Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/ic83PxAobxuOswBFck-YRl3xl5s.roa
File: ic83PxAobxuOswBFck-YRl3xl5s.roa (raw, json)
Hash identifier: b2hEd1qs+ywRwA/SKMeyaDMx96OzLoUUBDS6BjYhAik=
Subject key identifier: 89:CF:37:3F:10:28:6F:1B:8E:B3:00:45:72:4F:98:46:5D:F1:97:9B
Certificate issuer: /CN=297ae7592ca52491dc166a30fe1477d712bd465d
Certificate serial: 0194228DC83C15FBD2F2C42450CAEDEB37BE
Authority key identifier: 29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/ic83PxAobxuOswBFck-YRl3xl5s.roa
Signing time: Wed 01 Jan 2025 15:48:24 +0000
ROA not before: Wed 01 Jan 2025 15:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216234
IP address blocks: 94.159.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:c8:3c:15:fb:d2:f2:c4:24:50:ca:ed:eb:37:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ae7592ca52491dc166a30fe1477d712bd465d
Validity
Not Before: Jan 1 15:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89cf373f10286f1b8eb30045724f98465df1979b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:20:74:bc:69:fe:94:b8:60:d7:9e:99:58:e4:
19:b3:54:df:3e:b0:12:30:48:71:78:78:af:58:8c:
10:aa:a0:f1:44:92:56:bc:e6:9f:54:b8:51:bf:a1:
6b:ff:17:f5:05:21:7b:35:e3:e7:ce:02:9b:f6:e9:
36:1d:56:a9:c7:e4:a3:ec:f0:7b:f2:0a:9e:a5:00:
91:78:b2:9d:6e:a9:b5:2e:35:78:9a:ff:4d:3f:47:
11:a7:49:0f:73:fd:85:ab:b8:be:41:a1:21:90:42:
2c:e8:5e:83:57:a3:6c:e5:1e:35:dc:7c:c3:db:c8:
6e:08:33:75:ed:7f:19:52:16:64:39:89:11:9e:16:
78:15:ab:f9:b7:2f:d3:73:1a:10:b3:95:49:8a:45:
69:75:ef:e3:61:e9:25:70:a9:6d:fa:db:b4:4e:86:
d3:81:35:c0:3f:2a:5a:14:2f:6c:84:db:47:16:8f:
07:af:c2:95:b6:9c:aa:ed:2a:4a:19:b4:a8:e3:78:
1a:95:68:0a:c0:a9:60:40:88:54:46:85:de:41:6c:
08:cc:13:07:ab:4d:f3:41:bf:96:7c:43:e6:3b:64:
42:1b:98:ee:56:a5:e7:8f:29:92:b0:d1:cd:62:9d:
ab:a0:d8:91:de:33:a7:7a:24:a3:1e:9d:6b:0b:40:
bd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:CF:37:3F:10:28:6F:1B:8E:B3:00:45:72:4F:98:46:5D:F1:97:9B
X509v3 Authority Key Identifier:
keyid:29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/ic83PxAobxuOswBFck-YRl3xl5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.159.113.0/24
Signature Algorithm: sha256WithRSAEncryption
62:2e:97:84:0c:d6:93:60:26:46:bb:29:d8:ff:7d:61:16:0f:
72:e8:f3:0a:cc:34:00:85:b1:98:f4:e3:c2:55:c9:fe:b1:20:
11:a1:7f:d3:13:21:ba:45:c9:b5:3a:04:fe:01:92:bc:a3:01:
7b:04:4d:2c:a8:c1:4a:75:7b:9c:d6:02:66:e8:07:f8:a1:d5:
26:32:7b:42:a9:c8:e1:c7:0b:be:11:07:33:ee:62:d0:12:50:
c5:de:bc:5f:ab:7f:a0:ce:77:aa:64:67:0f:0b:97:4d:62:21:
cf:9d:90:70:12:ae:52:96:33:fc:65:78:78:7c:8a:5a:61:4b:
4a:5a:7c:77:c8:ee:d2:60:18:32:45:97:4e:3f:32:bc:18:36:
48:55:79:b8:f7:7b:b6:dd:b7:2d:3c:4e:2a:b5:41:48:72:bb:
d8:af:0b:be:fe:c2:19:b3:4c:37:d9:1a:cc:85:2e:ee:ae:6d:
6d:2f:e0:c7:47:a2:7d:a5:0f:a5:06:cc:71:0e:3a:47:04:83:
51:53:b1:e7:1c:2f:f5:f7:cf:37:4f:57:3b:f5:fe:50:fa:51:
88:60:06:a2:72:23:64:70:0f:ab:b5:99:05:b2:b3:4b:ac:34:
2a:6a:ec:47:e0:fa:48:3f:0c:34:7a:44:f2:4e:44:1a:e2:d2:
09:2a:f7:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:47:06 2025 by rpki-client