Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/iH3j8qY1-071YfTwOblznlAQw6s.roa
File: iH3j8qY1-071YfTwOblznlAQw6s.roa (raw, json)
Hash identifier: yME8emyVjusbrBjqemdlgI+CwPOa3VlHZpR5ZeMxUWc=
Subject key identifier: 88:7D:E3:F2:A6:35:FB:4E:F5:61:F4:F0:39:B9:73:9E:50:10:C3:AB
Certificate issuer: /CN=464952bc165441ec6e2e2010c933dc830f361731
Certificate serial: 0194228DD41E7566594D33D914D163F72CF6
Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/iH3j8qY1-071YfTwOblznlAQw6s.roa
Signing time: Wed 01 Jan 2025 15:48:27 +0000
ROA not before: Wed 01 Jan 2025 15:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49203
IP address blocks: 185.118.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:d4:1e:75:66:59:4d:33:d9:14:d1:63:f7:2c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731
Validity
Not Before: Jan 1 15:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=887de3f2a635fb4ef561f4f039b9739e5010c3ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9f:d6:c3:71:2f:61:68:71:56:f5:3e:0a:a0:
c1:98:13:e3:9e:7a:db:25:77:fa:5d:13:9a:a9:c9:
de:18:bc:b8:d9:75:77:09:97:ce:d2:65:99:52:d0:
48:d1:9f:16:9c:16:1d:80:fc:42:62:dd:ae:87:01:
32:b1:f6:9e:ef:35:fa:fb:91:6f:92:93:4f:ee:e7:
df:a3:a4:36:e7:11:ce:7e:84:06:6d:d6:2b:af:8f:
81:39:87:27:cd:de:0a:0a:7a:e9:02:e6:11:8c:cd:
6b:e7:40:25:5a:e1:d5:c7:61:95:7c:ae:00:36:4b:
42:21:63:5e:3c:45:d5:a2:a0:8e:a9:b1:eb:29:d3:
e1:47:cb:a7:8c:ba:7e:f3:72:32:2a:dd:c8:51:64:
65:84:5c:b1:62:23:ae:4a:7f:31:96:a0:a2:a3:5e:
9e:c4:dc:1e:9d:f1:93:94:23:d7:2b:89:d4:37:24:
31:50:40:12:99:58:d3:82:64:e8:ca:5c:f7:08:04:
de:cc:85:cf:29:e2:87:5d:85:b0:34:eb:b4:58:02:
9f:12:af:d3:ea:fe:30:20:96:1d:64:1a:5b:12:3c:
d9:14:e3:80:4b:c8:b9:4e:c0:41:5e:50:25:1d:e4:
2d:bb:e1:5b:d1:9f:81:89:14:0f:d3:67:43:75:77:
25:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:7D:E3:F2:A6:35:FB:4E:F5:61:F4:F0:39:B9:73:9E:50:10:C3:AB
X509v3 Authority Key Identifier:
keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/iH3j8qY1-071YfTwOblznlAQw6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.4.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:f4:7d:7a:36:eb:ba:2a:0f:40:8c:c6:c8:b5:63:7e:a5:0e:
fa:75:cb:1e:4c:51:86:af:55:af:57:bd:90:b2:b9:99:76:e1:
59:3f:01:07:2e:d5:61:ad:da:3d:59:5c:8d:5b:43:eb:39:95:
42:a8:44:3c:cb:88:f5:80:bc:07:9e:9e:be:36:e3:54:1b:a5:
77:c8:70:cd:ad:e3:12:a2:ef:25:0d:04:a5:49:7b:60:7e:4a:
1f:34:db:44:98:6d:7d:e6:b0:5b:67:71:7a:f6:3f:47:61:12:
0d:47:11:92:d2:79:cb:72:db:ef:9c:96:d6:e6:a9:f6:2a:78:
be:81:64:1f:b8:2f:af:82:72:3b:72:6e:bb:fe:1c:66:84:4d:
0b:db:b1:7a:fc:57:04:17:62:62:f5:41:07:84:95:7e:5c:2e:
42:19:ae:28:8e:b2:a3:04:a3:fd:e0:c6:b3:3f:b9:6e:de:02:
19:9c:07:d7:08:ed:1d:06:64:6b:74:49:f9:2b:f3:ef:0e:be:
20:62:25:ad:bf:bc:96:a0:30:26:27:1c:97:ba:d0:ee:37:c9:
1d:60:55:f7:e8:27:72:b6:7f:9d:29:63:0f:2a:c1:17:09:f2:
ec:a8:a0:ee:c9:d7:ee:72:67:ea:77:53:f4:cb:46:00:19:c1:
ff:2a:93:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:42:35 2025 by rpki-client