Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/ICTqfYBG-REglE6QLqLm2DMr9nE.roa
File: ICTqfYBG-REglE6QLqLm2DMr9nE.roa (raw, json)
Hash identifier: tDqSslkp4cv0xRmwxWP8ihUEHojImR31lIwN5aeFXMA=
Subject key identifier: 20:24:EA:7D:80:46:F9:11:20:94:4E:90:2E:A2:E6:D8:33:2B:F6:71
Certificate issuer: /CN=a92dc7bdbc9d097336de6243b550ab173375ea39
Certificate serial: 019423D6DDAEA9603B0B9CA9FD886D9D18EB
Authority key identifier: A9:2D:C7:BD:BC:9D:09:73:36:DE:62:43:B5:50:AB:17:33:75:EA:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/ICTqfYBG-REglE6QLqLm2DMr9nE.roa
Signing time: Wed 01 Jan 2025 21:47:51 +0000
ROA not before: Wed 01 Jan 2025 21:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3301
IP address blocks: 212.39.32.0/24 maxlen: 24
212.39.34.0/24 maxlen: 24
212.39.35.0/24 maxlen: 24
212.39.36.0/24 maxlen: 24
212.39.37.0/24 maxlen: 24
212.39.38.0/24 maxlen: 24
212.39.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:dd:ae:a9:60:3b:0b:9c:a9:fd:88:6d:9d:18:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92dc7bdbc9d097336de6243b550ab173375ea39
Validity
Not Before: Jan 1 21:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2024ea7d8046f91120944e902ea2e6d8332bf671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:35:ff:af:40:18:90:08:17:88:a4:60:51:e9:
d8:b7:28:45:1e:11:0e:0a:e6:8a:91:07:9a:f0:db:
ca:d9:47:cb:71:ec:58:a0:bb:a1:59:21:60:38:94:
dd:c1:b3:d8:09:56:a4:2e:26:e0:55:f9:2d:58:4e:
68:cf:05:0a:ce:5d:70:3f:07:53:31:cc:01:01:65:
4b:a2:4c:a1:82:33:e9:99:48:78:52:a3:93:bf:c6:
d5:f9:71:c7:72:cf:1a:db:4e:d1:85:93:c8:6c:90:
8f:ca:0c:a0:12:14:97:0b:c1:f7:05:86:8e:5e:c0:
8b:d5:e4:44:f5:cc:b2:49:de:a2:93:49:dd:26:c5:
ae:af:f7:e3:de:b0:77:44:93:bd:83:85:82:05:48:
12:71:ea:c3:5b:18:07:0a:b5:ee:0b:b9:d7:c2:bc:
39:23:7d:79:d0:ce:f2:46:7d:a3:12:98:57:55:d0:
b4:b3:7c:84:a1:5d:b4:2a:3b:37:71:46:cf:93:0f:
4c:f7:22:bb:0f:cd:2d:c0:f8:1b:a1:d5:75:76:e7:
81:ee:94:e1:c7:f4:4c:77:91:23:42:4a:a6:fb:69:
e6:c0:3a:cb:bc:58:26:f9:2c:6e:77:aa:da:ed:f5:
9b:15:52:92:bc:ec:d1:ba:c1:82:01:3e:65:8c:34:
3a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:24:EA:7D:80:46:F9:11:20:94:4E:90:2E:A2:E6:D8:33:2B:F6:71
X509v3 Authority Key Identifier:
keyid:A9:2D:C7:BD:BC:9D:09:73:36:DE:62:43:B5:50:AB:17:33:75:EA:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/ICTqfYBG-REglE6QLqLm2DMr9nE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.39.32.0/24
212.39.34.0-212.39.39.255
Signature Algorithm: sha256WithRSAEncryption
42:7f:ea:6f:b2:57:ac:87:e3:cf:a6:0e:3c:41:80:df:1b:cc:
83:c8:60:53:92:c2:b8:dc:39:2a:24:29:29:af:53:04:9a:d7:
55:e6:19:85:e6:15:1b:85:70:b7:92:ab:74:72:c0:6b:2a:9c:
88:51:97:4d:63:58:51:4a:ff:f9:e9:65:d8:9a:e1:c6:37:23:
e7:12:5e:7a:97:9f:70:1e:81:c2:9f:e2:e8:c5:3c:08:6f:de:
bd:7a:65:d3:63:b1:86:65:4f:1c:03:59:88:f9:48:21:41:3f:
78:f8:2a:99:9c:38:73:4d:2a:c0:0e:1b:69:b7:07:df:26:96:
08:c6:e3:ac:de:e2:2d:14:4e:48:b4:7b:f4:86:ba:37:cb:c8:
75:e1:56:7d:45:11:78:06:2e:de:0d:16:4e:9f:ed:60:fc:8f:
b7:ac:b4:37:ab:79:73:6b:c3:2b:af:39:cf:c5:2d:c7:1b:4f:
01:d6:c4:8a:e4:69:d9:71:fb:6c:3f:e1:0e:33:3b:29:48:9e:
2b:d6:ef:3c:3b:27:c0:e8:7d:28:b4:1d:14:d0:e3:ad:e6:c3:
78:c2:e7:eb:09:ff:a2:fe:82:b2:ce:89:97:98:93:3b:11:28:
6e:2a:8f:a9:b2:48:27:9b:96:8b:11:1c:ed:e9:38:59:90:9b:
dc:a7:7d:df
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Apr 9 03:02:51 2025 by rpki-client