Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/i9uIjjU6D0TwyVSI70dmfql9iHo.roa
File: i9uIjjU6D0TwyVSI70dmfql9iHo.roa (raw, json)
Hash identifier: W4IdRWUbeBHC71fWImIcXMTbu5XSxGV9Lki4EkTvVKk=
Subject key identifier: 8B:DB:88:8E:35:3A:0F:44:F0:C9:54:88:EF:47:66:7E:A9:7D:88:7A
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 019420D6560ADE0214B5D184DCAF75960B9A
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/i9uIjjU6D0TwyVSI70dmfql9iHo.roa
Signing time: Wed 01 Jan 2025 07:48:25 +0000
ROA not before: Wed 01 Jan 2025 07:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 74.124.204.0/22 maxlen: 24
178.216.184.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 02:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:56:0a:de:02:14:b5:d1:84:dc:af:75:96:0b:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Jan 1 07:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8bdb888e353a0f44f0c95488ef47667ea97d887a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:da:a9:b8:83:a7:41:34:1e:df:6d:57:44:f3:
70:ac:a9:08:c7:2a:4e:b6:ad:de:0d:dd:12:2a:f3:
85:5a:e9:15:b7:cf:42:3b:ab:85:14:6f:26:84:b4:
fd:8b:71:b1:e4:b4:3a:1d:cf:30:74:47:c9:30:cd:
f6:e1:63:89:eb:37:fb:9f:cf:c6:a7:90:39:8b:31:
13:0d:67:2c:9f:07:34:d9:5b:91:d3:64:f4:9b:6b:
1a:ab:1a:13:af:02:00:54:ec:06:ac:ee:86:46:d8:
4b:36:e9:bb:54:2e:98:1c:22:a7:25:0b:f7:bf:cb:
12:ca:98:e1:91:00:da:8e:ac:a3:30:86:78:46:2e:
09:5c:a9:39:2e:38:f2:59:8a:93:6d:c5:c4:f6:8a:
a5:b7:3e:c1:43:b2:5e:22:4f:3e:2f:57:84:48:00:
83:d2:f4:be:e6:b3:f9:9d:fe:7f:49:3e:d8:28:ee:
7a:b4:00:10:84:89:4e:8b:f8:b4:8f:0b:13:e8:b8:
a3:84:0c:84:3d:60:11:42:ef:26:63:4e:4c:05:a6:
73:93:73:82:34:c9:9d:4d:50:15:9f:ee:df:53:5b:
d9:79:05:9f:a9:6c:00:41:9e:9d:8d:57:fd:d0:2f:
e1:a0:71:e2:f4:ed:36:44:82:9b:f2:4d:1d:e7:3e:
fc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:DB:88:8E:35:3A:0F:44:F0:C9:54:88:EF:47:66:7E:A9:7D:88:7A
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/i9uIjjU6D0TwyVSI70dmfql9iHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
74.124.204.0/22
178.216.184.0/21
Signature Algorithm: sha256WithRSAEncryption
7d:51:98:19:25:0f:2b:d8:cc:67:46:42:7e:eb:da:67:a2:26:
0f:76:89:bf:31:69:6b:b1:d8:1d:d6:98:02:7f:bb:dc:f7:cf:
c2:4f:41:44:1e:ef:85:95:2f:52:e3:bf:70:73:59:a7:c7:15:
07:27:65:71:be:4d:f8:a3:1f:c9:28:b2:b3:41:0f:ac:90:a8:
8d:34:99:ce:d6:d4:4f:d1:53:10:c9:18:45:91:4f:59:7d:c8:
88:ec:b6:39:bd:dd:4e:df:f0:e5:f1:2d:59:e3:63:1d:db:16:
c6:3a:7f:7e:6d:41:0c:1d:26:e1:83:f1:79:30:1b:7a:49:9f:
d5:82:5f:38:5d:7f:f6:69:cd:63:e3:b4:a2:3a:f2:2d:01:53:
d3:ab:f1:6b:18:49:79:7d:51:6b:73:95:1b:21:b6:90:39:a8:
f4:3d:12:1a:f6:d2:36:62:96:d8:c5:e5:80:38:93:86:91:83:
8e:d1:bb:c8:3a:4e:ce:bc:5c:3c:ad:09:d4:03:87:16:d9:a3:
f0:6f:02:b9:2e:e7:de:9a:f3:f6:24:b9:8d:93:78:87:72:3b:
93:e3:49:01:ea:8e:77:2f:ec:e1:8a:6b:ed:cb:12:f4:50:80:
23:63:7f:7f:86:66:ad:a0:c1:3b:50:1d:51:56:58:ad:3d:5d:
2c:9f:3b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 11:42:41 2025 by rpki-client