Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/IZTqsNkTgWjmY4RtPaRP8pP_4y4.roa
File: IZTqsNkTgWjmY4RtPaRP8pP_4y4.roa (raw, json)
Hash identifier: snBSRgtB4DOLpSGdb4h6kFLqnhtBFWYeDh0vluESnyk=
Subject key identifier: 21:94:EA:B0:D9:13:81:68:E6:63:84:6D:3D:A4:4F:F2:93:FF:E3:2E
Certificate issuer: /CN=570a181aa090cb970605a25a7a57d653547f2324
Certificate serial: 01941FFA18BC92779C8E58ACBECA74348EEE
Authority key identifier: 57:0A:18:1A:A0:90:CB:97:06:05:A2:5A:7A:57:D6:53:54:7F:23:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwoYGqCQy5cGBaJaelfWU1R_IyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/IZTqsNkTgWjmY4RtPaRP8pP_4y4.roa
Signing time: Wed 01 Jan 2025 03:47:51 +0000
ROA not before: Wed 01 Jan 2025 03:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49054
IP address blocks: 95.131.168.0/22 maxlen: 22
95.131.169.0/24 maxlen: 24
95.131.170.0/24 maxlen: 24
185.247.232.0/22 maxlen: 22
185.247.232.0/24 maxlen: 24
185.247.233.0/24 maxlen: 24
185.247.234.0/24 maxlen: 24
2a0d:d080::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/VwoYGqCQy5cGBaJaelfWU1R_IyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/VwoYGqCQy5cGBaJaelfWU1R_IyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VwoYGqCQy5cGBaJaelfWU1R_IyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 18:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:18:bc:92:77:9c:8e:58:ac:be:ca:74:34:8e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570a181aa090cb970605a25a7a57d653547f2324
Validity
Not Before: Jan 1 03:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2194eab0d9138168e663846d3da44ff293ffe32e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:99:83:93:04:f1:8c:3d:a9:b1:a2:45:0d:30:
ce:77:18:61:0b:d4:5c:5b:58:4c:9e:7c:f1:71:0f:
94:74:f2:70:2c:63:b1:7f:c0:36:55:bf:3f:8f:93:
8c:0b:b5:4c:25:79:7c:e7:17:74:da:f5:cc:98:6a:
63:a9:52:f6:71:7c:75:39:12:6f:8c:ba:3d:69:17:
2a:90:75:47:ae:f3:33:41:dd:cd:50:96:d6:01:35:
48:21:1b:24:7c:38:9e:e7:1d:3a:d3:a2:94:55:85:
ed:e0:db:36:7e:ee:4c:28:d8:d6:9c:62:05:0c:90:
15:14:34:8b:20:3c:d0:bb:e4:a7:9c:c2:81:12:09:
2c:c0:7f:82:86:0f:6a:c2:f1:86:b4:42:ee:45:a8:
ff:da:02:81:fa:35:95:60:c5:1d:75:4d:33:6a:6e:
60:e0:74:5d:d1:17:c8:23:82:01:84:91:b9:ea:27:
8f:29:75:32:12:96:cf:d7:7e:cd:95:f4:de:13:66:
30:7d:61:38:0c:97:9d:2a:24:88:2a:00:9e:5f:cf:
52:75:d2:52:a6:63:4d:ea:2c:1c:8c:d7:f4:01:01:
e1:fe:a9:d8:aa:17:ce:87:d2:b3:c8:ac:ad:d4:57:
0b:ac:39:15:09:91:a0:30:10:dd:7a:f4:06:eb:ac:
a7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:94:EA:B0:D9:13:81:68:E6:63:84:6D:3D:A4:4F:F2:93:FF:E3:2E
X509v3 Authority Key Identifier:
keyid:57:0A:18:1A:A0:90:CB:97:06:05:A2:5A:7A:57:D6:53:54:7F:23:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwoYGqCQy5cGBaJaelfWU1R_IyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/IZTqsNkTgWjmY4RtPaRP8pP_4y4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/VwoYGqCQy5cGBaJaelfWU1R_IyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.131.168.0/22
185.247.232.0/22
IPv6:
2a0d:d080::/29
Signature Algorithm: sha256WithRSAEncryption
32:8d:e8:8a:47:66:92:97:a8:20:9d:f3:42:12:5d:e2:96:0e:
46:7b:98:f9:42:4c:e0:4d:25:e6:ec:8b:4d:1c:5c:e8:d2:68:
cb:f1:8f:ca:1c:ab:17:37:88:7d:9d:ca:3e:6e:0a:01:ef:2d:
19:76:f5:a7:6c:19:83:02:29:41:e3:f1:b5:7d:c0:c5:b9:79:
20:f5:8c:65:8d:7a:0f:4e:65:5e:9c:5e:3d:2c:56:0e:e5:86:
d5:1d:77:a5:8c:a9:d1:25:5e:8b:d1:72:74:86:d5:8e:d0:8d:
c5:68:be:80:06:ad:87:58:4a:f2:be:45:e5:ca:51:53:0c:9e:
7f:92:d3:e8:5e:06:a7:ca:d5:ee:9e:70:9a:03:6e:44:84:ab:
91:27:9f:7e:8a:b2:36:ba:55:56:17:d7:c9:21:73:fb:d7:5d:
0a:25:96:b1:23:78:62:41:38:42:e5:fb:59:8f:dd:4c:4d:c8:
dd:1c:bc:33:db:b2:10:77:a2:7b:97:ac:db:94:e5:1d:69:45:
82:c2:73:f3:63:d7:3b:e3:02:e0:1f:56:0d:9f:47:e9:9d:00:
23:b6:2e:7c:ba:79:76:5a:d1:17:67:a9:68:39:4c:2c:2a:c1:
ce:2b:09:c7:9a:91:65:be:15:34:51:a5:36:33:31:62:ed:a3:
70:7b:c8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:16:21 2025 by rpki-client