Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/IVq_YZ1jGuMcDD4JRK3mmzzTW3o.roa
File: IVq_YZ1jGuMcDD4JRK3mmzzTW3o.roa (raw, json)
Hash identifier: sPByzBItFj1JqphVomCmYz50m1zlhsIta4Uhmwr6ALo=
Subject key identifier: 21:5A:BF:61:9D:63:1A:E3:1C:0C:3E:09:44:AD:E6:9B:3C:D3:5B:7A
Certificate issuer: /CN=74f9369c6e23c1bf0dbed301c7d00b4a3fdf0d04
Certificate serial: 019424B380FB2750EFE6186C0F8E57F33695
Authority key identifier: 74:F9:36:9C:6E:23:C1:BF:0D:BE:D3:01:C7:D0:0B:4A:3F:DF:0D:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/IVq_YZ1jGuMcDD4JRK3mmzzTW3o.roa
Signing time: Thu 02 Jan 2025 01:48:51 +0000
ROA not before: Thu 02 Jan 2025 01:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 680
IP address blocks: 130.73.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 04:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:80:fb:27:50:ef:e6:18:6c:0f:8e:57:f3:36:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f9369c6e23c1bf0dbed301c7d00b4a3fdf0d04
Validity
Not Before: Jan 2 01:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=215abf619d631ae31c0c3e0944ade69b3cd35b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c5:3d:24:f4:5b:6c:2f:4e:00:66:38:2f:8e:
e1:95:63:e3:db:17:c5:51:ce:15:19:e4:83:3f:7d:
c7:b1:61:45:e8:e7:12:da:c6:2a:51:f6:8d:ce:a8:
1b:ee:20:bb:f6:fd:ca:05:33:e2:a1:7a:c1:02:6e:
ec:97:33:fc:a0:c0:ac:32:f1:cd:78:61:74:d1:fe:
5c:7c:8c:30:fd:d9:ce:3e:6a:1b:d0:f3:76:6e:e7:
cc:28:1b:7a:5c:3d:2f:6f:a5:de:1a:44:fe:94:dd:
a6:f1:9b:bd:cb:01:0f:49:14:3b:ef:81:5b:12:1a:
6c:5a:6e:9f:1d:46:ef:af:61:63:81:d8:de:ea:02:
1b:a2:3b:dc:ea:b1:f0:53:54:6e:1c:ff:da:f2:14:
2b:82:39:e4:3f:9f:03:42:e8:02:3c:60:c3:79:b2:
9a:e2:8f:ef:81:c7:bd:8b:69:d2:d4:f1:02:45:72:
89:02:38:f3:53:18:0d:34:a2:84:2e:dc:c1:87:fa:
56:d3:6e:33:da:f0:25:94:ba:84:af:4e:d2:b3:30:
11:13:c9:f4:de:a3:04:fa:12:95:2f:0e:ff:82:7b:
e7:91:a1:50:12:a8:59:09:e2:bb:f7:ab:e2:24:43:
c5:1c:9d:3b:eb:df:d9:ea:51:c3:a1:13:30:1f:69:
64:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:5A:BF:61:9D:63:1A:E3:1C:0C:3E:09:44:AD:E6:9B:3C:D3:5B:7A
X509v3 Authority Key Identifier:
keyid:74:F9:36:9C:6E:23:C1:BF:0D:BE:D3:01:C7:D0:0B:4A:3F:DF:0D:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/IVq_YZ1jGuMcDD4JRK3mmzzTW3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.73.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3c:8c:a7:e1:30:30:64:ef:90:1c:df:d2:46:80:4b:d8:00:1e:
39:b8:a5:ae:a3:e8:42:30:3c:62:52:ae:04:77:94:08:e6:d2:
fc:9e:b2:49:82:a9:ed:81:89:2c:c7:e8:27:ba:b5:fe:43:9d:
df:d9:fe:14:1e:0a:cd:57:a9:8e:f3:62:e2:9f:c6:fd:e1:77:
a8:81:de:a0:00:c5:a5:64:8f:de:f6:14:26:94:3f:16:bb:87:
7e:76:c8:a0:e6:34:1f:45:d1:08:d5:ae:69:c1:44:72:31:36:
94:7b:f5:d0:56:f2:21:99:0c:88:7c:dc:22:dc:be:51:13:c8:
17:68:0d:3e:c0:c6:fa:51:d1:86:0d:08:ec:28:48:ba:d6:c9:
11:b8:29:94:07:63:fe:62:ec:92:06:fe:bf:9d:57:30:0e:33:
01:c9:cd:15:84:d7:89:68:83:cb:66:16:eb:1c:e7:c9:6e:01:
2c:8c:66:75:65:2c:e9:bf:7e:0e:78:c5:4b:34:bc:d8:0f:2c:
fc:5a:4f:23:08:d7:ad:5e:03:8e:f8:fa:4d:ab:ac:a6:1b:c0:
e5:36:e7:e5:2d:a2:ce:68:25:0f:ab:01:3d:7a:3d:ca:1c:40:
f1:21:1d:b5:f2:bd:26:58:f8:38:36:6f:0c:cc:86:95:91:94:
5c:62:84:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:48:21 2025 by rpki-client