Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/IRoaOJIkLBDKrVOVprNQBGAD37Y.roa
File: IRoaOJIkLBDKrVOVprNQBGAD37Y.roa (raw, json)
Hash identifier: oTdraY2WYtGqGOmvH+XHlJQPDQCf68lpFTE9z9r1DiA=
Subject key identifier: 21:1A:1A:38:92:24:2C:10:CA:AD:53:95:A6:B3:50:04:60:03:DF:B6
Certificate issuer: /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Certificate serial: 019422FC15F20693760EBCE8DB5B49ABD730
Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/IRoaOJIkLBDKrVOVprNQBGAD37Y.roa
Signing time: Wed 01 Jan 2025 17:48:53 +0000
ROA not before: Wed 01 Jan 2025 17:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209163
IP address blocks: 185.204.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:15:f2:06:93:76:0e:bc:e8:db:5b:49:ab:d7:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Validity
Not Before: Jan 1 17:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=211a1a3892242c10caad5395a6b350046003dfb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d2:ab:88:d5:52:a8:b0:c0:76:da:3f:76:62:
01:c9:03:83:5c:61:f3:60:f1:24:a5:6f:79:e0:03:
04:06:d1:a6:65:0b:1a:4d:14:88:cc:26:ff:13:32:
50:31:5d:3b:96:f4:55:de:77:93:40:84:2d:3c:7d:
93:be:aa:92:9a:27:28:ae:ed:e3:c3:50:22:69:d4:
34:23:b3:56:cc:fc:b8:5e:53:69:54:5a:de:57:37:
20:8e:2b:75:b8:50:ce:85:59:a9:51:82:54:09:9f:
fa:9c:a6:fe:3d:71:6d:72:ed:b6:2c:58:5f:d7:04:
79:41:b2:0a:75:e7:61:83:a4:ad:fa:51:10:22:23:
ab:a3:f6:21:f5:d1:b0:0a:bd:d0:00:9d:c7:d5:d2:
c0:99:ad:6c:0c:d1:8f:b9:32:68:8d:48:b3:47:dd:
81:39:f4:fc:cf:6f:ef:67:81:8e:b8:3b:b4:51:13:
09:c0:c1:93:0f:ad:20:f9:2e:92:b3:69:5a:6c:ce:
23:c0:7e:09:e4:91:2c:76:b9:a8:41:2f:16:f1:c4:
e6:ec:59:6b:3c:1b:02:66:ba:85:01:ef:d8:90:c3:
67:4e:a2:58:d9:5f:89:79:b8:53:b9:89:9d:41:5c:
90:50:ca:16:c9:ad:e9:d0:47:27:96:4e:ef:ff:41:
96:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:1A:1A:38:92:24:2C:10:CA:AD:53:95:A6:B3:50:04:60:03:DF:B6
X509v3 Authority Key Identifier:
keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/IRoaOJIkLBDKrVOVprNQBGAD37Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.162.0/24
Signature Algorithm: sha256WithRSAEncryption
92:e9:a5:e5:15:8c:4a:8f:9b:c9:0b:0a:d7:3a:0f:38:b0:5a:
94:5e:2f:f9:68:f2:05:54:f5:f6:c3:7e:d0:7d:64:62:90:2a:
3a:4e:8f:2b:74:48:b6:62:16:08:c5:17:8f:b5:2f:00:81:62:
63:a8:c1:f6:e0:ef:73:70:68:e9:89:9f:86:1f:43:17:27:a2:
eb:55:5c:df:67:58:04:30:d0:44:c2:90:07:8f:3e:8f:86:10:
95:92:f9:5a:45:5d:3a:7e:21:57:36:b2:fc:a4:44:66:2a:79:
70:1e:df:85:c0:90:bb:f3:a2:26:b3:57:e9:04:38:c4:b9:db:
80:fc:26:67:16:67:57:cd:6b:b6:ed:b1:a8:be:85:f5:0c:91:
a6:c4:cf:49:b9:a3:7c:5c:48:c8:7e:68:f4:d8:68:8e:3b:6b:
a4:d1:56:42:c8:79:4e:0d:61:75:d8:a5:3b:67:56:ae:04:38:
b0:28:eb:4b:ec:5c:c3:50:05:f2:0e:c4:12:13:4d:6f:25:ef:
00:52:7e:43:da:ff:6e:f2:61:27:36:01:20:84:82:52:c1:2f:
8a:bc:51:3e:0c:c1:19:9e:c5:c4:ad:5b:13:1f:f1:1e:12:ff:
3b:29:5c:d6:47:3e:0a:30:6e:9f:47:65:dd:46:db:a3:44:3e:
f8:c2:38:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:05:45 2025 by rpki-client