Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iZEmaikRv0ZD0_HQLgC46rf6sms.roa
File: iZEmaikRv0ZD0_HQLgC46rf6sms.roa (raw, json)
Hash identifier: vM830EoPsxw4bzSVtn4idE0H8RE5i83214vqAt92998=
Subject key identifier: 89:91:26:6A:29:11:BF:46:43:D3:F1:D0:2E:00:B8:EA:B7:FA:B2:6B
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01948859FF9BAC7421108389992F881ACAB6
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iZEmaikRv0ZD0_HQLgC46rf6sms.roa
Signing time: Tue 21 Jan 2025 10:13:06 +0000
ROA not before: Tue 21 Jan 2025 10:13:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213734
IP address blocks: 139.28.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 14:35:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:88:59:ff:9b:ac:74:21:10:83:89:99:2f:88:1a:ca:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 21 10:13:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8991266a2911bf4643d3f1d02e00b8eab7fab26b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e4:c6:48:85:e3:e1:aa:48:ed:f3:ca:d1:d9:
88:c3:66:cc:f4:34:76:ef:76:c0:c6:fd:fe:ce:88:
50:b9:46:17:de:1f:0b:bd:a2:0e:e8:a1:9f:28:ca:
73:3c:f9:0a:cc:d2:0d:6c:c2:09:b8:2e:59:89:91:
0f:8d:5a:1d:aa:0f:a0:ec:76:9a:eb:d3:8b:2c:f0:
f2:a2:d4:2c:ff:c6:bc:5c:e1:c7:b4:b4:5c:0d:6a:
a9:08:74:88:0a:d4:b2:2c:03:a4:7f:f4:c4:94:0c:
bd:1c:8e:83:64:6c:82:bb:b5:4c:08:de:8a:08:d1:
59:ae:e9:10:80:e8:e1:d7:26:e8:45:3c:e0:42:de:
2f:7f:b7:48:2e:2a:06:68:7c:93:c1:c7:fe:24:86:
da:54:6e:5f:04:53:aa:dd:90:db:d3:0d:c4:9f:b6:
1c:9a:f7:39:64:78:ff:db:ea:00:a9:e2:ec:dc:38:
3e:67:e6:46:86:3f:3c:6f:dc:94:0c:33:78:f5:d8:
65:e3:ca:ea:f2:fc:a9:54:e9:92:c2:d9:93:0e:0f:
8c:22:d8:87:bd:f1:65:4f:bc:0a:ff:6f:c1:4c:75:
f2:b3:f7:d0:2a:b3:db:0c:8c:7a:e4:11:48:9a:53:
9d:54:32:8b:5e:3a:68:ff:5a:8b:f7:e2:eb:eb:66:
31:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:91:26:6A:29:11:BF:46:43:D3:F1:D0:2E:00:B8:EA:B7:FA:B2:6B
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iZEmaikRv0ZD0_HQLgC46rf6sms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.97.0/24
Signature Algorithm: sha256WithRSAEncryption
08:23:fd:b1:66:4d:41:4d:1b:b8:d8:fb:bd:a7:6d:63:64:0a:
f1:b9:9c:b7:c4:05:73:94:c6:c1:82:21:a5:d1:9a:1e:02:66:
a8:84:0e:88:d3:74:4c:16:8a:97:9c:7e:e1:93:bf:09:41:cd:
ef:c7:14:05:59:5f:68:4a:12:73:17:fc:8d:c5:3b:d5:ab:93:
74:3f:53:9f:e1:35:cf:80:3d:dc:1a:bb:8f:36:8c:cf:6b:21:
64:7f:eb:22:f9:ad:eb:70:32:8b:eb:2f:1e:32:44:13:24:53:
78:a4:7b:cd:66:7a:9d:32:22:77:79:a9:f8:51:81:8e:1f:1e:
81:9f:22:71:22:71:ce:f9:11:d5:d3:e0:9d:07:ba:6d:3c:e3:
b0:59:7c:2d:1f:7f:ca:44:3e:a3:7b:89:a3:da:5e:4f:94:e4:
1c:0d:c1:72:bf:7c:15:b9:1a:93:6e:f7:f1:85:44:ec:95:44:
f0:49:5e:1e:da:90:19:70:98:e8:54:22:82:ee:ae:86:43:f2:
9c:ef:42:33:06:e8:b3:5c:e0:9b:69:89:fa:64:a2:89:bf:db:
f0:97:14:2e:a4:21:bb:13:35:d3:75:46:aa:94:92:25:80:c0:
dc:e8:87:04:15:6c:30:6f:3d:e9:d0:56:c8:f3:4d:bc:bb:a4:
e1:16:70:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 20:14:29 2025 by rpki-client