Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/i4EQYuoWPg29IGyJUrt8UFlArZE.roa
File: i4EQYuoWPg29IGyJUrt8UFlArZE.roa (raw, json)
Hash identifier: VWxNzUjZJvoFZBSQw557/R4uZFeAkMAjaY6WhMnVv3o=
Subject key identifier: 8B:81:10:62:EA:16:3E:0D:BD:20:6C:89:52:BB:7C:50:59:40:AD:91
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019524710A2A780DD355A1EB216EAAC2B1BE
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/i4EQYuoWPg29IGyJUrt8UFlArZE.roa
Signing time: Thu 20 Feb 2025 17:39:02 +0000
ROA not before: Thu 20 Feb 2025 17:39:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213596
IP address blocks: 77.239.126.0/24 maxlen: 24
193.23.222.0/24 maxlen: 24
193.23.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:24:71:0a:2a:78:0d:d3:55:a1:eb:21:6e:aa:c2:b1:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Feb 20 17:39:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b811062ea163e0dbd206c8952bb7c505940ad91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:89:1f:ab:7c:94:e4:0b:9f:c4:b5:12:a1:b1:
06:01:ae:00:8a:b9:e0:de:41:43:a5:07:e6:55:67:
08:ed:47:aa:0a:c0:9a:21:2c:3a:6e:c5:a4:01:ad:
b8:1a:1b:b0:fc:06:bf:e2:30:83:54:1d:26:5a:e2:
2c:f6:7b:45:f5:46:ab:9b:c7:97:7d:80:61:67:73:
33:39:82:38:f2:12:16:da:e6:bd:fc:2b:93:6b:98:
7f:ec:16:c1:a1:11:2b:3d:43:8e:fa:76:8a:60:a5:
16:6a:ba:26:12:04:19:00:78:c0:b0:84:a6:d9:c8:
af:c3:c8:df:cd:37:6f:d1:ea:ba:1b:7f:98:51:45:
6c:17:ea:8a:2d:c4:4a:68:7f:fc:73:5f:9c:8b:92:
89:2b:f3:11:00:61:d4:c2:6a:14:bb:47:d6:9f:4e:
70:a4:77:70:53:26:fa:ef:a0:66:6d:2f:e9:83:d4:
b7:6b:4d:7d:cd:16:c6:19:46:12:65:cb:bf:99:24:
a2:71:e2:23:bd:3b:a1:e7:41:40:a0:be:41:84:66:
24:66:ae:ec:fe:42:f0:29:3a:35:bf:cb:19:2e:fe:
31:81:3b:12:7b:0a:c0:d2:19:88:29:8a:2b:3e:2b:
67:5e:51:02:18:e6:57:46:86:01:a2:ab:b6:93:0f:
af:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:81:10:62:EA:16:3E:0D:BD:20:6C:89:52:BB:7C:50:59:40:AD:91
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/i4EQYuoWPg29IGyJUrt8UFlArZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.239.126.0/24
193.23.222.0/23
Signature Algorithm: sha256WithRSAEncryption
73:d8:b9:c4:25:41:98:fb:59:6d:c5:5d:6b:21:ed:5a:97:19:
e1:3e:af:dd:71:cf:6b:35:24:4e:03:d7:ec:c1:77:28:21:c2:
59:b2:70:91:ee:42:c3:0b:90:7e:62:6a:31:e9:b7:b5:ee:b8:
1f:11:3d:f1:9e:09:8d:87:ee:0b:45:3e:56:9e:2a:2b:fc:b1:
23:66:2b:b7:c9:70:9b:d6:16:b0:91:83:75:17:be:15:2f:98:
92:79:5c:7d:11:f6:cc:1e:d4:b4:de:7c:53:b0:bd:a1:9c:3b:
ee:b5:84:05:27:ed:25:e2:32:ea:88:0a:06:21:77:eb:37:56:
13:4d:d6:86:73:e3:64:32:b6:da:6f:84:fd:0a:85:36:aa:8f:
71:61:66:7e:88:6e:d6:33:67:84:aa:76:92:e4:2a:e5:da:3b:
9f:0b:61:87:25:96:de:d9:6b:0c:30:28:59:8d:68:c2:46:6b:
37:93:72:c8:b6:d7:96:6e:a2:3a:87:3f:af:09:ad:16:20:7a:
38:89:05:a0:3d:1c:52:8d:5c:47:7f:24:9a:69:57:ac:b7:29:
b8:3f:84:aa:29:90:ac:cb:c5:74:b1:d3:e1:a3:17:20:8c:98:
8c:88:d5:bd:ca:cf:48:81:66:b7:94:df:c8:1a:bd:9a:bc:a3:
1a:f3:9a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:09:15 2025 by rpki-client