Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/icyI7vtUu_VifuFeglKfEW94_GM.roa
File: icyI7vtUu_VifuFeglKfEW94_GM.roa (raw, json)
Hash identifier: GtavNKaMLIdLn9+Xx38qptYW+E+bTW1Tx9pUb3Adoq0=
Subject key identifier: 89:CC:88:EE:FB:54:BB:F5:62:7E:E1:5E:82:52:9F:11:6F:78:FC:63
Certificate issuer: /CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Certificate serial: 0194228D84005D14DD36623F6F0586719666
Authority key identifier: 04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/icyI7vtUu_VifuFeglKfEW94_GM.roa
Signing time: Wed 01 Jan 2025 15:48:07 +0000
ROA not before: Wed 01 Jan 2025 15:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12426
IP address blocks: 185.28.144.0/22 maxlen: 22
217.145.192.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:84:00:5d:14:dd:36:62:3f:6f:05:86:71:96:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Validity
Not Before: Jan 1 15:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89cc88eefb54bbf5627ee15e82529f116f78fc63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b7:e0:c0:4c:9b:2d:f8:c8:5a:50:e0:0c:f8:
14:67:b9:3c:cc:88:d5:5a:e2:ce:2d:3b:4d:88:6b:
7b:1a:51:2a:79:0e:23:16:92:90:b0:21:da:68:51:
9d:d8:be:9b:18:53:21:df:24:6b:25:06:1c:c5:d1:
0e:a1:92:f5:8a:8f:37:f7:98:b9:e6:26:ff:fe:f3:
04:8e:95:24:ee:be:63:88:7a:3c:e4:ee:6b:57:a8:
0f:62:4f:3c:01:44:e5:4a:99:4c:ec:e1:aa:07:c9:
95:da:cb:e2:70:4a:62:1a:c8:80:1f:5e:90:26:61:
13:8a:f2:3e:bd:d9:8f:f8:27:82:9a:64:94:b9:7c:
5c:e3:6a:12:7f:f0:60:2b:75:00:6c:b5:93:27:fe:
77:18:e3:2e:2e:d0:30:59:0c:0f:bb:91:ee:fc:89:
1a:06:1e:22:40:a9:20:40:7b:8e:01:fc:da:45:eb:
dc:52:53:e1:77:1a:df:9e:4a:83:8c:40:c4:60:fe:
89:8e:31:ff:39:08:2a:27:c8:18:23:58:68:20:74:
a5:c6:e3:a8:aa:b7:b3:58:c6:b4:df:f9:32:72:33:
98:76:a1:c6:8e:42:c8:dd:9b:12:cf:a2:db:bd:94:
c7:22:70:ed:92:b0:8c:fe:8d:07:14:bb:4e:f1:cd:
ac:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:CC:88:EE:FB:54:BB:F5:62:7E:E1:5E:82:52:9F:11:6F:78:FC:63
X509v3 Authority Key Identifier:
keyid:04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/icyI7vtUu_VifuFeglKfEW94_GM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.144.0/22
217.145.192.0/20
Signature Algorithm: sha256WithRSAEncryption
92:b8:dc:e0:78:45:8f:ee:06:11:25:43:89:c0:35:1f:24:c4:
4a:8d:dc:d8:c2:65:f0:bd:dc:3d:94:fd:81:11:d2:1d:cb:e1:
0c:35:7d:f1:f9:25:85:90:a9:9d:9e:c0:b5:2f:8b:cd:21:44:
8b:a0:30:be:ae:70:05:31:f7:bd:1b:d2:92:a6:12:6b:fb:0e:
ce:84:87:d2:b8:2c:e5:65:5b:de:b7:77:1f:04:60:fe:14:ac:
3b:a1:bf:51:a7:04:23:61:34:37:24:89:1a:24:b9:91:c1:02:
56:2b:58:c6:df:4c:5c:80:15:b7:a0:40:6b:67:01:ad:53:d7:
de:e3:c4:89:78:c2:6b:5e:d5:3f:76:4e:18:26:f1:c3:0f:23:
81:39:c1:06:05:9e:bf:ae:dd:0c:79:e5:de:3d:7e:a3:c7:84:
2c:5b:d4:c1:5c:3d:b2:9d:bf:0f:d9:e1:94:c2:e3:1d:07:df:
eb:ee:db:8c:3e:72:5f:e9:37:99:3a:e3:d2:ee:12:7b:68:ca:
85:a3:1d:e1:86:7d:b7:97:a8:e0:75:2c:e0:05:86:3a:71:2b:
9f:41:96:f4:e7:dd:91:90:7c:25:78:50:fb:88:7c:8a:72:2c:
7e:3b:56:1b:37:7c:76:e5:87:66:d6:bd:03:c0:30:34:52:fb:
2c:2a:1f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:20 2025 by rpki-client