Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/IGkuwFqcfaZTRTF1cVMJ_ZXeLAo.roa
File: IGkuwFqcfaZTRTF1cVMJ_ZXeLAo.roa (raw, json)
Hash identifier: rLF9FSwTCEgvwQPFVfmuXC6fhw3l2qvlIzdenUpyx74=
Subject key identifier: 20:69:2E:C0:5A:9C:7D:A6:53:45:31:75:71:53:09:FD:95:DE:2C:0A
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01942590092618E95B67337E01BD52430FCB
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/IGkuwFqcfaZTRTF1cVMJ_ZXeLAo.roa
Signing time: Thu 02 Jan 2025 05:49:43 +0000
ROA not before: Thu 02 Jan 2025 05:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210768
IP address blocks: 93.170.191.0/24 maxlen: 24
95.46.36.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:90:09:26:18:e9:5b:67:33:7e:01:bd:52:43:0f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20692ec05a9c7da653453175715309fd95de2c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e5:9d:dc:14:c9:64:99:5e:d9:3f:0d:11:fc:
8f:42:5b:38:b8:bb:ec:ce:6c:c3:a7:b1:cd:a8:61:
ae:fc:f1:59:2e:84:50:8e:53:6c:43:54:ca:b4:fe:
da:e3:5a:16:45:a1:79:81:32:d1:64:9f:86:74:74:
3d:52:7a:c4:a0:0e:83:69:bb:33:31:ca:4a:a5:ae:
08:a0:67:d8:90:86:2e:e7:fc:90:37:a6:9b:71:b2:
49:ce:4a:4c:40:3a:9f:82:07:8c:6c:76:b8:50:79:
8e:18:13:17:7a:63:64:da:1c:71:fc:47:70:8a:82:
a8:f1:65:ca:5b:44:c0:ec:ce:c3:6d:e3:26:f5:0c:
15:f3:a1:69:4b:df:c1:b7:be:27:5d:6b:70:2e:d2:
8b:ca:35:41:9c:48:d4:a4:58:dd:d4:f0:72:46:57:
47:27:87:f1:13:55:db:61:42:bb:67:f8:76:5a:6d:
db:ac:8a:e5:76:c1:b2:50:fe:24:ab:2c:a1:e6:61:
e9:f6:83:16:69:a3:94:dd:b4:12:25:36:d1:fa:c4:
81:f7:19:44:73:80:71:1d:11:85:72:19:b2:cd:38:
6c:95:07:9b:41:44:71:3d:56:13:f3:e0:97:3d:f1:
2a:f2:51:9f:5d:5f:09:60:44:61:24:89:7d:54:83:
01:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:69:2E:C0:5A:9C:7D:A6:53:45:31:75:71:53:09:FD:95:DE:2C:0A
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/IGkuwFqcfaZTRTF1cVMJ_ZXeLAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.191.0/24
95.46.36.0/23
Signature Algorithm: sha256WithRSAEncryption
09:ee:e2:b2:51:cd:e3:e7:9d:1f:94:a1:b9:f6:bb:30:05:4c:
b3:8c:b0:95:18:63:54:11:27:2b:90:0d:3f:6f:ac:4e:9e:eb:
8a:45:9e:b8:b5:1b:51:79:94:a8:34:52:18:c9:6f:ee:0a:58:
cc:e5:9b:ca:37:0e:d3:8e:0f:39:dc:84:78:1a:33:e8:c5:a1:
ec:9e:16:6d:7d:57:40:93:06:e3:ac:42:91:9b:51:3e:39:de:
2b:18:a3:ae:b0:61:d7:1a:69:55:d6:10:34:97:44:bd:84:8c:
2f:48:d8:ac:19:75:56:7e:a7:90:98:ec:27:33:36:2b:a3:99:
da:26:fb:25:54:1d:f5:ab:9f:68:66:ea:c7:ca:49:5d:af:58:
e0:f2:a0:47:ea:2c:5a:02:ae:ea:b9:0f:79:68:4a:d2:7e:05:
52:97:f7:9e:47:a8:22:db:8b:ba:91:34:b0:74:8d:af:55:91:
2e:e8:01:f5:26:93:c6:5e:40:9e:a3:05:ca:19:98:01:b7:72:
54:be:a9:33:97:b1:31:18:f7:7b:ce:a2:24:52:0d:70:5a:46:
d2:fc:99:09:22:82:58:df:73:53:50:13:9b:1c:2f:50:6e:89:
61:2b:0c:30:19:70:4f:ad:ab:96:b3:42:2a:e5:5c:d1:33:50:
26:92:43:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:46:14 2025 by rpki-client