Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/ie70DJhDrGYxNNPSAG6BpAZrtxY.roa
File: ie70DJhDrGYxNNPSAG6BpAZrtxY.roa (raw, json)
Hash identifier: HiOIeBO8KrrORXl70BQK8AAzSZ8zCob2hQpjThQB7t8=
Subject key identifier: 89:EE:F4:0C:98:43:AC:66:31:34:D3:D2:00:6E:81:A4:06:6B:B7:16
Certificate issuer: /CN=dd0b663c45d7bc2724d168485087581e14448fb6
Certificate serial: 019424459E60DCB11D796D1F55C45A4AD111
Authority key identifier: DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/ie70DJhDrGYxNNPSAG6BpAZrtxY.roa
Signing time: Wed 01 Jan 2025 23:48:49 +0000
ROA not before: Wed 01 Jan 2025 23:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34370
IP address blocks: 193.227.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:9e:60:dc:b1:1d:79:6d:1f:55:c4:5a:4a:d1:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd0b663c45d7bc2724d168485087581e14448fb6
Validity
Not Before: Jan 1 23:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89eef40c9843ac663134d3d2006e81a4066bb716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f2:07:c1:96:03:79:d0:85:28:cf:0a:3e:bb:
ec:f1:49:53:41:e9:99:20:d6:43:be:57:5f:82:35:
bd:3e:fd:1e:fb:79:d9:b9:3d:25:4f:68:a9:91:c3:
9f:9d:64:20:51:b6:43:ad:8c:9b:d4:5e:d8:da:57:
01:b5:e2:e4:5a:27:19:b4:1f:83:ba:73:af:8e:ff:
54:b1:0e:8e:81:d3:ac:de:2f:a4:d4:fd:81:c1:04:
1d:1d:ea:5e:81:3c:e8:32:5d:d7:53:eb:5d:02:3e:
26:b7:8e:7d:24:a8:7e:05:a0:77:ef:a4:f2:86:bc:
56:84:4f:75:f9:58:5b:84:2b:77:31:16:da:b3:cd:
08:e2:30:3d:70:c8:3b:8a:6b:d7:f3:6a:36:db:91:
ab:71:15:18:28:8e:98:a7:5d:a0:ad:5a:6f:f5:f7:
3a:9d:b3:f1:38:a7:f3:97:19:f5:4e:0f:b3:cf:db:
c4:68:27:5d:cf:b2:f2:dd:99:86:c4:47:59:c5:4e:
61:be:4f:a7:17:6b:17:58:f5:b8:1c:88:6b:69:7d:
ee:d0:e3:4b:26:28:7d:da:98:3a:b7:ab:af:53:34:
5a:f3:2b:91:23:0c:32:3a:a7:51:bc:9f:a2:ec:73:
19:de:27:1d:61:96:69:69:a8:56:88:1f:0a:55:1a:
40:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:EE:F4:0C:98:43:AC:66:31:34:D3:D2:00:6E:81:A4:06:6B:B7:16
X509v3 Authority Key Identifier:
keyid:DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/ie70DJhDrGYxNNPSAG6BpAZrtxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.227.181.0/24
Signature Algorithm: sha256WithRSAEncryption
72:0f:db:47:51:9c:60:d3:34:cc:ab:d9:cf:c4:93:ed:ca:e0:
d5:1b:87:59:c0:b4:fb:01:5d:fc:5b:72:07:20:a6:24:3e:ad:
66:d6:0e:23:32:79:b5:b7:9b:3b:98:30:a1:f5:f9:7c:97:ec:
73:47:0e:2a:3e:ee:d3:93:18:e9:cd:1b:ef:5f:00:27:9a:ff:
31:80:c0:47:b5:15:6d:e1:9f:3b:38:73:89:12:88:9a:e2:95:
d0:97:bb:81:8c:5c:c3:28:4b:d8:a7:8d:9e:34:be:6c:f0:28:
d7:94:78:94:18:93:c1:b3:4a:c9:06:44:50:ea:2c:52:c7:5e:
a9:39:b4:2a:51:d7:b9:af:2f:f6:ba:31:a1:d8:92:09:14:ec:
cf:a3:99:90:d7:d2:be:ad:07:91:b1:55:1c:47:2d:48:40:d2:
3d:9a:63:d1:cc:cd:7a:32:5d:1f:c0:30:d3:36:05:a7:27:c6:
ae:44:cd:f0:41:51:2d:e5:03:1e:2f:2f:83:1e:86:33:04:5f:
75:ed:57:ba:c3:a2:5b:a8:68:23:e7:6a:50:4a:76:78:2e:0b:
80:54:d3:03:73:bb:96:ee:9f:50:9d:ff:e6:88:f2:3c:43:05:
f4:2e:1a:47:37:45:32:39:7d:eb:79:9a:6d:5a:7a:89:c4:8b:
74:e7:87:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:46:38 2025 by rpki-client