Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/iCEtvdo35QYS0XZzbCSkUBvLIzs.roa
File: iCEtvdo35QYS0XZzbCSkUBvLIzs.roa (raw, json)
Hash identifier: zyoo6UPzEwr9Wic7Dppcx0mzsl7aajEnMpuXSdefYMA=
Subject key identifier: 88:21:2D:BD:DA:37:E5:06:12:D1:76:73:6C:24:A4:50:1B:CB:23:3B
Certificate issuer: /CN=2dc81d24c45ddaa345f9064de29fbca7b129a52c
Certificate serial: 019424B3BFD01FCD13C72306BF8F434F7BD9
Authority key identifier: 2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/iCEtvdo35QYS0XZzbCSkUBvLIzs.roa
Signing time: Thu 02 Jan 2025 01:49:07 +0000
ROA not before: Thu 02 Jan 2025 01:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 269070
IP address blocks: 185.14.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:bf:d0:1f:cd:13:c7:23:06:bf:8f:43:4f:7b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dc81d24c45ddaa345f9064de29fbca7b129a52c
Validity
Not Before: Jan 2 01:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=88212dbdda37e50612d176736c24a4501bcb233b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:47:fa:af:58:15:0f:75:90:42:17:c2:46:dd:
13:03:33:56:20:0b:89:1e:1a:1f:9d:e0:b9:ef:e8:
3c:cf:00:4f:ba:15:52:35:a9:b9:bf:9e:25:4d:59:
4a:75:45:f5:75:8e:ab:c3:d5:3e:89:0f:81:2e:30:
4f:6c:c6:8e:2d:6b:20:58:6f:c5:c3:4b:88:28:f7:
93:d3:99:9f:14:19:2e:d5:95:99:77:b1:4c:bf:65:
69:c4:c9:05:1b:76:8d:87:1b:b8:e7:b7:dc:df:bf:
50:0b:64:d4:dc:a4:b7:5f:b5:3c:34:03:93:f5:68:
80:16:52:ff:0f:d6:3f:ef:a6:db:f9:65:a1:0b:7e:
76:8c:35:d4:98:8d:3c:31:c3:d3:10:ca:2a:d3:66:
7b:d1:47:cd:f5:af:c4:97:00:d8:e3:e5:03:29:6e:
60:26:e4:c5:29:31:e4:1c:cc:96:e1:4b:6b:40:e7:
0e:66:be:7a:30:67:56:a5:f7:d3:a6:ce:7b:4f:60:
58:fa:43:dc:a8:25:13:fa:1a:e9:40:2d:b5:32:e6:
54:9a:4c:d1:f1:bd:53:3e:1b:b2:1c:03:6f:3e:7a:
44:3d:b7:07:dd:86:3e:22:b1:83:a5:08:16:32:de:
2b:f7:64:05:2d:c3:fc:28:e6:2d:78:c4:e9:6d:2e:
2a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:21:2D:BD:DA:37:E5:06:12:D1:76:73:6C:24:A4:50:1B:CB:23:3B
X509v3 Authority Key Identifier:
keyid:2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/iCEtvdo35QYS0XZzbCSkUBvLIzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.14.238.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:7d:3f:3f:f5:86:ef:d7:c6:1a:99:87:ec:e5:b0:fb:31:ba:
bf:63:8b:a7:12:31:78:50:be:20:2f:06:93:e1:b3:0c:10:74:
88:3b:39:df:6a:e7:59:5a:89:ad:da:cd:bd:bc:7c:a1:dc:e0:
ce:27:82:a8:e5:3b:da:1d:a5:58:e3:43:f6:d9:a3:ae:e6:06:
ee:1b:22:4b:04:ae:b3:1f:77:af:9b:e0:65:19:85:03:a2:7e:
a5:a6:9e:bb:94:b1:e4:f7:ae:f5:27:98:1e:53:08:3f:2c:f2:
71:6a:b4:f1:94:a3:8d:02:7f:4c:31:b1:ac:92:a1:1f:dd:c5:
da:5f:f2:c7:42:6a:74:a6:2e:62:9e:28:69:d0:91:82:85:8c:
72:b5:4b:12:cc:24:94:7f:8a:75:04:c6:f2:6d:c2:7f:02:74:
a6:41:f0:81:e8:0e:10:7d:4a:88:cc:ed:fa:3b:bf:32:99:8a:
9e:81:26:bf:5f:0c:3a:c1:4d:c4:56:3e:17:6c:49:2d:02:51:
b6:69:81:6a:1b:df:de:d7:0c:4e:0d:ae:92:94:16:03:95:b3:
7d:11:f6:62:3b:ff:f0:23:f2:c6:28:9d:1e:e1:b9:a5:bd:6a:
47:93:47:49:26:b9:84:f0:c5:06:25:19:0d:3a:9a:bd:27:7f:
48:12:35:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 11:45:41 2025 by rpki-client