Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/IrnlAQa6M1A96HHiDasRUfVGqbQ.roa
File: IrnlAQa6M1A96HHiDasRUfVGqbQ.roa (raw, json)
Hash identifier: xgq5FcKSqvltS9tf8414o9TbLoeW+VIxwonV5uaPruw=
Subject key identifier: 22:B9:E5:01:06:BA:33:50:3D:E8:71:E2:0D:AB:11:51:F5:46:A9:B4
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 019422FC08B93429A2448F243B05F7974909
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/IrnlAQa6M1A96HHiDasRUfVGqbQ.roa
Signing time: Wed 01 Jan 2025 17:48:50 +0000
ROA not before: Wed 01 Jan 2025 17:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 109.72.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 11:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:08:b9:34:29:a2:44:8f:24:3b:05:f7:97:49:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jan 1 17:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22b9e50106ba33503de871e20dab1151f546a9b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d0:dc:dc:39:fd:70:b4:b3:ce:f8:a5:92:22:
fc:63:85:fa:25:67:2a:70:ce:52:e8:e0:05:1f:34:
c9:1d:db:2d:a3:50:d1:fb:ed:b0:28:eb:98:90:d0:
4c:63:e6:dc:0d:ee:f5:ec:d7:20:99:a9:9f:e8:a5:
40:a7:4c:f6:33:0e:55:33:b5:bd:e0:0e:c0:73:0d:
41:61:31:ed:bd:82:92:0a:40:18:7f:d7:c6:1a:3d:
7b:0a:09:41:ce:94:43:aa:e2:bb:f9:2b:05:a3:0c:
27:81:54:9d:ab:4a:dd:a1:49:de:a0:5a:4c:82:f6:
25:d1:b6:84:e8:da:84:e2:66:3f:f1:22:05:36:fe:
c3:f1:c9:78:fe:63:09:37:88:66:f6:62:37:9a:eb:
b5:b0:ec:6a:83:ea:db:8b:d7:23:62:3c:1a:f5:46:
00:a2:ec:53:cc:80:bb:a2:3c:c4:e7:83:ae:11:ea:
23:6a:9f:e4:8b:d4:87:54:d9:6d:33:b8:32:26:66:
f0:f3:3f:42:fc:63:45:5c:71:a4:8e:fd:67:f9:80:
c0:4e:d9:45:99:f6:6f:43:85:b5:1f:2d:6c:e7:ed:
1a:50:61:04:02:9d:3f:8d:3a:0d:16:44:b3:71:b2:
ab:93:e7:bf:8b:a5:9b:e4:72:78:09:35:1f:fe:57:
59:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B9:E5:01:06:BA:33:50:3D:E8:71:E2:0D:AB:11:51:F5:46:A9:B4
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/IrnlAQa6M1A96HHiDasRUfVGqbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.72.116.0/24
Signature Algorithm: sha256WithRSAEncryption
04:a2:45:64:32:95:1d:84:3d:4c:cf:83:43:38:82:e3:1f:07:
5e:e0:b7:cb:03:34:5c:4e:a4:4b:3a:fd:53:9e:6e:34:9a:bc:
49:23:e3:fa:88:19:35:13:25:a5:b3:77:fe:c6:75:e2:2a:05:
6d:9b:4c:18:19:40:15:28:ac:d4:29:2c:62:d8:1e:38:d3:b5:
44:e7:65:f3:a3:5b:cd:f2:74:d9:26:07:4a:ba:1f:61:a9:f5:
81:3a:54:86:5e:87:56:0c:fb:80:3f:65:e9:b2:8a:31:20:be:
9b:1c:60:4e:00:0c:30:11:2e:f4:52:9c:b1:eb:1f:de:9a:09:
d7:52:71:ab:db:e3:f2:fe:ba:e6:e9:8b:c7:da:36:b1:5e:1c:
9e:fc:84:d6:06:32:34:81:6a:ae:16:d8:6a:c2:9d:0e:a6:0a:
ee:23:20:4f:47:06:08:76:29:fa:f5:70:d8:db:52:37:e2:5b:
f2:92:28:04:cc:76:61:30:e5:2c:24:53:75:e1:44:e0:1c:bb:
39:9a:75:1c:08:6f:a6:8f:90:d9:cf:52:1f:b8:2d:13:23:96:
8c:00:fa:77:03:a5:02:36:ce:c3:03:7b:0e:f0:c5:63:1d:52:
6b:1d:9f:9e:5f:92:93:90:81:fd:3d:9f:c6:55:1f:2e:66:7f:
9e:9d:aa:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:37:27 2025 by rpki-client