Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/iTqpEkl-lcj0N6m7BZs9Lk7HiU8.roa
File: iTqpEkl-lcj0N6m7BZs9Lk7HiU8.roa (raw, json)
Hash identifier: t7CVGH452v08LVWv1r77XyiZ2suZjRPeux6bG0wnJ/s=
Subject key identifier: 89:3A:A9:12:49:7E:95:C8:F4:37:A9:BB:05:9B:3D:2E:4E:C7:89:4F
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0194236A57EEFE9D227C920A3CEFF62871CE
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/iTqpEkl-lcj0N6m7BZs9Lk7HiU8.roa
Signing time: Wed 01 Jan 2025 19:49:19 +0000
ROA not before: Wed 01 Jan 2025 19:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213279
IP address blocks: 2.57.252.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 11:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:57:ee:fe:9d:22:7c:92:0a:3c:ef:f6:28:71:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 19:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=893aa912497e95c8f437a9bb059b3d2e4ec7894f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ac:7c:fe:9f:a9:51:07:f5:60:f2:db:56:77:
cc:5c:53:f8:46:c6:da:dc:c0:b6:54:47:5e:32:cd:
04:39:cb:a2:8c:e1:27:22:20:d3:64:d8:f1:c7:22:
1b:ac:af:8e:70:12:5a:01:05:f0:5d:ff:d3:a6:24:
f2:56:3e:02:39:01:35:2a:d1:8e:0f:02:f2:31:70:
e1:bf:08:85:4a:d2:8b:0a:07:0c:d3:18:ad:74:29:
15:c3:c6:af:2f:83:6d:8f:9f:01:83:47:41:dc:32:
82:ac:8f:39:66:ed:bc:39:28:07:21:1b:2f:da:fc:
f6:9f:59:c1:2a:3f:ed:e1:48:3a:20:07:02:ca:83:
b0:d6:fc:61:c3:f6:8e:43:87:5e:91:0b:c1:b1:96:
9e:12:37:ea:55:0a:92:ed:53:9d:f2:9f:23:85:9d:
3f:c3:45:ce:7b:8d:aa:69:4c:62:d1:af:28:a5:b4:
b0:85:04:12:63:f5:12:d9:97:26:f4:35:15:f1:6e:
b6:20:e2:2c:3d:4e:47:6a:4d:df:ed:0a:26:30:73:
bc:43:ab:df:2c:05:4c:66:62:e2:91:a4:d6:69:fc:
4e:1a:9e:f2:8f:ec:be:11:aa:84:1c:74:b9:13:79:
82:95:6d:ef:4b:4f:a1:2c:30:37:30:eb:50:fd:78:
03:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:3A:A9:12:49:7E:95:C8:F4:37:A9:BB:05:9B:3D:2E:4E:C7:89:4F
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/iTqpEkl-lcj0N6m7BZs9Lk7HiU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.252.0/24
Signature Algorithm: sha256WithRSAEncryption
70:5e:eb:e9:26:f2:7d:41:fe:9b:30:24:bf:c4:22:c3:a1:70:
fc:50:8c:f7:36:b2:f1:7e:a9:0d:2b:2b:bd:c7:6d:4b:bd:ed:
dd:e3:48:57:93:1d:b6:ec:06:82:8e:5c:a0:95:ac:b0:cf:f9:
0e:ef:be:51:07:81:0e:db:7f:f4:25:9e:17:fc:4b:bc:c5:f1:
74:d1:d2:58:e2:da:ed:3d:18:ae:48:7b:07:a2:11:77:56:89:
db:af:70:fa:91:e5:d1:2a:d8:e5:3b:10:6e:bf:79:cd:23:99:
bb:85:9f:f6:05:8e:7b:b0:7d:61:76:91:84:97:70:a2:20:4e:
ef:e4:f3:1d:5c:af:f3:bb:17:57:b1:bc:ef:3d:d5:91:3a:76:
8f:4d:8e:3c:a4:c7:76:18:c6:ac:04:4e:e6:da:dc:e5:b9:2f:
6e:2c:6f:a9:8a:9d:e3:75:43:1e:15:16:dd:3d:5f:74:7b:7b:
c5:39:ed:80:db:97:57:94:70:12:9a:2f:d5:c8:25:ef:72:0d:
01:99:8f:af:79:6c:3d:1f:86:52:b6:18:f0:9b:eb:30:e9:23:
f5:a7:4c:8c:7d:6a:e5:af:29:cd:54:d6:64:e2:fc:74:d2:54:
2a:ed:3a:f0:8c:2d:77:aa:ae:4c:b2:7a:03:7e:76:68:45:d2:
af:1c:c2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:47:26 2025 by rpki-client