Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/iV0pnh_JQIBr_RdQB2xJYX8tQRw.roa
File: iV0pnh_JQIBr_RdQB2xJYX8tQRw.roa (raw, json)
Hash identifier: YaxAkBWvS50g4TE9KDjWuEy+sBe25yzJdsukBPT8zpw=
Subject key identifier: 89:5D:29:9E:1F:C9:40:80:6B:FD:17:50:07:6C:49:61:7F:2D:41:1C
Certificate issuer: /CN=8c32a6e57ec81cc5cb43bb503749b360f2b05c3b
Certificate serial: 019421437A8BE3DAF50F5343AC929DFFA329
Authority key identifier: 8C:32:A6:E5:7E:C8:1C:C5:CB:43:BB:50:37:49:B3:60:F2:B0:5C:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/iV0pnh_JQIBr_RdQB2xJYX8tQRw.roa
Signing time: Wed 01 Jan 2025 09:47:37 +0000
ROA not before: Wed 01 Jan 2025 09:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59877
IP address blocks: 31.223.190.0/24 maxlen: 24
185.61.176.0/22 maxlen: 24
185.160.52.0/22 maxlen: 24
193.39.0.0/22 maxlen: 24
2a02:7b20::/32 maxlen: 32
2a03:9260::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:7a:8b:e3:da:f5:0f:53:43:ac:92:9d:ff:a3:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c32a6e57ec81cc5cb43bb503749b360f2b05c3b
Validity
Not Before: Jan 1 09:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=895d299e1fc940806bfd1750076c49617f2d411c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:af:2c:bf:df:6a:0b:84:46:00:0a:a9:2f:b9:
bc:99:a9:b9:96:8b:19:d3:e0:e7:5c:a9:b1:88:e4:
1d:87:cb:4f:07:78:cd:1c:0f:e4:ca:ae:74:29:6f:
c8:20:a9:fa:f5:63:b1:04:8e:59:ae:b4:9e:50:63:
52:eb:2a:b2:4c:92:a6:07:ba:8c:d9:08:ad:e4:22:
a9:64:78:d0:3d:23:b8:58:47:dd:30:4c:f1:5a:f8:
0e:e8:83:7e:b3:33:84:37:20:3e:0a:b2:00:71:ef:
92:e6:2e:e0:35:e8:7c:f2:25:a6:5b:67:f9:e5:e6:
30:49:81:30:47:0f:c2:55:6b:e3:28:98:37:d0:17:
c8:40:93:8e:60:90:8e:63:68:65:e2:8c:a3:19:9d:
6a:df:41:87:7f:c8:77:d7:30:7b:c1:44:15:28:7d:
b7:60:f2:f0:8a:b3:06:a3:0a:fc:4e:75:7a:03:09:
e5:80:00:1a:b0:df:ba:fc:c4:60:f7:75:86:e1:c8:
72:15:cf:15:b8:ce:b9:ae:28:5c:bb:03:03:30:9d:
2a:39:60:b4:ab:8f:1a:c1:33:ae:19:b3:b6:b9:f6:
51:00:dd:5d:e6:bf:49:0d:ab:0f:a0:23:5e:3f:d2:
a9:cd:55:a7:51:31:ee:d8:20:fb:3e:f4:96:a6:01:
ca:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5D:29:9E:1F:C9:40:80:6B:FD:17:50:07:6C:49:61:7F:2D:41:1C
X509v3 Authority Key Identifier:
keyid:8C:32:A6:E5:7E:C8:1C:C5:CB:43:BB:50:37:49:B3:60:F2:B0:5C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/iV0pnh_JQIBr_RdQB2xJYX8tQRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.223.190.0/24
185.61.176.0/22
185.160.52.0/22
193.39.0.0/22
IPv6:
2a02:7b20::/32
2a03:9260::/32
Signature Algorithm: sha256WithRSAEncryption
c9:0c:09:ea:73:db:ac:04:90:d6:91:79:6a:fd:5d:9d:a7:3d:
78:98:0f:90:d2:1d:15:dd:ac:7f:df:72:36:9a:e7:03:dc:e7:
ab:ca:7c:96:ec:1c:b1:c7:15:bd:be:51:7c:59:69:7d:54:8c:
5a:a4:1c:3e:ae:10:61:90:01:bc:89:08:f8:9a:41:26:0e:cb:
2a:00:e5:03:1e:52:d7:44:6e:d0:24:cb:8d:84:f3:33:46:a7:
86:d7:5b:3a:a0:d0:ad:50:7e:4c:5d:63:c6:21:df:72:6b:2b:
fa:e9:d2:bf:cb:11:36:4b:55:76:45:c8:01:32:76:d3:1d:e8:
85:e3:a0:b9:bf:ba:bf:42:18:51:24:1c:9f:9a:97:82:30:09:
f5:f2:6a:fb:f6:9b:4b:94:f1:00:15:f2:64:8c:64:3c:92:65:
17:e1:48:2c:29:6c:6d:92:0a:51:09:ae:e4:4e:ce:ac:9f:a8:
f2:81:38:68:3e:ab:18:36:b4:aa:5d:c8:b5:1e:47:77:4c:54:
17:1d:5a:08:71:2d:98:00:a6:8d:ce:af:23:af:3e:dd:38:67:
aa:9a:df:6a:26:93:9e:37:ce:93:d0:71:80:d7:3b:64:94:1c:
28:b3:c2:2c:65:68:dd:5a:e8:0e:31:92:f5:9b:e6:37:91:67:
7a:e4:5f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:02:10 2025 by rpki-client