Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/IilMeITi2WRlzRXCm9op0c2uedk.roa
File: IilMeITi2WRlzRXCm9op0c2uedk.roa (raw, json)
Hash identifier: UrspHFNf1bj1Z6XmUbLX3sSXcdX5yH0r772wbyb2ttQ=
Subject key identifier: 22:29:4C:78:84:E2:D9:64:65:CD:15:C2:9B:DA:29:D1:CD:AE:79:D9
Certificate issuer: /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Certificate serial: 0196EA5264DB33C1FAE8BD98CB37AAE8ACBF
Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/IilMeITi2WRlzRXCm9op0c2uedk.roa
Signing time: Mon 19 May 2025 20:53:10 +0000
ROA not before: Mon 19 May 2025 20:53:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200373
IP address blocks: 95.141.242.0/24 maxlen: 24
2a0a:da40::/29 maxlen: 29
2a13:3f80::/32 maxlen: 32
2a13:3f83::/32 maxlen: 32
2a13:3f84::/32 maxlen: 32
2a13:3f85::/32 maxlen: 32
2a13:3f86::/32 maxlen: 32
2a13:3f87::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ea:52:64:db:33:c1:fa:e8:bd:98:cb:37:aa:e8:ac:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Validity
Not Before: May 19 20:53:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22294c7884e2d96465cd15c29bda29d1cdae79d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:be:c6:6d:dc:85:19:19:fd:2b:30:eb:e0:67:
c1:0b:59:1a:2d:46:8c:d4:97:91:79:63:49:d0:ef:
cc:d9:73:66:a8:31:31:bf:f0:d4:9f:05:b5:5f:51:
fe:95:1e:ec:f2:34:6d:8e:60:fe:3d:46:ac:13:8b:
50:c3:b1:f3:92:78:b6:f6:18:e9:d4:98:22:13:ba:
a0:54:2c:09:08:87:0d:93:65:6d:7f:1b:0d:c2:05:
45:9a:7b:6e:25:5d:6b:df:eb:3a:e4:03:27:3a:c5:
ee:27:c0:48:aa:9e:75:60:d6:f7:72:22:54:e5:29:
da:1f:85:1d:21:a9:1c:45:ae:8b:d5:9e:82:24:c6:
8d:81:94:7b:d6:78:03:c4:0d:47:1a:33:b7:26:9c:
bc:d3:5d:bb:52:f9:64:1f:62:0a:c0:d4:dc:01:1a:
09:0a:6a:15:f3:c6:90:7c:e4:58:6e:70:9d:76:c5:
ed:b1:1c:c5:c7:51:3b:d9:d3:cb:ef:81:aa:06:42:
71:c1:1c:5e:63:b4:79:48:13:ac:ed:d2:a6:5d:c4:
25:e5:46:46:16:1f:82:4a:bf:16:24:8b:c1:b7:b9:
82:5c:29:35:91:4e:c5:b4:35:64:75:10:85:17:56:
73:e5:23:30:e1:cd:81:1c:5a:79:13:b0:05:e5:98:
b4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:29:4C:78:84:E2:D9:64:65:CD:15:C2:9B:DA:29:D1:CD:AE:79:D9
X509v3 Authority Key Identifier:
keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/IilMeITi2WRlzRXCm9op0c2uedk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.141.242.0/24
IPv6:
2a0a:da40::/29
2a13:3f80::/32
2a13:3f83::-2a13:3f87:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
65:53:01:62:12:b9:4f:97:67:ef:ba:36:4f:4c:6e:6c:43:94:
3a:87:5a:a3:92:4d:33:38:3f:30:63:6c:78:29:fb:75:39:72:
bc:a1:7a:5a:84:2c:9d:fc:51:4a:56:7d:9c:57:f8:eb:2b:e8:
4c:38:55:7f:ef:50:b3:ff:be:f0:e8:6e:9f:8e:4f:29:9e:4d:
4b:f8:1a:fe:a6:48:44:c2:ab:5c:30:19:b7:72:06:35:42:75:
ea:45:6e:50:76:c2:b0:8d:bb:f0:a7:b8:f1:f2:ec:eb:2f:ae:
d6:0f:f2:9e:07:d3:ae:6e:c2:f8:88:5f:4b:99:eb:5b:62:9f:
15:ff:85:54:82:6c:70:dd:0b:f6:c9:cf:1e:d0:e7:f9:da:fa:
d8:ef:46:44:8c:cb:d1:c4:09:89:72:88:3a:ea:37:da:b4:5a:
1b:c0:31:e2:13:e4:f8:7e:30:c4:2b:e0:27:bc:91:0d:18:0e:
c8:dc:e2:19:64:80:7f:2e:dd:d6:57:c7:c1:92:4c:a5:2b:be:
48:38:67:ec:97:b6:87:a1:bc:02:8f:bc:fd:31:73:6c:72:10:
43:38:10:c0:d9:f9:80:e5:8c:c0:45:41:2a:d5:ef:6e:e6:7f:
b1:47:86:e8:9e:ad:b2:79:d3:e0:76:3f:6c:ad:cd:ac:80:e0:
07:6b:a8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 13:16:13 2025 by rpki-client