Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/Siq3LXChf-J1kOdJHhD69EXWg8I.roa
File: Siq3LXChf-J1kOdJHhD69EXWg8I.roa (raw, json)
Hash identifier: lqCjq1rRDcc2EL/o5bsRWvZA2ja39pIDJxSTPY+sOJk=
Subject key identifier: 4A:2A:B7:2D:70:A1:7F:E2:75:90:E7:49:1E:10:FA:F4:45:D6:83:C2
Certificate issuer: /CN=12c603666719e979bef0921451a2ec264ed01209
Certificate serial: 019423D75B39634D3DC7389F00E9338C90A7
Authority key identifier: 12:C6:03:66:67:19:E9:79:BE:F0:92:14:51:A2:EC:26:4E:D0:12:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/Siq3LXChf-J1kOdJHhD69EXWg8I.roa
Signing time: Wed 01 Jan 2025 21:48:23 +0000
ROA not before: Wed 01 Jan 2025 21:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16296
IP address blocks: 80.241.128.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 18:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:5b:39:63:4d:3d:c7:38:9f:00:e9:33:8c:90:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c603666719e979bef0921451a2ec264ed01209
Validity
Not Before: Jan 1 21:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a2ab72d70a17fe27590e7491e10faf445d683c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:74:58:5b:4e:23:62:a5:df:ac:45:3c:2a:9a:
ee:c4:b0:eb:85:5b:70:6a:07:35:c5:e7:a8:ad:9d:
13:1d:01:b7:b1:42:85:27:fa:d2:58:a6:f3:d9:27:
67:0c:45:82:bb:fa:f0:9c:a6:28:6a:d8:4f:83:9c:
03:5c:54:68:00:d8:82:bf:34:f3:4f:84:a3:af:07:
d7:16:e2:71:aa:19:a8:d4:2e:a4:1f:78:27:ce:47:
f9:0e:2a:9a:1a:ab:8f:c2:38:b9:0d:26:51:50:6f:
35:4c:ae:07:88:76:f9:0a:b9:78:57:1c:d7:60:d1:
6d:b8:93:fa:cc:79:a8:c3:6c:a3:07:40:f6:c2:c7:
f7:b5:78:38:5b:cd:c2:6f:b0:60:2b:6b:db:5f:9b:
2a:59:79:6b:17:0b:13:ed:d1:68:e3:9f:ec:d7:dc:
9d:04:29:40:3f:13:41:83:3b:0d:60:f4:67:eb:f8:
6d:80:76:0f:92:80:ca:be:bf:4e:c5:6b:56:be:bb:
41:1f:82:8f:46:0e:f8:59:8f:e8:18:a7:50:bf:75:
65:cb:60:1d:ce:2d:8c:47:1a:2d:42:87:fb:9e:e5:
20:4d:c9:82:84:a4:c8:50:bd:1f:14:6a:a8:80:16:
b1:41:46:07:35:6e:79:c2:83:06:82:33:de:fe:c4:
52:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:2A:B7:2D:70:A1:7F:E2:75:90:E7:49:1E:10:FA:F4:45:D6:83:C2
X509v3 Authority Key Identifier:
keyid:12:C6:03:66:67:19:E9:79:BE:F0:92:14:51:A2:EC:26:4E:D0:12:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/Siq3LXChf-J1kOdJHhD69EXWg8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.241.128.0/21
Signature Algorithm: sha256WithRSAEncryption
5b:c0:69:ff:07:06:a6:48:b4:e7:78:73:ac:61:e5:42:06:aa:
64:95:76:94:d3:44:6f:42:d6:a6:01:ac:e1:b2:ef:1e:33:61:
68:d6:6e:8a:d3:88:82:8f:e2:52:36:2c:87:1d:8b:2b:f1:1d:
b1:44:81:c0:35:3a:8f:a3:15:68:29:a9:65:ab:be:f7:5a:ab:
b1:cb:23:5b:b1:4a:73:30:11:86:62:cd:bd:f4:39:e3:05:21:
7b:e1:29:13:18:81:b2:da:fc:78:1c:85:1d:90:16:0d:ea:f0:
4b:21:f3:be:1e:1e:6a:1b:96:73:4e:85:6d:81:9e:88:ca:53:
5f:f6:de:b5:2c:71:f4:86:a5:24:c8:61:3b:00:c1:e3:db:aa:
12:23:73:f8:10:70:66:47:f1:0e:5f:fa:92:aa:bd:87:8d:70:
d0:0b:28:01:bd:d3:c5:36:ff:2c:c2:57:5d:93:fa:2d:20:54:
e1:2f:80:4c:77:43:d1:ef:27:54:97:15:8c:ee:0e:55:9d:56:
14:2a:50:24:25:55:98:a4:fb:c8:fc:53:9d:d7:3f:47:9b:ba:
c9:4c:4e:18:04:6c:06:98:aa:98:30:33:91:8d:2a:9e:cf:91:
4f:94:a9:e1:cf:87:9a:9b:eb:5d:28:8a:ba:1a:8e:d9:f2:b9:
be:5b:63:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:14:03 2025 by rpki-client