Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/iAzdsnC_l6rdd2kZ6hvA3HRXqCU.roa
File: iAzdsnC_l6rdd2kZ6hvA3HRXqCU.roa (raw, json)
Hash identifier: sMPWtnAj59EVmsTaMYwCg3wIrLPxpEslb0ZjPRwWR6w=
Subject key identifier: 88:0C:DD:B2:70:BF:97:AA:DD:77:69:19:EA:1B:C0:DC:74:57:A8:25
Certificate issuer: /CN=d45bab208653d4261ebf202f6036334119846055
Certificate serial: 019421B1BC95445848034FA517747FA6B0E3
Authority key identifier: D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/iAzdsnC_l6rdd2kZ6hvA3HRXqCU.roa
Signing time: Wed 01 Jan 2025 11:48:03 +0000
ROA not before: Wed 01 Jan 2025 11:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41735
IP address blocks: 185.46.69.0/24 maxlen: 24
193.37.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:bc:95:44:58:48:03:4f:a5:17:74:7f:a6:b0:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bab208653d4261ebf202f6036334119846055
Validity
Not Before: Jan 1 11:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=880cddb270bf97aadd776919ea1bc0dc7457a825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6e:25:41:14:1b:d6:ad:79:22:27:a6:41:2a:
ac:70:51:56:17:d1:b7:42:88:62:6b:6e:78:0f:72:
aa:b0:4e:71:72:52:22:3a:70:70:08:08:05:c8:75:
f6:36:29:65:6e:bf:64:2e:a0:ab:2b:16:bb:73:5f:
7a:f1:82:5f:26:a8:f9:57:e7:62:c8:02:61:8e:d1:
9d:df:82:8d:d3:6a:29:90:e2:64:4a:16:f1:a6:b7:
b5:19:91:7c:78:08:12:11:b5:40:be:f6:a0:c3:35:
30:19:41:5d:45:32:bb:e0:b0:a5:93:a9:d4:bc:40:
2c:84:11:a5:86:b9:f6:20:de:84:3d:bf:6d:cf:12:
45:96:bc:f1:34:04:20:d2:90:fc:ae:87:19:09:dc:
0b:5f:96:48:eb:7b:4e:ac:e9:78:1a:45:d7:1e:f5:
fe:d5:80:e7:0c:78:ce:f1:6f:51:3c:92:e3:24:17:
bc:de:16:17:62:fe:cd:07:e5:e5:33:5e:b5:01:d5:
57:89:84:a5:f8:6d:7b:8a:2e:43:fe:73:e0:e7:0c:
e7:0a:bc:81:d9:00:73:fb:df:77:16:28:ea:c6:83:
93:97:c9:57:2d:4a:7b:99:18:bb:9c:77:13:4c:f9:
2e:eb:db:33:f7:7d:90:45:03:da:80:1a:83:7a:a1:
2d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:0C:DD:B2:70:BF:97:AA:DD:77:69:19:EA:1B:C0:DC:74:57:A8:25
X509v3 Authority Key Identifier:
keyid:D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/iAzdsnC_l6rdd2kZ6hvA3HRXqCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.69.0/24
193.37.135.0/24
Signature Algorithm: sha256WithRSAEncryption
68:02:87:7e:a1:14:51:8c:3d:8b:ef:37:20:3f:ce:28:7e:63:
03:ce:9e:c6:13:48:4e:5d:e0:ba:fc:61:1e:e1:ca:5f:df:55:
cb:4a:16:a6:c1:01:f9:7b:68:92:17:ce:d9:d8:08:3a:38:b2:
b6:75:07:cd:01:89:bc:8c:88:18:bc:17:64:0d:4c:ac:d9:1c:
87:5b:f3:d3:27:ee:e6:82:7c:e3:a1:c7:5f:f8:13:40:22:b8:
18:4c:59:1b:f2:c3:fe:50:fe:f8:fe:46:16:2b:40:72:dc:23:
16:3e:2c:f5:5e:e1:08:ca:5d:98:4d:a7:40:b1:b3:ea:5c:56:
7c:be:6f:a8:95:29:cc:b1:95:af:76:99:64:1c:c5:f9:58:0a:
b5:bc:d8:d8:25:ea:1a:df:08:dc:b0:63:0c:5a:93:55:55:fb:
8a:d0:55:29:f2:22:31:e0:ae:b4:ec:3d:f1:4b:1f:3f:2d:e5:
fc:33:98:68:11:2a:f1:1b:db:ac:f3:4a:65:75:b9:62:a2:a6:
3d:4e:ef:b9:c2:ae:d1:07:0e:0c:ce:df:15:7d:f0:7f:e5:df:
e0:b7:e1:0d:31:9d:73:96:c6:4f:99:4a:ae:be:b0:c8:0c:43:
15:32:7b:8e:c3:6f:91:e9:25:40:fa:0a:95:f9:3f:f7:74:40:
d8:8a:0e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:10:41 2025 by rpki-client