Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/Ixi6Iu1s_azsg7gT1vp8GAKjehk.roa
File: Ixi6Iu1s_azsg7gT1vp8GAKjehk.roa (raw, json)
Hash identifier: 2FsA5WHKtbk04OgMfAS2wYrqdHkHBCfhy5Jp5cWaqXg=
Subject key identifier: 23:18:BA:22:ED:6C:FD:AC:EC:83:B8:13:D6:FA:7C:18:02:A3:7A:19
Certificate issuer: /CN=e7334ad9b3fc521030be99a5157211b663216c94
Certificate serial: 019420D622A1BA5A97507C7EB52D0108CEF0
Authority key identifier: E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/Ixi6Iu1s_azsg7gT1vp8GAKjehk.roa
Signing time: Wed 01 Jan 2025 07:48:11 +0000
ROA not before: Wed 01 Jan 2025 07:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208649
IP address blocks: 185.75.221.0/24 maxlen: 24
2a0d:a640::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:22:a1:ba:5a:97:50:7c:7e:b5:2d:01:08:ce:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7334ad9b3fc521030be99a5157211b663216c94
Validity
Not Before: Jan 1 07:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2318ba22ed6cfdacec83b813d6fa7c1802a37a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:72:a6:ff:5a:6f:52:a9:f3:7e:25:f9:54:b7:
59:cd:62:9f:d0:21:a8:e7:6f:da:d8:b5:29:7b:2e:
17:b0:4b:cd:f9:2e:d3:0a:e0:76:7f:d8:62:aa:5a:
b6:98:7d:16:b2:72:3f:02:48:fe:77:27:a6:6c:fc:
8d:8b:b9:11:43:ca:55:4a:25:83:ee:47:1c:8b:40:
87:09:d5:f8:8d:aa:1d:30:40:81:34:ab:53:3d:aa:
45:7d:58:b4:ce:2c:0c:f1:66:fc:e0:8f:1e:25:0b:
f6:a3:a0:4e:69:36:12:31:00:5b:bb:c2:20:a3:bf:
43:b7:08:9f:2d:ce:ec:cb:bf:6b:6a:9d:0a:0a:15:
50:56:bb:74:3e:f1:4e:c4:45:29:2e:10:22:d7:8c:
aa:dd:84:5c:f9:f1:cb:38:96:12:37:4e:93:8a:34:
8a:9f:70:d0:96:9e:2d:79:0f:33:8e:0c:3f:3e:25:
0e:5a:76:9f:3d:20:88:96:12:1e:08:07:4d:34:25:
03:76:b5:fc:2e:55:b9:5d:c5:f2:19:00:63:1f:fe:
80:0e:00:05:ae:a3:fb:e2:bc:9a:3c:d5:dc:69:68:
bf:2b:f0:a0:99:25:a5:4a:22:11:f5:45:30:f4:d1:
51:ff:f1:bc:1c:26:69:d3:0f:06:53:cf:1c:1f:58:
6b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:18:BA:22:ED:6C:FD:AC:EC:83:B8:13:D6:FA:7C:18:02:A3:7A:19
X509v3 Authority Key Identifier:
keyid:E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/Ixi6Iu1s_azsg7gT1vp8GAKjehk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.221.0/24
IPv6:
2a0d:a640::/29
Signature Algorithm: sha256WithRSAEncryption
84:21:66:7f:7a:64:69:8b:ba:bb:30:57:0d:55:03:89:a2:c3:
dc:9e:6a:a5:5c:c2:90:96:cf:58:2f:9a:b3:84:6d:06:09:f9:
3d:26:3a:5a:09:9d:ed:17:29:7e:73:a8:86:8d:5c:39:bc:2b:
2e:28:f3:c0:05:0d:a3:9e:16:1c:6d:fe:e1:aa:ad:9b:0d:9f:
61:d2:38:f6:56:e1:b7:52:f6:fd:a6:ff:ad:d6:0d:2b:d3:e7:
5d:47:c3:84:9a:b3:58:e3:53:44:5f:67:3d:d1:e7:33:10:76:
d6:cf:ed:18:2c:80:04:3c:a9:3e:07:3e:07:ae:20:d1:90:53:
bd:ae:e5:90:29:bb:c5:9e:cd:b7:d6:30:0c:b5:5e:58:b7:36:
24:0f:c3:0a:db:75:ee:38:65:ed:e1:a9:b6:6b:51:d3:58:c0:
6c:bd:27:47:0c:00:72:ac:e5:d2:a4:1e:09:a3:5e:8c:7c:bf:
ff:98:2a:af:7a:89:81:d1:0e:f2:4b:d1:45:3b:f3:dc:bd:d5:
70:78:ec:57:06:7b:2c:df:01:89:71:6c:aa:cf:86:6b:3e:ab:
ee:01:ae:00:e2:ca:e8:c2:a8:13:f6:2b:b4:0e:07:8b:0a:36:
78:63:bd:0d:a6:7e:29:ca:b1:13:c3:d0:2f:9e:ce:04:df:17:
af:91:7a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:54:00 2025 by rpki-client