Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/ICx-ivk-77JAp5-lQ-QiJJGZ8Ss.roa
File: ICx-ivk-77JAp5-lQ-QiJJGZ8Ss.roa (raw, json)
Hash identifier: BdDRb07YGDPaWoC55Oc/8a5oEIq3SyNG0FZ7kG7hpGw=
Subject key identifier: 20:2C:7E:8A:F9:3E:EF:B2:40:A7:9F:A5:43:E4:22:24:91:99:F1:2B
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01942369D040C8FC1AE41FC4FFD6D29E421E
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/ICx-ivk-77JAp5-lQ-QiJJGZ8Ss.roa
Signing time: Wed 01 Jan 2025 19:48:44 +0000
ROA not before: Wed 01 Jan 2025 19:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 185.192.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:d0:40:c8:fc:1a:e4:1f:c4:ff:d6:d2:9e:42:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jan 1 19:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=202c7e8af93eefb240a79fa543e422249199f12b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c8:ac:1f:3e:4b:9b:41:3f:70:72:93:49:25:
e2:8a:d2:c3:a3:5b:4c:34:48:d7:0e:29:ec:55:6e:
cb:5c:5a:c8:65:17:e4:55:57:8c:b7:6c:37:e6:09:
87:c6:cb:fc:cd:f8:8c:45:33:55:11:4e:2a:4b:ac:
d0:2e:62:6a:49:3b:b5:54:7f:bf:0e:7b:0e:1c:de:
90:79:72:a0:7d:49:9e:af:fd:24:a1:09:d0:da:64:
88:9d:00:97:0e:97:1a:1c:de:c6:33:2a:49:50:28:
65:61:56:c6:3c:ab:b6:a1:0d:3c:12:6e:65:a7:a9:
98:b1:29:62:ca:d3:1a:3f:6b:33:19:48:8e:8c:56:
d0:ee:c6:ba:58:7d:7d:e5:d1:a0:4e:49:ff:70:79:
ce:06:82:5f:1d:ba:25:6e:40:57:de:fb:27:df:68:
d0:b4:b0:73:77:42:93:9d:00:cf:63:b9:2a:e8:63:
4f:20:93:37:54:c9:b7:b1:3d:18:8d:3b:28:2b:e2:
97:10:c9:39:79:32:02:ec:c8:0d:fc:7c:ed:64:c8:
54:25:aa:79:cf:54:8c:85:b6:99:8e:c6:ee:0d:d3:
ea:61:4b:05:42:de:20:53:85:ab:9a:05:b9:ee:ab:
e5:2c:fa:ca:70:e0:c4:fe:97:42:ae:a0:a2:fb:4b:
99:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:2C:7E:8A:F9:3E:EF:B2:40:A7:9F:A5:43:E4:22:24:91:99:F1:2B
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/ICx-ivk-77JAp5-lQ-QiJJGZ8Ss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.246.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:d1:f5:85:fd:e6:b6:16:2e:f2:ca:43:32:78:6d:6a:f2:55:
6b:50:0f:4b:9a:ab:23:4c:7e:63:e8:c6:f7:d9:54:4f:28:28:
8e:29:59:08:2c:b1:3d:7e:a9:2d:ff:72:03:85:b1:65:21:3b:
b3:a5:a8:08:1e:8f:4e:07:83:aa:0a:c6:43:22:f9:09:f3:dd:
a7:0d:fa:0e:a9:a5:c7:26:b7:de:0e:ba:77:e9:92:b7:cd:e8:
de:08:e0:51:c2:a6:e4:83:eb:90:02:84:a6:af:6a:ec:e9:11:
a9:03:a3:a6:67:f8:ba:a1:1e:e2:52:f1:a2:a6:9b:e4:a0:73:
54:85:cb:c8:61:d0:61:80:97:eb:51:57:97:05:de:cc:8c:c8:
a4:d7:75:91:6c:cb:54:4a:68:2d:f4:b6:71:63:72:fd:6f:44:
dc:79:1a:df:79:d6:b8:b1:d1:91:7b:ae:eb:25:27:6f:90:a7:
48:cb:51:0f:a1:50:b8:86:cc:ba:bd:65:68:26:4b:17:df:7f:
59:92:dd:cf:28:a3:00:15:5a:e9:50:f8:de:10:81:4d:11:7c:
f0:f6:1a:02:82:28:33:f7:2a:92:2b:fe:4c:43:50:db:95:60:
b2:99:9f:5d:0e:cd:7c:6d:c9:c0:33:87:50:fe:e3:85:8f:1f:
f3:dc:26:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:28:46 2025 by rpki-client