Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/iCRE8nmMlSwgty-lxs48bniB608.roa
File: iCRE8nmMlSwgty-lxs48bniB608.roa (raw, json)
Hash identifier: j5FLZkm+p03dHu1S8DiUOAGHR6CKGwM5JBM32PcoUIE=
Subject key identifier: 88:24:44:F2:79:8C:95:2C:20:B7:2F:A5:C6:CE:3C:6E:78:81:EB:4F
Certificate issuer: /CN=9b3f29ff9ea71b3c3dc1f5af054b41647c91af98
Certificate serial: 01941FFA2B3C5C6BD07F9A2D92A658588427
Authority key identifier: 9B:3F:29:FF:9E:A7:1B:3C:3D:C1:F5:AF:05:4B:41:64:7C:91:AF:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/iCRE8nmMlSwgty-lxs48bniB608.roa
Signing time: Wed 01 Jan 2025 03:47:56 +0000
ROA not before: Wed 01 Jan 2025 03:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60602
IP address blocks: 185.181.228.0/23 maxlen: 23
185.181.228.0/24 maxlen: 24
185.181.229.0/24 maxlen: 24
185.181.230.0/24 maxlen: 24
194.33.40.0/22 maxlen: 24
2a0a:d580::/32 maxlen: 32
2a0a:d580::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 14:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:2b:3c:5c:6b:d0:7f:9a:2d:92:a6:58:58:84:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b3f29ff9ea71b3c3dc1f5af054b41647c91af98
Validity
Not Before: Jan 1 03:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=882444f2798c952c20b72fa5c6ce3c6e7881eb4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:12:83:07:f6:f1:9b:60:5d:f0:bb:dc:b2:ec:
24:a5:d5:8a:19:6b:79:1b:a0:dd:c3:eb:c4:2a:c9:
63:a0:17:69:8d:7a:2e:7d:ac:7d:59:44:af:10:f3:
ab:ab:09:83:85:9c:2e:b9:2e:69:1b:0b:24:b2:fa:
35:6e:59:9c:86:ed:e4:cc:94:5d:2c:46:48:31:a8:
29:88:ef:b8:66:91:5b:1a:00:de:27:c5:50:45:60:
bd:84:b9:f9:e0:e6:00:ea:a4:5e:ea:13:b2:dc:8a:
a8:bd:f9:02:87:78:f7:e2:ba:30:c0:15:af:fb:94:
d3:71:5a:b0:0f:bd:67:d6:4e:d5:8b:ee:89:29:60:
69:96:41:82:c2:92:ff:d4:0c:b1:fc:f1:b4:f1:28:
76:d9:3c:3d:3c:bc:9b:18:43:fa:8a:b4:90:ae:e5:
9b:dd:3e:62:cf:5b:d5:b7:ac:04:2c:75:0c:ba:f8:
27:da:49:58:20:bc:a7:44:66:81:45:3d:3d:26:9a:
56:78:eb:de:d9:6b:c1:6c:f4:d1:ff:44:8a:bd:1f:
ee:0b:02:96:ec:fa:db:74:13:b5:e3:d0:5f:f6:ba:
6c:6b:d2:94:f0:9c:dc:01:bc:2b:8f:b3:00:0d:17:
84:f7:58:ab:63:69:62:47:df:b5:55:b0:9a:e8:30:
0f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:24:44:F2:79:8C:95:2C:20:B7:2F:A5:C6:CE:3C:6E:78:81:EB:4F
X509v3 Authority Key Identifier:
keyid:9B:3F:29:FF:9E:A7:1B:3C:3D:C1:F5:AF:05:4B:41:64:7C:91:AF:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/iCRE8nmMlSwgty-lxs48bniB608.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.228.0-185.181.230.255
194.33.40.0/22
IPv6:
2a0a:d580::/32
Signature Algorithm: sha256WithRSAEncryption
74:2b:85:c8:0d:d4:a2:05:e0:a1:76:52:73:07:84:4b:86:3a:
21:42:b3:cd:ca:76:a2:4a:dd:a9:3b:b9:c8:3c:dd:3e:89:05:
2d:21:ab:14:6d:34:6e:43:73:a8:20:90:1e:09:15:b4:e4:9a:
05:40:76:f7:b9:c9:c6:24:2e:c5:88:d3:04:34:5e:fc:6b:13:
18:b3:bd:55:41:0a:23:46:1c:ed:e9:15:3d:07:ef:42:05:8a:
e5:8e:6a:6c:1f:24:53:63:b5:72:1d:67:f8:9b:6f:73:d8:b5:
6a:36:6a:67:0b:68:6b:d1:6d:aa:fb:0e:0b:94:d0:7f:f7:dd:
56:c6:b2:c6:be:f6:74:6f:38:42:eb:60:1c:9d:b1:b2:39:8a:
d6:ae:f9:90:92:87:3e:1d:1f:93:0f:36:6e:54:f1:b6:27:a5:
fd:ed:a3:16:66:80:1e:e1:07:39:76:2c:70:c3:f7:a4:a7:e6:
29:3c:23:43:b3:fa:1d:61:f8:2e:64:84:7f:6f:f0:4e:64:54:
55:60:d4:15:08:d7:d9:54:87:14:38:19:6c:7f:a2:71:1e:0d:
dd:3a:91:37:d1:cf:cc:d6:df:dd:d1:c2:12:17:36:38:4e:62:
80:02:79:2b:8a:46:d6:31:87:aa:86:8c:7d:55:77:53:ee:0b:
aa:85:64:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:11 2025 by rpki-client