Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/I6ww8fe_j9f3G8rmW-wt_mZZY2s.roa
File: I6ww8fe_j9f3G8rmW-wt_mZZY2s.roa (raw, json)
Hash identifier: Sd8zlV1mabR3WLhdUp899p9IeCSzwEZhzmqxHzFQi+0=
Subject key identifier: 23:AC:30:F1:F7:BF:8F:D7:F7:1B:CA:E6:5B:EC:2D:FE:66:59:63:6B
Certificate issuer: /CN=4705d3c6a5b0512682cdfdf363b19a9c567f1f6c
Certificate serial: 019427481AEFC93E5653F4904C8739ADEE95
Authority key identifier: 47:05:D3:C6:A5:B0:51:26:82:CD:FD:F3:63:B1:9A:9C:56:7F:1F:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RwXTxqWwUSaCzf3zY7GanFZ_H2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/I6ww8fe_j9f3G8rmW-wt_mZZY2s.roa
Signing time: Thu 02 Jan 2025 13:50:24 +0000
ROA not before: Thu 02 Jan 2025 13:50:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 55933
IP address blocks: 85.208.212.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/RwXTxqWwUSaCzf3zY7GanFZ_H2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:1a:ef:c9:3e:56:53:f4:90:4c:87:39:ad:ee:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4705d3c6a5b0512682cdfdf363b19a9c567f1f6c
Validity
Not Before: Jan 2 13:50:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23ac30f1f7bf8fd7f71bcae65bec2dfe6659636b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:11:b5:a8:70:55:19:81:3d:e5:19:aa:0d:f6:
78:db:9e:47:6a:53:a8:a5:75:d7:3f:51:77:a7:ea:
4a:8f:59:a5:0a:fe:ac:ae:14:19:ba:b0:81:98:f8:
e3:43:94:c6:eb:0b:e2:8e:3c:c5:7d:1a:04:eb:c5:
4a:c5:36:a6:c0:18:8e:9b:cc:3c:9c:5b:09:e5:f8:
84:81:98:2c:11:a3:a8:10:ad:d8:66:01:92:d2:1d:
f3:01:24:bf:68:01:a9:59:af:27:4f:83:84:62:7f:
bf:5c:d5:a4:77:d2:65:52:28:ee:88:3e:cc:09:4e:
ca:39:18:e6:55:19:24:ea:09:b6:46:7f:59:95:62:
63:2c:8f:b3:9f:87:5a:e6:ef:99:e2:dd:6f:56:86:
5d:cc:9a:89:92:d3:af:14:8d:bb:86:d9:de:88:60:
3f:e7:51:c4:d7:1b:00:c9:6a:d3:3c:0a:94:12:e4:
b6:4b:d7:8a:ef:75:8d:d9:47:68:c0:61:6d:28:be:
1e:6f:65:f8:3b:a4:03:d5:b1:0d:fe:17:0a:60:8b:
1f:b9:05:af:f5:59:6e:5b:53:ac:60:26:c9:27:23:
b1:2f:ff:80:89:35:45:11:6b:c5:da:aa:6c:c2:39:
7a:5d:22:b0:61:21:2c:75:88:f1:e8:ff:43:c2:ca:
be:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AC:30:F1:F7:BF:8F:D7:F7:1B:CA:E6:5B:EC:2D:FE:66:59:63:6B
X509v3 Authority Key Identifier:
keyid:47:05:D3:C6:A5:B0:51:26:82:CD:FD:F3:63:B1:9A:9C:56:7F:1F:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwXTxqWwUSaCzf3zY7GanFZ_H2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/I6ww8fe_j9f3G8rmW-wt_mZZY2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.212.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:48:24:87:f3:45:5f:b9:e9:4c:98:d7:5c:a5:d5:e0:3b:87:
71:15:93:8c:8f:8c:b0:18:1b:08:76:22:c7:f1:d4:5e:b0:b9:
2a:29:71:a8:8b:f5:9f:80:de:41:20:6f:ff:12:67:02:99:f6:
33:1d:bd:65:fa:fd:15:26:aa:84:61:1a:b6:7a:e2:16:d2:7b:
dd:ee:75:5a:b5:43:65:1d:70:d5:79:63:af:31:ef:ab:11:9c:
8d:3a:e4:be:f2:cc:1a:1f:44:e8:ea:38:6b:9a:fc:38:6d:51:
18:12:c6:08:2c:3a:23:ea:00:c4:99:04:1b:c2:06:97:fb:af:
cd:5c:bc:f8:9d:75:b6:53:d3:01:c7:14:56:ed:fd:9c:92:4c:
f1:f5:71:cd:8c:23:59:c4:ab:14:cf:ad:cc:02:12:0b:75:2e:
89:4b:7e:5a:b8:f6:11:d3:1e:d2:ec:d3:83:2b:2e:e8:84:51:
49:a2:96:a4:cf:e9:86:60:79:31:58:ba:01:90:4c:cb:d6:3d:
97:e8:2c:dd:1e:8f:66:76:d8:60:45:d4:d6:a1:d8:df:39:a4:
e0:42:2d:c6:79:1b:57:ab:ba:33:25:a0:f2:85:92:9f:8b:2d:
dc:cf:58:41:ee:16:d4:33:00:47:34:57:e8:fd:d5:fc:79:93:
f5:06:7c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:32:11 2025 by rpki-client