Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/IqdjD_fsRcY86-7hZ953c9mux0M.roa
File: IqdjD_fsRcY86-7hZ953c9mux0M.roa (raw, json)
Hash identifier: UIiOvIRXIda+5wk7mIwh5k6RoSv4GhdJHg1jb9nFR4s=
Subject key identifier: 22:A7:63:0F:F7:EC:45:C6:3C:EB:EE:E1:67:DE:77:73:D9:AE:C7:43
Certificate issuer: /CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Certificate serial: 019425216FBEF2751BED167BF36FCD43F358
Authority key identifier: CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/IqdjD_fsRcY86-7hZ953c9mux0M.roa
Signing time: Thu 02 Jan 2025 03:48:55 +0000
ROA not before: Thu 02 Jan 2025 03:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 143.223.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:6f:be:f2:75:1b:ed:16:7b:f3:6f:cd:43:f3:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Validity
Not Before: Jan 2 03:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22a7630ff7ec45c63cebeee167de7773d9aec743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d6:9c:59:5a:d0:b1:75:b4:08:5b:b7:cb:db:
74:82:9f:0e:f5:e2:94:df:99:f5:4c:90:ba:01:cf:
b1:03:c5:1b:45:74:62:63:17:07:de:cc:3d:b8:e8:
18:9c:53:c0:7d:f2:21:5d:59:5a:d8:10:a9:5c:d9:
d0:3e:7d:39:8e:25:8e:72:7e:92:20:03:73:e9:e9:
d1:45:1d:6d:9c:11:94:02:0a:c5:90:79:15:dc:c7:
bc:c6:6f:8d:92:0e:a0:7e:b5:80:8e:b4:f5:f1:4b:
28:51:66:45:c4:22:a8:c0:c5:75:06:45:6a:af:d3:
ad:71:95:ea:92:6a:65:41:b4:10:09:84:e2:60:18:
54:33:46:9d:36:17:32:2e:14:16:84:6b:8d:76:b3:
5b:0f:3b:81:12:c5:41:de:5c:f7:4f:8f:c9:27:7d:
30:2d:c1:54:d7:f8:51:79:a8:52:61:8e:4e:ba:27:
fe:90:c3:57:05:a2:28:ed:ef:bf:86:12:01:5a:3b:
b7:02:af:f7:84:e6:0a:e2:47:c9:bc:eb:25:2c:8d:
7f:a6:a8:34:1c:b6:c6:ba:b9:c7:7c:9e:6c:98:f1:
4a:7c:8e:a9:f7:32:13:8d:99:bd:ec:c3:cc:54:1b:
e0:e4:99:39:23:65:a5:83:09:5f:f0:8f:5d:7f:0e:
0f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A7:63:0F:F7:EC:45:C6:3C:EB:EE:E1:67:DE:77:73:D9:AE:C7:43
X509v3 Authority Key Identifier:
keyid:CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/IqdjD_fsRcY86-7hZ953c9mux0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.223.99.0/24
Signature Algorithm: sha256WithRSAEncryption
84:5d:b9:44:95:0b:07:d5:9a:c6:fc:34:53:9f:f7:f6:40:b5:
58:d0:57:7f:0e:72:fc:34:84:0c:90:51:d1:45:9f:9e:80:6f:
86:0f:67:89:13:e8:7d:65:4f:66:fe:9a:1a:75:91:26:d7:31:
ac:4f:56:8b:a8:e4:37:09:34:1d:3d:71:2e:f9:64:c5:f9:28:
93:17:af:cb:cc:fe:15:f5:fe:d9:e4:fe:eb:ae:ce:6f:4d:53:
68:d2:b8:63:ad:92:69:76:4b:e0:1c:4a:0b:5b:89:e8:61:5b:
8a:48:48:a4:61:5c:a3:bf:c6:64:32:b6:17:a9:5c:64:6d:be:
24:9f:49:72:8c:ce:70:97:32:13:65:d5:20:81:34:f2:64:fd:
6f:84:0f:8c:27:b3:af:2b:f7:2b:76:33:0a:d7:25:23:c0:e6:
3b:a8:47:d4:29:21:43:68:41:25:88:00:ef:fd:46:b8:9b:36:
58:26:c9:ab:6c:99:ff:40:4f:91:ef:e6:a9:53:ef:6f:e7:4e:
b1:05:0c:32:03:a1:10:9c:73:c1:c6:a6:f0:cc:50:4b:15:23:
bb:3b:90:b7:82:af:be:a0:5c:08:05:7f:52:62:0a:86:77:36:
02:92:3d:48:30:61:7f:8f:67:4b:9c:67:f2:a8:59:8f:4f:db:
ac:1c:aa:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:21 2025 by rpki-client