Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/IlHeExFCZOwDVGR-pn-Mj6btqHA.roa
File: IlHeExFCZOwDVGR-pn-Mj6btqHA.roa (raw, json)
Hash identifier: G3OUewbUbdIfclHozVugqBGDnmkGwJv9DxeJNbUzFpM=
Subject key identifier: 22:51:DE:13:11:42:64:EC:03:54:64:7E:A6:7F:8C:8F:A6:ED:A8:70
Certificate issuer: /CN=cb989d2e15201b20e34088dd1c0455b25444f8fc
Certificate serial: 0194266C3B1826920BFD98A6EB00DC572ADC
Authority key identifier: CB:98:9D:2E:15:20:1B:20:E3:40:88:DD:1C:04:55:B2:54:44:F8:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/IlHeExFCZOwDVGR-pn-Mj6btqHA.roa
Signing time: Thu 02 Jan 2025 09:50:14 +0000
ROA not before: Thu 02 Jan 2025 09:50:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209279
IP address blocks: 31.41.35.0/24 maxlen: 24
195.182.38.0/24 maxlen: 24
2a12:3ec0::/48 maxlen: 48
2a12:3ec0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:3b:18:26:92:0b:fd:98:a6:eb:00:dc:57:2a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb989d2e15201b20e34088dd1c0455b25444f8fc
Validity
Not Before: Jan 2 09:50:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2251de13114264ec0354647ea67f8c8fa6eda870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:90:7c:a6:0b:b9:3e:73:50:b3:31:b5:2f:28:
97:a6:3f:7a:2a:1d:73:80:bf:3c:5f:25:3c:9c:d3:
b7:de:74:91:d6:9c:6e:81:ab:3f:13:83:76:64:2e:
b1:31:62:a9:12:50:04:b1:3f:ac:a5:31:d4:8b:44:
c9:50:3b:04:b9:be:21:36:7f:91:e4:dc:53:ec:de:
07:a7:bc:25:9d:b2:8f:9b:f5:2e:f1:a3:a6:ab:69:
7f:2b:0a:57:e5:df:e7:9a:da:46:e3:75:e7:11:1e:
6f:1f:75:a4:92:d1:e3:f3:d1:cd:cb:31:83:f5:4c:
6d:64:84:64:33:26:81:59:9a:5a:55:5d:3e:64:0b:
94:8e:02:11:34:2e:98:cf:8a:14:db:e1:f0:14:29:
dc:2a:99:20:67:93:64:b5:1c:97:f5:e5:d9:11:35:
90:da:f6:84:51:9a:df:20:fe:d0:ce:8a:90:08:76:
0a:48:75:9c:f2:1d:02:58:d2:0b:b5:74:db:5b:94:
ee:eb:13:63:ea:de:dc:59:b9:36:20:18:f1:65:3a:
65:ae:31:e8:38:95:9b:19:8b:ba:6c:1c:93:ed:88:
03:a1:2b:56:db:99:d5:d1:9c:19:11:5a:e1:02:75:
24:a0:4c:34:9f:80:52:9c:68:0d:8f:87:4f:66:49:
65:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:51:DE:13:11:42:64:EC:03:54:64:7E:A6:7F:8C:8F:A6:ED:A8:70
X509v3 Authority Key Identifier:
keyid:CB:98:9D:2E:15:20:1B:20:E3:40:88:DD:1C:04:55:B2:54:44:F8:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/IlHeExFCZOwDVGR-pn-Mj6btqHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.35.0/24
195.182.38.0/24
IPv6:
2a12:3ec0::/47
Signature Algorithm: sha256WithRSAEncryption
5e:80:d6:31:b9:47:69:d4:08:cc:7a:b9:c0:48:0b:49:49:96:
66:87:54:3b:af:5d:d2:18:f2:b6:6d:d9:3b:e2:ec:ac:ac:3c:
05:ff:3e:ac:4c:9d:67:51:10:58:65:93:fc:08:17:f6:f5:fe:
2a:e6:99:e4:65:30:ae:b7:b3:ea:62:44:d1:66:c5:f5:11:6d:
57:85:aa:b5:96:63:d5:ca:fa:09:f8:98:6f:a7:b0:87:51:ef:
b2:d5:9c:9a:4e:a1:37:76:38:bc:a9:67:7b:15:fe:d6:3d:96:
6e:aa:a7:21:54:30:da:aa:ec:16:8a:8d:73:30:8c:00:bb:36:
3d:60:86:47:af:a0:d1:99:b5:71:4f:2d:3e:0a:67:61:5c:30:
96:68:7c:c7:96:75:35:b5:75:8e:41:b2:02:df:95:e7:0a:49:
88:f5:bd:49:36:13:65:7e:74:e0:00:b8:bc:66:1c:4c:78:c5:
56:65:db:80:70:63:23:ae:63:1a:a0:47:cc:38:d3:5e:86:2c:
17:b9:79:72:99:53:c3:3e:5f:1a:f8:d1:68:0c:d2:b8:be:76:
80:9e:20:c8:bb:c3:9d:95:1b:83:74:4d:64:fe:77:a8:fe:0a:
b9:e4:53:f9:a6:2a:bd:1a:f0:69:d9:f5:e2:94:19:cb:7c:77:
02:68:0d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:10:28 2025 by rpki-client