Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/rjPYT3hASUgJ6V6pMv8rczg7wDI.roa
File: rjPYT3hASUgJ6V6pMv8rczg7wDI.roa (raw, json)
Hash identifier: gjugzVDut3tOkBALsAOUch2hCi+rlYTeCTT5ZsnsEbg=
Subject key identifier: AE:33:D8:4F:78:40:49:48:09:E9:5E:A9:32:FF:2B:73:38:3B:C0:32
Certificate issuer: /CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922
Certificate serial: 0194282581D6C1BE55178CBD730BF1E4E6CE
Authority key identifier: 88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/rjPYT3hASUgJ6V6pMv8rczg7wDI.roa
Signing time: Thu 02 Jan 2025 17:52:14 +0000
ROA not before: Thu 02 Jan 2025 17:52:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201965
IP address blocks: 93.175.159.0/24 maxlen: 24
2001:67c:2d7c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 02:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:81:d6:c1:be:55:17:8c:bd:73:0b:f1:e4:e6:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922
Validity
Not Before: Jan 2 17:52:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae33d84f7840494809e95ea932ff2b73383bc032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:66:4b:25:4c:dd:c6:cf:67:bc:49:19:c0:4c:
39:a3:21:f1:4f:31:e7:f0:f4:28:3d:1b:55:b6:cb:
7b:cd:2b:02:d1:9b:7b:21:3b:b6:5f:50:05:9b:76:
39:4f:d9:68:53:ad:fb:ea:ff:ea:96:d3:66:fc:44:
59:61:db:b2:81:49:0a:01:8a:bd:ad:15:90:25:46:
2a:4f:5e:ae:f4:53:81:95:98:65:b0:44:9b:f4:bb:
09:ea:1d:a7:12:cc:dd:65:1d:8a:d7:fb:f5:92:9b:
4d:33:66:b7:19:e1:2d:93:9f:cd:0d:47:28:f2:7d:
36:76:cf:f2:fe:55:bd:87:72:f2:d7:4e:5d:e6:b3:
1c:c0:e8:2f:3e:27:da:5d:05:f2:69:ee:d9:b9:0b:
16:be:06:17:3f:79:2a:88:8e:af:9d:df:15:da:b4:
45:b7:19:db:75:fa:94:a1:7f:20:62:c1:0a:d6:90:
9d:26:b4:2e:d1:bb:75:21:e8:94:a9:d2:b7:49:a0:
bc:bd:8c:79:df:64:c9:92:70:f0:26:db:b0:f9:c3:
5f:60:68:8e:81:3c:72:76:b5:0e:c5:36:1e:e6:a1:
19:6c:01:0b:ba:a2:8d:60:43:16:7b:80:78:f0:e9:
69:83:e3:21:9a:64:13:cc:d3:36:bf:3e:4b:18:c5:
d4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:33:D8:4F:78:40:49:48:09:E9:5E:A9:32:FF:2B:73:38:3B:C0:32
X509v3 Authority Key Identifier:
keyid:88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/rjPYT3hASUgJ6V6pMv8rczg7wDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.175.159.0/24
IPv6:
2001:67c:2d7c::/48
Signature Algorithm: sha256WithRSAEncryption
b8:29:98:66:ff:84:38:fc:71:d1:cd:63:09:0a:67:d7:c4:12:
22:dc:78:63:5e:9c:59:da:a8:ad:3d:d5:c9:a3:1d:e0:20:5a:
0f:45:2e:80:dd:b2:2b:33:c0:c8:6b:1f:8a:c1:cb:b9:cf:f8:
b7:36:2d:a6:90:a7:3e:73:b5:00:05:22:48:1d:f2:45:a3:35:
42:cd:db:60:15:c0:53:86:a1:7a:03:f7:50:1a:b2:92:8e:bb:
97:fe:53:1f:79:b5:bc:e5:a5:2a:a2:b9:4d:17:48:d8:0e:e2:
a3:63:32:c3:73:62:83:5f:49:ac:4b:75:83:9d:69:db:b5:6f:
cb:f0:59:1f:a8:90:7b:2e:90:aa:67:1e:fe:89:23:7e:b2:ec:
04:4c:90:2f:b4:ac:41:98:ef:9a:04:ba:f6:9b:ac:e4:b4:66:
a2:10:36:3f:3c:e3:e6:31:a6:8c:ae:36:96:fc:c6:c2:5e:fb:
c6:bc:1e:49:70:dd:ba:8d:44:c6:7f:06:45:da:14:92:71:74:
51:8c:59:29:c8:ba:3b:d5:b3:81:bd:98:06:f0:0e:c0:3c:29:
26:b3:5a:87:73:e1:b5:ed:0c:f9:d7:b5:d8:36:1e:62:6e:81:
7c:53:bc:59:0d:85:b1:24:94:4c:09:30:e2:7b:b7:97:57:9c:
fe:7d:b1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:44:41 2025 by rpki-client