Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/IGzDnKyfU3XrsCi1kVIq3v9WjnM.roa
File: IGzDnKyfU3XrsCi1kVIq3v9WjnM.roa (raw, json)
Hash identifier: BCjdpahib4P29wEhEZ+5HfDxKnWj0l2OSsP7lZ3IOHg=
Subject key identifier: 20:6C:C3:9C:AC:9F:53:75:EB:B0:28:B5:91:52:2A:DE:FF:56:8E:73
Certificate issuer: /CN=23b1943087ce69623e76b2145b3479ac204ba1c9
Certificate serial: 019424B35E7192B417B04595045B7F9E94D9
Authority key identifier: 23:B1:94:30:87:CE:69:62:3E:76:B2:14:5B:34:79:AC:20:4B:A1:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/IGzDnKyfU3XrsCi1kVIq3v9WjnM.roa
Signing time: Thu 02 Jan 2025 01:48:42 +0000
ROA not before: Thu 02 Jan 2025 01:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 87.236.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft
rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 16:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:5e:71:92:b4:17:b0:45:95:04:5b:7f:9e:94:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23b1943087ce69623e76b2145b3479ac204ba1c9
Validity
Not Before: Jan 2 01:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=206cc39cac9f5375ebb028b591522adeff568e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:7a:44:44:db:a9:64:29:50:2a:50:1f:f5:ff:
d0:5d:d7:53:bb:d0:69:d7:16:06:84:b0:bd:8a:47:
4e:2f:69:89:64:9f:dd:45:45:62:1b:b5:9c:f7:c5:
f2:64:47:42:54:06:eb:bf:ad:2f:22:17:50:81:fd:
dd:82:b6:0f:1b:f4:b9:5a:1c:09:b9:f3:8e:2e:9b:
72:29:3f:3b:28:2e:28:08:25:1f:7d:f3:6f:09:c9:
85:b9:16:32:3e:33:34:3b:28:f4:ca:14:64:b1:bc:
51:32:59:ce:e0:1d:9a:0c:0c:f0:dc:bc:a8:25:5c:
c4:74:6d:58:75:8b:a3:85:28:5c:27:7a:48:5c:32:
a6:73:78:02:49:f0:ce:55:5e:70:5c:97:e9:ab:4d:
3a:86:d8:4b:ec:e5:5c:05:28:a7:a4:1c:2d:48:15:
95:c6:3c:19:10:20:66:04:23:cc:86:d3:95:e7:4d:
16:a7:e7:00:51:df:94:e5:9d:51:77:e7:62:a1:06:
ce:a6:9f:4d:b7:d3:fe:cf:8a:39:28:13:0e:9c:e5:
ee:19:f5:e9:d6:f1:c5:f7:55:d9:43:94:05:d1:fb:
0f:5a:eb:47:0b:35:c2:12:c4:e2:3e:82:24:0a:a2:
ab:5f:e5:da:99:17:c1:ea:5f:61:f0:d6:d5:18:bb:
4f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:6C:C3:9C:AC:9F:53:75:EB:B0:28:B5:91:52:2A:DE:FF:56:8E:73
X509v3 Authority Key Identifier:
keyid:23:B1:94:30:87:CE:69:62:3E:76:B2:14:5B:34:79:AC:20:4B:A1:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/IGzDnKyfU3XrsCi1kVIq3v9WjnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.67.0/24
Signature Algorithm: sha256WithRSAEncryption
45:1f:c4:2d:9d:89:8b:eb:97:90:75:b6:81:dc:7f:02:43:67:
e4:f2:e0:e0:fa:72:85:86:39:4d:6e:09:ae:dc:72:49:7e:a7:
54:1a:2e:e1:02:74:51:da:45:62:3d:e1:65:9d:b6:7c:09:41:
af:7b:67:8a:c3:e0:ad:11:93:2b:5e:58:cc:9a:9c:4d:cc:e9:
aa:cc:b5:cb:99:a0:5c:92:f9:dd:6d:0b:1e:20:f9:21:5a:26:
b2:e3:c1:0b:21:26:40:61:35:f5:83:41:21:af:21:27:b3:f5:
4e:7a:ca:22:b3:89:bf:ca:df:55:14:56:a5:75:d4:b5:b4:01:
94:d7:10:ff:54:d1:ed:7b:93:e3:79:fe:af:28:f1:fe:39:b8:
d4:44:6e:a6:06:55:ca:57:04:70:ed:6e:76:ce:00:31:18:6e:
88:e1:0e:6d:33:f4:02:32:3b:66:90:c0:a4:d0:bc:19:33:8c:
0f:d9:cd:c0:0e:76:0c:74:64:e7:e5:a1:38:0f:3b:92:6b:55:
42:a0:32:7a:19:b2:07:80:aa:b3:d3:15:0b:23:8e:3d:ce:9c:
c2:a7:c4:97:61:0d:66:1b:57:44:74:5d:b1:95:a1:e3:91:95:
e1:c4:6e:56:0f:b4:25:c1:23:53:90:1a:df:4c:d2:44:1e:d2:
d2:1e:3c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:51:40 2025 by rpki-client