Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/iGpfBbTLVL4RbtqfFkeH2DBrS5I.roa
File: iGpfBbTLVL4RbtqfFkeH2DBrS5I.roa (raw, json)
Hash identifier: DzYF6jb/f2Y0zsTtOWIE735rB2ypyM5HGglTzwx4No8=
Subject key identifier: 88:6A:5F:05:B4:CB:54:BE:11:6E:DA:9F:16:47:87:D8:30:6B:4B:92
Certificate issuer: /CN=1627573c68929ab2a4590e92a51abc40ea9e5817
Certificate serial: 019427B3EA70541E14AD303AE899260B5C44
Authority key identifier: 16:27:57:3C:68:92:9A:B2:A4:59:0E:92:A5:1A:BC:40:EA:9E:58:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FidXPGiSmrKkWQ6SpRq8QOqeWBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/iGpfBbTLVL4RbtqfFkeH2DBrS5I.roa
Signing time: Thu 02 Jan 2025 15:48:09 +0000
ROA not before: Thu 02 Jan 2025 15:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44808
IP address blocks: 185.175.96.0/22 maxlen: 22
2a0b:e300::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FidXPGiSmrKkWQ6SpRq8QOqeWBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 03:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:ea:70:54:1e:14:ad:30:3a:e8:99:26:0b:5c:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1627573c68929ab2a4590e92a51abc40ea9e5817
Validity
Not Before: Jan 2 15:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=886a5f05b4cb54be116eda9f164787d8306b4b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a7:02:68:05:7e:cc:81:ee:05:2d:2f:6a:1e:
2f:f0:5f:05:6e:1f:d2:81:5f:41:2c:fe:03:fd:e3:
d8:26:6a:89:bc:3d:a3:bd:dc:af:74:2e:c1:3d:ea:
50:1c:d0:f8:e1:7d:c6:d1:7e:1a:ee:8b:09:eb:d5:
05:4d:fa:e6:8b:c2:1c:8c:7d:e0:85:5b:62:17:c4:
d6:04:fa:c5:0f:86:29:f7:ee:4b:97:56:33:cd:03:
27:69:55:44:77:39:7a:97:4b:56:e4:0d:73:f0:a1:
04:7e:90:7f:65:36:e6:47:58:6d:63:3a:b6:10:89:
18:00:2a:6c:7f:b9:99:57:fb:ef:78:01:20:7d:a8:
84:95:e7:4c:6f:6f:d1:f6:a2:81:db:49:fd:23:f1:
fe:81:e7:ab:73:54:68:a8:42:11:b3:e8:7d:e6:fd:
67:26:bd:a6:71:5a:05:d5:1a:61:ba:cc:d5:87:a0:
3d:d0:f0:a1:10:37:f8:b8:04:1f:3d:45:8b:c8:c1:
26:62:49:cd:f5:84:21:18:b3:19:ad:95:2b:3a:1a:
83:9c:c2:c0:18:8b:8d:55:b4:a0:4b:e4:fd:fe:64:
32:c2:b7:08:f5:43:06:7c:ad:3c:a9:a0:61:57:02:
55:af:68:fc:18:35:10:c6:23:13:db:4d:59:cd:08:
bc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:6A:5F:05:B4:CB:54:BE:11:6E:DA:9F:16:47:87:D8:30:6B:4B:92
X509v3 Authority Key Identifier:
keyid:16:27:57:3C:68:92:9A:B2:A4:59:0E:92:A5:1A:BC:40:EA:9E:58:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FidXPGiSmrKkWQ6SpRq8QOqeWBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/iGpfBbTLVL4RbtqfFkeH2DBrS5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.175.96.0/22
IPv6:
2a0b:e300::/32
Signature Algorithm: sha256WithRSAEncryption
9d:16:6d:83:7c:d4:32:dd:e3:f1:50:67:36:fb:95:07:24:f9:
26:59:c9:e3:5d:c7:03:2b:09:e9:1d:6c:a9:ae:c1:eb:84:09:
57:dc:b0:3f:70:d1:1d:17:35:a3:41:7d:87:2d:1b:e1:e2:fb:
7a:14:f1:0f:d9:fb:15:ac:85:59:92:33:22:2b:7c:57:e7:db:
f8:f1:0c:e5:19:21:7e:03:46:c8:9d:8b:86:de:ac:3c:ce:3c:
a2:24:b8:a4:1f:03:d5:87:3d:67:5a:74:42:1a:6c:49:be:b8:
28:6b:55:3d:60:1e:3e:c1:e2:07:32:79:af:c0:ed:70:c8:d5:
68:c5:b1:07:28:66:6d:c8:c6:82:99:a0:a9:4f:fd:95:4c:df:
0e:74:12:47:ce:f8:69:8c:0e:bf:48:5d:89:07:46:aa:06:dc:
02:6e:84:64:68:19:b6:ec:9a:03:6f:91:c4:44:1a:63:c1:7c:
99:3e:c5:0a:d5:b7:ac:97:63:2d:fe:df:62:64:60:a1:3f:67:
fc:93:d2:9c:b5:81:db:40:71:aa:54:34:f3:60:63:3f:04:bf:
58:ca:4a:d4:ac:a3:29:eb:79:de:29:ab:46:ef:e3:67:6a:b5:
7b:e3:be:c7:4f:03:0f:8d:b0:0c:55:e9:13:66:09:38:b1:55:
42:50:ee:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:35:47 2025 by rpki-client