Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/Ik8Kqt-zKfrsdQjyrAjHXX-mlLc.roa
File: Ik8Kqt-zKfrsdQjyrAjHXX-mlLc.roa (raw, json)
Hash identifier: Zg9C0+0W8n0QIjR6RRPkp/OJIpBk8iu2+syGMIoxQyg=
Subject key identifier: 22:4F:0A:AA:DF:B3:29:FA:EC:75:08:F2:AC:08:C7:5D:7F:A6:94:B7
Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Certificate serial: 01958E11DB611BBB2FF0C56F8FDA96CB0590
Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/Ik8Kqt-zKfrsdQjyrAjHXX-mlLc.roa
Signing time: Thu 13 Mar 2025 05:54:49 +0000
ROA not before: Thu 13 Mar 2025 05:54:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 185.196.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:11:db:61:1b:bb:2f:f0:c5:6f:8f:da:96:cb:05:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Validity
Not Before: Mar 13 05:54:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=224f0aaadfb329faec7508f2ac08c75d7fa694b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b1:5e:39:d8:89:76:10:14:70:e1:63:3d:8c:
db:45:56:4e:55:54:8f:29:2c:11:ad:11:42:44:48:
34:61:77:08:a4:2c:ab:1b:77:7a:5f:ce:e8:84:2b:
92:09:0a:75:cc:cb:08:78:2f:c9:da:ee:5d:eb:9a:
aa:5b:40:3c:1c:4b:44:09:c7:fd:59:fb:2b:e4:84:
8d:43:da:d4:42:c6:b9:65:dc:d0:51:8f:5a:3a:da:
ee:63:fd:3b:a0:98:7b:2c:97:28:1f:91:b7:44:03:
d4:29:56:39:41:b3:02:2e:70:47:e7:a5:0b:6f:69:
9a:8a:29:28:8d:e1:88:ba:a0:af:a3:c0:48:37:fb:
67:42:c8:c8:0e:a6:de:8c:cc:f3:21:24:80:6b:24:
d7:a8:54:c8:39:df:6d:70:10:20:cd:51:e7:55:d9:
c2:0c:21:64:08:46:6c:9d:f3:dd:e6:18:bd:6c:5f:
c1:9a:6a:34:cb:6b:fd:b8:f8:22:8c:62:be:1c:78:
11:d8:ae:14:10:22:17:ad:fb:d2:b8:4d:2c:b4:c8:
ea:5e:95:17:ec:49:b5:84:01:f6:bc:d7:ed:91:0f:
61:ce:9d:06:2d:6d:ba:69:48:6b:57:bb:1b:5f:86:
63:d7:5d:fc:71:17:b7:fe:7f:36:07:06:48:2f:38:
30:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:4F:0A:AA:DF:B3:29:FA:EC:75:08:F2:AC:08:C7:5D:7F:A6:94:B7
X509v3 Authority Key Identifier:
keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/Ik8Kqt-zKfrsdQjyrAjHXX-mlLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.221.0/24
Signature Algorithm: sha256WithRSAEncryption
89:91:d2:bc:b8:c4:68:25:03:16:5e:3c:4e:05:8a:10:cb:bf:
e6:5d:ff:7c:64:00:6a:26:be:7d:d1:ef:e8:97:af:1c:17:e1:
81:17:70:e7:50:52:70:c1:f7:5f:b8:92:e2:52:0f:6c:28:ef:
4b:68:7d:a3:bc:36:9b:3c:6d:79:1c:3f:03:ae:6b:25:f8:86:
86:92:d6:a2:76:72:fc:d3:72:6b:48:ec:d6:33:37:30:c2:aa:
ed:90:3f:9c:69:f1:a9:a6:66:38:72:5b:f8:b5:46:43:68:c0:
93:40:e7:9c:fd:84:ce:38:b7:90:f9:7d:c8:22:8a:c6:a9:5c:
70:48:c4:fd:a4:24:17:41:9d:36:0c:bd:a0:44:2f:62:bc:d6:
9c:7b:67:81:48:f9:8e:dc:77:cb:6f:2e:dd:9a:d3:6e:c1:26:
7d:a2:19:3e:3c:21:59:d6:cd:14:e6:61:4e:1f:42:82:97:0b:
04:cf:83:6f:ba:ee:a4:a3:aa:aa:d3:6d:7b:71:db:b4:b1:67:
0f:e0:3f:3a:28:c8:d1:c4:a9:b8:8e:5b:4c:59:c0:87:46:24:
88:31:d1:22:fb:43:9d:01:18:fb:57:81:bc:df:a4:50:15:77:
77:46:e1:cf:06:99:03:ec:f3:2f:8e:5b:e1:f7:d3:f2:42:21:
5b:b5:ea:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:17:39 2025 by rpki-client