Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/IcpkOjSEdct2s9Oo9Y6kM2c6zrk.roa
File: IcpkOjSEdct2s9Oo9Y6kM2c6zrk.roa (raw, json)
Hash identifier: eZVMo8nGYbFBDZkjp3vq6nPFjMhYIl7hG/zb3qGBRaY=
Subject key identifier: 21:CA:64:3A:34:84:75:CB:76:B3:D3:A8:F5:8E:A4:33:67:3A:CE:B9
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01941FFA50D498569705B71DF4A6829C7E97
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/IcpkOjSEdct2s9Oo9Y6kM2c6zrk.roa
Signing time: Wed 01 Jan 2025 03:48:05 +0000
ROA not before: Wed 01 Jan 2025 03:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51431
IP address blocks: 87.107.102.0/24 maxlen: 24
87.107.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:50:d4:98:56:97:05:b7:1d:f4:a6:82:9c:7e:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 1 03:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21ca643a348475cb76b3d3a8f58ea433673aceb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7d:88:8c:c0:64:2a:0e:50:ad:97:d8:07:bc:
82:f0:49:3b:b3:f9:9e:0d:e3:47:b2:9b:f4:84:9a:
7b:ea:d1:eb:1b:bd:e6:a8:81:c9:6e:7e:f8:3e:05:
92:82:21:fb:e1:94:75:68:cb:5c:b5:7f:f6:75:f8:
ca:43:4e:d5:fa:d4:4a:ab:b0:0a:50:bc:9f:e0:fd:
f1:c1:89:6c:9d:60:26:ea:b7:55:7f:57:8b:bd:c7:
5d:d6:05:f9:07:d4:c6:ab:47:31:ea:60:1c:b9:25:
f8:11:ba:c6:41:a2:d0:d5:ff:ec:51:0c:e9:38:25:
1f:c1:49:66:22:65:82:57:1a:08:b9:3a:c8:20:71:
d0:25:e2:bd:24:53:17:ea:6f:26:d8:04:dd:a3:95:
89:16:0a:b8:84:8e:ef:5b:26:6c:e0:45:7d:99:91:
9f:7c:69:a6:4f:a2:ce:50:89:63:aa:12:e8:84:9b:
a4:ac:20:0c:a2:ea:54:8e:02:17:d3:72:29:3b:b5:
4c:b8:40:f0:f6:2e:aa:14:da:30:8e:bb:4e:c9:85:
46:a5:ce:7b:a5:24:6b:3b:ea:e5:50:e0:51:57:43:
9e:95:e8:a0:60:76:d0:9c:6a:ac:47:c1:dd:5c:ba:
cc:24:52:56:3f:14:19:8c:37:26:fa:f2:cd:a3:66:
2f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:CA:64:3A:34:84:75:CB:76:B3:D3:A8:F5:8E:A4:33:67:3A:CE:B9
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/IcpkOjSEdct2s9Oo9Y6kM2c6zrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.102.0/24
87.107.172.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:c3:5b:eb:33:b3:4b:1b:c5:47:b4:66:ba:6d:b2:b2:03:1b:
dc:fc:95:59:5e:6d:04:77:78:dc:95:e7:b2:1c:0e:81:1c:09:
d7:e9:ac:11:c0:79:53:c3:80:f2:92:40:b1:07:db:dd:31:a7:
0d:25:69:b5:c1:95:b6:29:23:29:41:c9:6b:3b:83:19:ba:66:
db:4c:9c:f6:22:1b:e3:17:75:9c:35:d3:30:21:57:63:aa:f0:
7e:81:4e:ad:b3:8c:45:02:28:ec:11:a0:2c:2f:ca:75:d2:34:
8a:e2:75:f6:ca:a5:2c:81:b8:a1:b4:12:5d:57:83:7f:9c:29:
b3:f8:88:8f:be:ac:21:0d:f6:a2:05:93:5d:f6:34:0d:72:3a:
83:98:91:74:2e:c4:c2:4c:29:a7:34:70:93:8e:64:1a:78:91:
c4:21:a4:4f:bd:78:cd:f1:60:47:19:ea:ff:b9:8a:8d:a6:92:
97:16:3d:0a:18:b4:a7:bd:f2:04:99:e6:ea:2a:11:76:e9:f0:
8c:28:46:10:ce:e7:71:e4:43:70:d3:57:bf:7e:a1:d7:ea:40:
95:c4:21:2e:39:c2:c2:db:ad:e1:87:d3:57:64:bd:7e:77:ec:
10:14:50:1e:d4:d2:35:85:df:fe:c5:00:a1:fb:99:4c:5a:2f:
b7:9b:28:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:32:48 2025 by rpki-client