Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/IAQeRjmmu9Z-veumwyPKfDrKvbI.roa
File: IAQeRjmmu9Z-veumwyPKfDrKvbI.roa (raw, json)
Hash identifier: Ww+1iOsdAQGbUwn6gW9paX3J1FGXxxEHtorVkrDGTZc=
Subject key identifier: 20:04:1E:46:39:A6:BB:D6:7E:BD:EB:A6:C3:23:CA:7C:3A:CA:BD:B2
Certificate issuer: /CN=9f2bc3c5564d434381cb78ba47ad58be4d3deaa8
Certificate serial: 01941F8C182A1E4840B8975008E42AB7EFB1
Authority key identifier: 9F:2B:C3:C5:56:4D:43:43:81:CB:78:BA:47:AD:58:BE:4D:3D:EA:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyvDxVZNQ0OBy3i6R61Yvk096qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/IAQeRjmmu9Z-veumwyPKfDrKvbI.roa
Signing time: Wed 01 Jan 2025 01:47:42 +0000
ROA not before: Wed 01 Jan 2025 01:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199231
IP address blocks: 185.4.228.0/22 maxlen: 22
2a02:c5c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyvDxVZNQ0OBy3i6R61Yvk096qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:18:2a:1e:48:40:b8:97:50:08:e4:2a:b7:ef:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f2bc3c5564d434381cb78ba47ad58be4d3deaa8
Validity
Not Before: Jan 1 01:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20041e4639a6bbd67ebdeba6c323ca7c3acabdb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:da:5c:39:a2:b7:d3:de:0a:74:24:b2:64:27:
8c:7b:97:7f:94:7b:d3:5d:e9:92:1d:8c:52:ff:af:
d4:f5:47:86:d7:dd:ba:6d:b0:92:aa:88:97:68:71:
67:41:7f:bb:9e:34:e7:53:f1:ea:40:be:4a:58:1c:
27:6b:0f:37:57:8c:49:58:1f:86:3c:4f:8d:9c:ea:
ed:7e:e2:66:57:5f:ff:ba:d6:2c:27:a7:83:6d:02:
4e:e3:83:5d:83:69:00:76:14:f5:7b:e5:05:b9:47:
d8:18:b8:c2:9e:b2:bc:34:bb:31:74:3f:14:ea:bd:
09:50:e1:c0:24:25:73:01:4f:7e:90:74:5b:f9:6e:
ae:41:e9:6b:52:1b:90:b2:51:5b:fd:c9:94:d1:05:
a9:e4:23:28:c4:18:41:66:7a:e7:30:94:51:fe:e7:
d5:c6:c5:a1:db:cb:52:fb:38:25:b8:2f:91:ce:3a:
dc:3b:1f:4c:e1:ba:c1:dc:fa:c0:7e:74:41:32:43:
eb:fe:1c:15:0a:07:7f:06:2a:cf:b1:fe:25:69:8e:
e7:d4:9f:ed:41:d7:24:51:7d:63:b4:52:4a:4f:f7:
0f:6d:14:60:ec:b5:53:8e:05:a3:64:27:95:92:e5:
eb:3c:3b:f3:0d:51:bd:c7:df:30:db:6a:5d:8b:9b:
f8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:04:1E:46:39:A6:BB:D6:7E:BD:EB:A6:C3:23:CA:7C:3A:CA:BD:B2
X509v3 Authority Key Identifier:
keyid:9F:2B:C3:C5:56:4D:43:43:81:CB:78:BA:47:AD:58:BE:4D:3D:EA:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyvDxVZNQ0OBy3i6R61Yvk096qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/IAQeRjmmu9Z-veumwyPKfDrKvbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.4.228.0/22
IPv6:
2a02:c5c0::/29
Signature Algorithm: sha256WithRSAEncryption
a2:f4:6b:b7:1f:84:6b:23:cc:42:42:b3:bf:7f:0a:e9:79:1b:
8d:74:eb:a4:47:46:c3:b2:e9:cb:5f:e8:31:c9:2e:5f:7b:c0:
e8:2d:b2:1c:bf:e0:88:b1:28:b1:96:bc:75:05:08:fb:6b:b7:
d7:28:9d:54:03:6c:f8:9d:26:d2:07:93:32:16:33:23:b5:f6:
43:20:ed:a4:8c:0c:49:4e:34:d7:b0:01:dd:a9:97:c9:25:15:
29:79:e7:a7:e1:c3:70:f9:12:63:ba:43:4f:5c:be:a7:d9:ac:
a0:86:41:17:f3:23:32:9c:94:03:49:2d:b8:37:12:79:0e:9c:
4f:4a:7d:e8:94:7d:d5:a0:a5:65:aa:e6:b5:02:dd:c6:5f:f9:
b0:d4:4e:63:ec:3b:ab:00:ba:90:ee:29:2d:66:51:c6:c0:57:
de:b4:97:a7:0e:0d:77:17:a3:15:ed:68:86:f1:7e:4d:f3:39:
3d:f6:a7:f1:de:da:3d:c0:56:71:7d:bb:c5:13:b9:21:08:68:
7b:64:30:42:e2:42:20:0c:f6:9e:17:39:59:33:5a:98:95:f9:
02:13:57:4e:32:ce:3e:96:f7:39:9a:9c:d0:57:5e:20:2a:60:
74:ba:a8:8f:f6:3b:51:5a:14:c9:8b:fd:4b:28:80:24:fa:bc:
d9:f2:ed:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:40 2025 by rpki-client