Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/IBQePbUiBM5g94FVwIacCAEuPao.roa
File: IBQePbUiBM5g94FVwIacCAEuPao.roa (raw, json)
Hash identifier: KLM5pCcoF2f0RYayCLzM4NVj30QUjygkx0XcB71JnNA=
Subject key identifier: 20:14:1E:3D:B5:22:04:CE:60:F7:81:55:C0:86:9C:08:01:2E:3D:AA
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 019421B1B0D1C2AE6EA014747D51FD306283
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/IBQePbUiBM5g94FVwIacCAEuPao.roa
Signing time: Wed 01 Jan 2025 11:48:00 +0000
ROA not before: Wed 01 Jan 2025 11:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205361
IP address blocks: 176.57.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:b0:d1:c2:ae:6e:a0:14:74:7d:51:fd:30:62:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 1 11:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20141e3db52204ce60f78155c0869c08012e3daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:85:d3:ef:f4:32:65:9f:90:43:c9:c4:dc:9e:
47:b4:51:61:6a:e7:9d:c8:78:17:d0:4b:97:91:71:
39:57:0c:ab:10:d5:9d:23:cc:67:4e:3e:23:e4:29:
36:ba:9d:5d:57:9f:83:06:25:39:f8:b9:ac:ec:cd:
dc:69:83:ca:4e:bb:3a:e0:3e:24:be:9c:22:20:d4:
23:34:44:8b:51:97:97:d2:d0:db:02:86:41:3d:2b:
0b:bf:8e:9f:a3:2e:0a:b9:47:59:3b:84:88:10:c9:
07:12:28:48:d2:a7:52:95:ae:5f:a0:ac:76:0d:10:
c6:cb:db:15:1e:f5:e8:f5:81:0e:7b:94:8d:d2:e1:
01:8b:76:14:65:e8:a2:1c:c5:36:51:ee:ca:eb:04:
d9:bd:08:49:7e:51:ef:ed:2e:3d:a3:75:06:b5:fb:
09:21:8e:09:7f:c9:cd:82:78:64:58:0c:04:fc:f0:
76:45:7b:c1:1a:97:a1:e5:1f:35:e9:99:ff:3e:40:
ad:aa:f1:76:37:99:66:c3:2e:8b:27:89:68:45:7d:
23:e3:af:3b:d1:4f:54:07:7a:91:f7:16:93:91:db:
9b:17:30:c0:96:7e:98:67:49:cd:1b:b1:e2:46:67:
de:95:f9:d4:5e:eb:fe:db:1c:0a:42:e6:a2:b0:5b:
7e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:14:1E:3D:B5:22:04:CE:60:F7:81:55:C0:86:9C:08:01:2E:3D:AA
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/IBQePbUiBM5g94FVwIacCAEuPao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.57.50.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:99:3d:9c:19:b6:25:b1:c9:06:c2:ec:bc:ff:e8:0e:8d:b2:
cb:5a:c9:99:41:f1:19:88:3d:36:1c:d9:a2:ee:7e:b9:1c:2d:
2d:1f:ff:59:a8:53:b2:35:0e:a3:58:f6:0d:9f:39:64:82:25:
20:57:c5:77:ef:d1:5f:09:d4:95:98:f5:29:5e:0a:83:a0:ce:
b7:36:d8:ac:70:3f:f5:9f:c2:31:29:42:b1:45:69:d4:d7:e1:
03:ec:f8:c2:f2:5a:ed:09:41:5a:1b:39:07:e4:1d:48:4f:d9:
ce:e4:d8:e3:ac:0f:5c:37:93:9b:8c:6d:c4:20:a2:9b:d5:c7:
3e:7b:d0:bb:5f:f6:f2:a4:d9:a5:d0:7b:7c:e0:ae:5b:e6:20:
01:1a:05:1b:6a:e0:16:7c:97:25:b5:32:a3:09:fa:2d:3a:94:
ef:47:77:51:b6:5f:f6:7a:96:77:68:f7:0c:8e:9e:f5:7e:22:
ee:ac:5c:c2:f3:fb:67:eb:99:da:04:41:1a:11:0d:25:60:de:
ee:76:0b:39:32:9a:d0:2a:26:ae:84:0f:9f:3f:a4:94:ea:e7:
28:0b:83:b5:41:f7:a3:57:7d:2f:d0:de:53:52:b7:93:a3:5c:
d1:74:7d:1b:b4:89:f5:9e:73:20:49:1d:bd:c0:0d:09:cb:78:
00:82:2b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:40:27 2025 by rpki-client