Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/ilDsB1oCh4sjhvENVw42i5WUlqk.roa
File: ilDsB1oCh4sjhvENVw42i5WUlqk.roa (raw, json)
Hash identifier: vSxvsrihNX9SUSeA3egKFeCzHd0zX/pJIX5pzpkntKQ=
Subject key identifier: 8A:50:EC:07:5A:02:87:8B:23:86:F1:0D:57:0E:36:8B:95:94:96:A9
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 01946E2FFDF138AEEE12EE080B5762FE6926
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/ilDsB1oCh4sjhvENVw42i5WUlqk.roa
Signing time: Thu 16 Jan 2025 08:17:06 +0000
ROA not before: Thu 16 Jan 2025 08:17:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13347
IP address blocks: 213.18.192.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6e:2f:fd:f1:38:ae:ee:12:ee:08:0b:57:62:fe:69:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Jan 16 08:17:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a50ec075a02878b2386f10d570e368b959496a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4e:5f:eb:4a:69:cc:b9:67:bb:0f:e2:15:70:
7a:e2:d1:11:4e:a7:2f:bb:08:e6:22:c2:17:8d:56:
9d:2f:08:eb:44:5f:8f:9d:cb:77:2e:21:f9:50:da:
3a:11:69:25:eb:83:7d:68:35:eb:3b:87:64:d6:ee:
cf:5b:d7:2d:1c:1a:14:f2:55:cd:3a:06:c6:d1:5b:
52:ef:0e:09:0f:32:8d:63:67:30:4d:45:f2:0d:6f:
a8:3f:f1:15:51:15:0b:b6:92:33:63:fd:5c:56:f1:
78:ca:e3:8b:5d:ed:c9:b3:5f:94:50:e2:b8:e7:e0:
7f:29:9c:ec:b6:8e:05:17:49:ec:bc:39:3a:3b:28:
18:b5:3f:61:ea:78:b9:59:dd:85:08:a6:1a:f2:84:
17:22:d5:91:c1:af:4b:22:0d:93:30:a0:24:3a:72:
26:c0:df:2b:62:ad:4c:7c:3a:4c:d7:38:e2:9a:d4:
6f:b3:fb:4b:86:cc:dd:21:e1:9a:a9:3d:d8:9d:18:
02:e0:46:97:fa:b3:7c:25:59:39:43:5d:7c:e2:23:
0a:2c:f9:d4:84:6e:f5:08:db:86:97:cd:b6:27:1c:
a6:19:47:0a:ad:a9:b8:73:c0:70:aa:40:1c:4a:3d:
3d:70:96:4d:8d:b8:d6:d4:fc:f7:43:8a:0b:75:4c:
05:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:50:EC:07:5A:02:87:8B:23:86:F1:0D:57:0E:36:8B:95:94:96:A9
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/ilDsB1oCh4sjhvENVw42i5WUlqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.18.192.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:cb:ee:a2:71:e8:80:bb:ed:93:2b:ea:5d:80:35:76:49:d2:
83:98:3a:77:51:82:b5:7c:1a:34:54:36:27:c0:0c:39:ca:59:
9e:68:ac:3c:fd:5f:74:f1:2e:26:6f:72:3a:81:a8:e8:62:9b:
38:65:e5:3d:03:ea:24:fc:11:fb:10:d1:1a:fd:ce:1d:8c:98:
f7:3b:e4:5d:2c:12:c6:93:91:8e:72:6e:94:c7:00:b4:7f:b3:
dc:b9:32:a9:91:e0:25:5b:42:c7:33:6a:5c:33:e7:a5:39:da:
9d:9f:fd:64:04:7f:f7:24:5f:07:c4:eb:0e:79:c2:ff:82:10:
e3:0c:98:bc:ec:ea:78:e2:6c:1d:a5:ae:37:83:74:52:f2:62:
90:63:33:96:c6:63:37:3d:97:6f:e4:46:6e:22:26:64:f5:60:
30:c3:2a:94:55:4c:48:75:da:73:fd:c9:d0:cb:f6:b8:06:0e:
37:11:d1:e7:6f:fc:7d:a9:ac:65:ae:c9:ca:ae:1d:3a:d4:29:
4c:e4:84:59:35:39:8e:12:25:64:f8:d9:cf:88:bf:1d:d0:27:
3c:73:94:d8:2b:91:48:56:75:ef:eb:d6:99:a0:a0:55:4d:54:
bc:10:58:d0:47:b2:98:27:60:d8:62:0e:79:83:02:20:1c:9c:
ee:c8:36:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:39:59 2025 by rpki-client