Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/IwZ3Z1oDg1FS827JU1tSlj8eb74.roa
File: IwZ3Z1oDg1FS827JU1tSlj8eb74.roa (raw, json)
Hash identifier: yIwUb6bD8Yu/MZmIZhvd3q5td4NtibwxlrC7RDOCuHM=
Subject key identifier: 23:06:77:67:5A:03:83:51:52:F3:6E:C9:53:5B:52:96:3F:1E:6F:BE
Certificate issuer: /CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
Certificate serial: 01956587E5E366E1F3D696C79F9ED1BCAA64
Authority key identifier: FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/IwZ3Z1oDg1FS827JU1tSlj8eb74.roa
Signing time: Wed 05 Mar 2025 08:59:19 +0000
ROA not before: Wed 05 Mar 2025 08:59:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21101
IP address blocks: 91.240.230.0/23 maxlen: 24
94.143.96.0/21 maxlen: 24
185.5.94.0/24 maxlen: 24
185.5.95.0/24 maxlen: 24
193.109.32.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:65:87:e5:e3:66:e1:f3:d6:96:c7:9f:9e:d1:bc:aa:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
Validity
Not Before: Mar 5 08:59:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=230677675a03835152f36ec9535b52963f1e6fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:cd:c3:70:d8:f5:90:28:bb:ac:68:60:60:ab:
f9:90:f9:56:70:17:b3:a0:7a:dd:44:d7:c2:c7:ed:
a7:7a:84:99:e9:28:76:3a:cd:26:55:eb:9e:0e:a3:
5c:fc:ac:44:4c:27:97:5f:da:30:e0:96:7b:33:82:
84:f6:f2:9d:3d:1c:66:37:9d:76:90:e6:f0:88:a1:
05:ea:2e:d9:08:68:c3:53:cc:76:17:4c:b7:20:32:
38:f7:e5:64:ee:aa:02:a8:a1:27:c9:32:a0:94:24:
5b:ad:fa:94:ac:e6:bd:b6:02:27:80:6c:c3:d5:3f:
1c:1b:60:0e:03:44:c2:d0:4b:c7:3a:4e:0c:ec:48:
f2:8b:91:76:78:2b:d4:d9:2a:16:36:be:52:a9:09:
83:ff:b1:8b:e2:7a:0a:3e:a8:54:d1:d4:0f:30:fe:
35:e9:fb:74:15:ea:6a:61:7f:0f:78:fc:e4:2b:a2:
70:6f:d4:94:93:f2:42:27:d0:e7:db:ee:65:86:62:
b6:79:4a:6e:13:ce:83:59:a5:3b:e5:4b:1f:0f:2f:
25:85:e5:cd:3a:39:03:6c:b8:88:ff:82:0f:38:bb:
83:f8:cd:1e:9a:cf:8c:5f:e5:65:cd:56:e7:da:0f:
5f:a0:95:da:a5:7c:0a:35:fb:7d:0f:8b:67:02:4b:
97:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:06:77:67:5A:03:83:51:52:F3:6E:C9:53:5B:52:96:3F:1E:6F:BE
X509v3 Authority Key Identifier:
keyid:FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/IwZ3Z1oDg1FS827JU1tSlj8eb74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.230.0/23
94.143.96.0/21
185.5.94.0/23
193.109.32.0/21
Signature Algorithm: sha256WithRSAEncryption
17:92:a1:74:5f:ba:0b:66:83:1d:f9:d7:a1:d8:30:66:a9:71:
a2:b1:89:53:49:02:60:02:ed:4a:a0:a4:ec:25:23:e1:22:5c:
82:f4:75:9e:a6:a4:93:72:5a:b8:ea:23:92:41:95:89:60:7b:
35:01:d8:e7:df:9a:76:d7:64:43:41:0e:68:3f:84:93:fb:22:
a4:f3:9b:55:24:8b:19:18:9c:03:cb:96:04:22:b5:5b:8f:06:
24:82:89:11:4a:4a:ab:cb:06:5d:f2:7c:93:1c:ff:c5:b3:e8:
89:4d:67:57:fd:55:a6:b7:68:91:85:c1:a9:62:64:05:9e:00:
86:ff:76:c2:52:f4:8c:a6:56:c7:34:39:2e:40:c3:29:da:55:
3d:e5:bb:8c:16:99:de:c7:72:0d:43:54:91:91:e0:31:39:42:
6d:e1:2c:3f:34:c9:54:f8:2c:e7:01:e6:31:38:40:13:cd:68:
d4:e1:3c:07:bf:89:bd:06:db:04:2e:54:36:d0:bb:e9:21:ae:
25:47:9d:7b:d1:ab:63:62:9d:7c:1d:05:f5:0f:95:ed:a7:84:
b6:1d:75:07:af:b7:3f:40:af:8a:0e:a4:8f:d1:32:ed:43:f8:
71:2a:0d:98:c7:f6:30:42:9f:bc:87:e6:e1:a2:c0:45:a3:24:
c8:af:fd:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:17:00 2025 by rpki-client