Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/IMiPI_sQJpS-dko-Db8d2-Qz-B0.roa
File: IMiPI_sQJpS-dko-Db8d2-Qz-B0.roa (raw, json)
Hash identifier: fyR22c3qbngtIbooNJXlmC6fXpgIjnWVTMNZ/hhGG0A=
Subject key identifier: 20:C8:8F:23:FB:10:26:94:BE:76:4A:3E:0D:BF:1D:DB:E4:33:F8:1D
Certificate issuer: /CN=36f76211f3c58f6c98af99cf65a6f1e8ff7c43ba
Certificate serial: 01942067C3BABC9E1C82AEE18DD792ACDB1F
Authority key identifier: 36:F7:62:11:F3:C5:8F:6C:98:AF:99:CF:65:A6:F1:E8:FF:7C:43:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NvdiEfPFj2yYr5nPZabx6P98Q7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/IMiPI_sQJpS-dko-Db8d2-Qz-B0.roa
Signing time: Wed 01 Jan 2025 05:47:38 +0000
ROA not before: Wed 01 Jan 2025 05:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205093
IP address blocks: 185.230.236.0/24 maxlen: 24
185.230.237.0/24 maxlen: 24
185.230.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/NvdiEfPFj2yYr5nPZabx6P98Q7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:c3:ba:bc:9e:1c:82:ae:e1:8d:d7:92:ac:db:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36f76211f3c58f6c98af99cf65a6f1e8ff7c43ba
Validity
Not Before: Jan 1 05:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20c88f23fb102694be764a3e0dbf1ddbe433f81d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:87:f8:1b:62:53:bc:e1:18:62:24:89:c3:d1:
14:7b:d7:de:e5:78:f0:7a:75:1f:57:82:26:76:67:
73:cb:16:a4:d0:b0:88:94:93:00:3a:15:f6:b6:e1:
64:18:82:0f:c4:d0:93:88:81:39:f9:92:5e:f5:eb:
4d:35:4a:35:31:7d:86:30:97:b5:25:1e:9d:ec:3b:
db:bf:6d:2a:bb:51:f5:ef:a9:1a:ae:43:55:cd:43:
8a:0a:31:bf:4f:14:8d:47:3d:66:fe:d5:a3:bd:8f:
58:14:5d:2a:bd:49:87:83:d1:84:0d:ce:49:ab:d2:
4c:18:3f:20:4b:bf:01:a0:8e:f6:5f:41:ac:a6:c0:
58:e2:29:60:63:56:9c:d0:42:73:be:70:d2:56:e9:
21:5d:14:1b:44:c5:05:ad:4f:fd:3c:7f:ef:ac:26:
d1:b0:1d:c7:07:c3:13:98:9a:ab:dc:32:3a:82:95:
85:22:28:be:b4:f8:21:56:53:78:c6:58:85:46:3b:
1d:f2:8f:7e:21:27:f3:93:d4:70:45:0c:e7:72:4d:
5a:4d:d8:99:7f:36:49:3f:03:db:71:28:51:af:8d:
76:e4:1e:4e:e1:f3:95:b2:13:20:54:71:4d:90:0c:
33:79:ac:8c:3a:fc:9e:89:fa:04:05:4f:54:a6:31:
b1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C8:8F:23:FB:10:26:94:BE:76:4A:3E:0D:BF:1D:DB:E4:33:F8:1D
X509v3 Authority Key Identifier:
keyid:36:F7:62:11:F3:C5:8F:6C:98:AF:99:CF:65:A6:F1:E8:FF:7C:43:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NvdiEfPFj2yYr5nPZabx6P98Q7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/IMiPI_sQJpS-dko-Db8d2-Qz-B0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.236.0-185.230.238.255
Signature Algorithm: sha256WithRSAEncryption
41:83:93:0b:74:be:1e:3b:bc:23:3d:bd:87:1d:c8:c3:16:47:
3d:96:a9:52:de:0f:c2:98:87:8e:95:8c:fc:19:07:bb:9a:96:
07:5c:8f:6f:ff:3e:ce:14:af:38:4c:b5:33:8f:72:4d:40:5e:
07:74:65:e8:c5:f7:8f:02:00:8f:31:62:1d:50:5f:b7:2f:36:
22:05:34:b6:88:e8:28:07:0e:f6:30:f1:57:d4:1a:d8:c2:e4:
79:d4:3a:9d:b1:e7:be:63:37:5c:04:95:53:ef:02:bb:c7:98:
a0:40:08:40:74:ca:d4:ce:9f:e4:c3:da:26:ad:eb:9f:68:7f:
0d:24:27:a2:2c:3f:7d:8b:81:2e:bf:77:21:f6:c1:ca:43:e5:
50:88:ba:b4:97:65:f5:2a:11:c7:8d:14:27:05:09:9d:e2:a1:
9c:a8:73:e7:62:97:c8:1e:4d:d7:16:c8:29:60:d0:70:7e:c5:
1f:e1:c5:1a:6b:b5:59:3e:72:45:4d:78:85:6b:88:02:b4:45:
70:48:dc:d1:82:54:91:76:54:3e:7b:53:25:78:34:0b:bf:5b:
19:55:6a:f3:00:2a:11:85:26:77:e0:35:ea:4b:80:53:4c:4b:
ec:82:65:28:b6:96:33:aa:d9:da:62:27:59:0f:2b:ec:2d:40:
5c:72:51:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:11:07 2025 by rpki-client