Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/IJxwgWeGeUFHv_7JmoeJXVPHKlQ.roa
File: IJxwgWeGeUFHv_7JmoeJXVPHKlQ.roa (raw, json)
Hash identifier: x1bR2iw79o2n2CiabiJSxb3FYLKksGeSqDdvgl7oOyQ=
Subject key identifier: 20:9C:70:81:67:86:79:41:47:BF:FE:C9:9A:87:89:5D:53:C7:2A:54
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 019421B1A6E58F903C4FC4C03CBE294C45CD
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/IJxwgWeGeUFHv_7JmoeJXVPHKlQ.roa
Signing time: Wed 01 Jan 2025 11:47:58 +0000
ROA not before: Wed 01 Jan 2025 11:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19437
IP address blocks: 176.57.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:a6:e5:8f:90:3c:4f:c4:c0:3c:be:29:4c:45:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 1 11:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=209c70816786794147bffec99a87895d53c72a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:16:03:37:06:f3:fb:0c:f2:a5:5e:f0:9e:8a:
bd:84:7e:7d:56:e0:7f:eb:28:ce:03:24:3f:5b:c0:
14:41:cc:c4:7c:3f:38:a5:0a:e3:7a:10:20:05:0e:
56:6f:85:57:7c:87:60:14:c8:fb:7d:a0:84:3e:a6:
78:7a:bc:cc:78:76:cf:11:f1:54:1b:b6:ea:54:33:
4a:ee:28:e8:91:f8:a0:05:dc:91:98:75:a9:24:18:
57:69:ab:ed:c8:41:89:a2:08:41:f0:a5:8c:3b:dc:
c5:ee:93:d8:b1:74:a4:b2:2b:67:ac:17:fa:2a:95:
17:ba:25:b3:02:77:67:5e:6b:56:f7:75:a8:49:e7:
fe:ca:18:cd:3a:f9:10:bb:68:61:4a:54:b6:12:3a:
f3:85:3b:5d:c2:fd:5a:77:7b:f1:79:05:a1:b7:ac:
5d:17:65:8b:34:de:37:44:1d:ec:a1:51:6e:51:fc:
60:56:2d:3e:5c:43:a9:aa:b9:80:9d:01:55:a1:87:
ec:40:10:17:cd:c2:5a:11:97:c6:6a:ca:08:33:e6:
2a:ed:27:f1:6e:87:84:fe:3a:58:75:7b:da:4d:d3:
41:9e:d7:a3:ba:8e:ac:8f:30:ce:6b:4d:e7:5a:f5:
00:5f:0d:82:df:44:f9:5d:86:63:e2:12:ce:52:13:
44:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9C:70:81:67:86:79:41:47:BF:FE:C9:9A:87:89:5D:53:C7:2A:54
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/IJxwgWeGeUFHv_7JmoeJXVPHKlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.57.61.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:0e:dc:ad:2f:22:f9:b7:47:bf:eb:01:48:98:7c:a4:39:ca:
75:ff:b2:1b:4a:a6:92:bd:b7:a2:a5:19:ba:af:27:0b:8a:c3:
f1:ee:53:62:93:ce:53:33:7f:99:00:ef:e2:b5:8a:44:d8:ec:
4b:63:3e:b0:5e:75:63:e8:d8:a1:1a:d1:d0:d7:6c:09:d4:15:
c6:83:59:9c:84:9b:96:9f:5d:29:23:37:11:1b:95:62:fa:c5:
52:52:b9:c9:57:fe:7a:78:34:b1:5c:af:af:98:65:dc:b2:e3:
f1:e6:16:a2:71:db:2f:10:1f:29:26:5c:67:d6:6a:f0:b6:ec:
e8:e9:94:86:5f:e4:9e:77:d9:5e:c4:57:e6:85:61:af:f7:cc:
d4:c3:41:68:f6:76:f2:66:a6:2b:24:45:9b:85:0e:90:6a:48:
3d:1d:d9:ba:61:f5:68:f4:6e:43:2b:2e:2e:9f:d8:82:ca:cd:
fb:2e:31:a2:cd:49:88:6a:fb:e6:ff:29:07:61:f7:d4:77:c7:
9c:8d:78:d3:7e:38:40:78:ad:08:18:ad:24:59:3e:00:57:e9:
b7:c4:44:50:cd:44:f3:7c:e7:4e:80:e8:b0:00:ef:fb:0d:91:
06:b1:29:65:7f:8b:d9:66:69:5e:08:d5:22:6f:16:6e:4d:68:
b0:0c:a3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:00:49 2025 by rpki-client