8:e2:ff:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:29:01 2025 by rpki-client