Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/Its4BnSHpXFZDmZKeWs41dyXF0w.roa
File: Its4BnSHpXFZDmZKeWs41dyXF0w.roa (raw, json)
Hash identifier: I0exd1ioRPZcSqHOLlVMFULwKFrJcS/UTwVO+ewUj0w=
Subject key identifier: 22:DB:38:06:74:87:A5:71:59:0E:66:4A:79:6B:38:D5:DC:97:17:4C
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01941FFA4E23A6F89DD76A9122031B5626C1
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/Its4BnSHpXFZDmZKeWs41dyXF0w.roa
Signing time: Wed 01 Jan 2025 03:48:05 +0000
ROA not before: Wed 01 Jan 2025 03:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44841
IP address blocks: 87.107.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:4e:23:a6:f8:9d:d7:6a:91:22:03:1b:56:26:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 1 03:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22db38067487a571590e664a796b38d5dc97174c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:65:bd:0e:17:ca:b4:f0:41:3c:97:46:4c:66:
ec:e7:d7:21:14:17:ae:36:78:be:bd:ba:68:a3:75:
67:6c:d5:52:dd:b7:47:88:31:da:ff:e7:4d:01:c4:
64:1b:17:82:dd:ea:d7:c7:18:bf:eb:01:ef:55:10:
59:7c:27:d5:82:2e:61:78:69:86:9b:45:6f:ce:cf:
82:6d:d0:5e:d1:2e:c2:90:e8:e6:8b:9e:55:52:d4:
1a:03:ee:fc:0c:c5:9b:12:65:bc:f8:97:f3:b2:c8:
f0:08:0b:03:96:16:79:aa:c7:94:0f:e8:ae:1a:95:
2f:bc:65:d3:6a:b2:98:08:b8:bc:53:d0:8b:fb:2d:
86:75:26:dd:30:35:73:0d:de:0c:14:4a:e3:6f:06:
52:6b:a2:f5:57:79:58:7b:ea:1e:43:03:ce:4a:17:
46:c9:31:8d:e1:f2:b6:02:a6:06:2e:e2:63:05:58:
0e:8c:db:d9:b2:d8:fc:e0:e7:b0:18:25:4d:b5:86:
d1:c2:30:87:35:c3:43:5b:1b:82:d5:e9:9d:ff:a3:
95:4b:4b:8f:20:07:bf:3f:c1:55:19:66:9e:44:0a:
65:13:d1:1b:1f:cc:af:80:c2:3c:5d:98:40:5d:af:
4d:33:d8:4a:85:75:86:53:c1:9c:8f:e2:b9:25:5a:
ff:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DB:38:06:74:87:A5:71:59:0E:66:4A:79:6B:38:D5:DC:97:17:4C
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/Its4BnSHpXFZDmZKeWs41dyXF0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.101.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:06:74:bf:e2:08:88:72:d5:a5:d8:43:80:d8:8a:63:ba:78:
e3:e4:2b:f2:c8:b5:7f:52:d3:f6:e6:89:9c:88:28:10:5f:6f:
da:5e:e4:cd:61:26:b2:a4:dd:34:3c:35:a5:cb:1c:ff:3b:8b:
4c:67:94:7f:9f:24:78:b2:6d:6d:5b:86:00:4d:d4:5d:4e:e1:
46:2d:e5:9b:25:00:7c:08:6b:c3:b8:70:cc:79:b0:e7:ba:97:
6f:dc:af:6d:02:44:20:5d:09:33:9b:e8:92:d9:16:33:fd:f6:
e9:5e:84:d1:17:1c:dd:78:fe:84:a6:6a:6b:14:a2:b2:a8:c5:
65:5a:be:44:6e:0a:73:c2:70:ec:ad:f3:21:d3:91:53:8e:f5:
16:33:db:56:6a:78:bf:83:82:d4:6c:98:e8:5e:b5:f4:b8:cc:
5d:5f:b3:f8:6f:29:3e:2f:15:bd:be:be:62:b6:1b:b8:7b:9b:
52:52:5d:8a:6a:a9:fa:c2:c9:ae:b0:96:a5:fb:fc:4c:0a:69:
50:06:83:3c:bb:56:80:13:ac:67:d8:07:c9:12:ff:6d:7c:00:
df:43:e5:83:8e:81:d3:91:1b:a8:2e:6b:3e:72:a6:78:d7:67:
5a:13:7c:97:28:45:9e:2c:94:17:9e:e1:ca:e7:57:bc:6c:7e:
a6:c0:4f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:45:06 2025 by rpki-client