Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/ITMu_9G0gZ7hDjqWsuWYXnKA06k.roa
File: ITMu_9G0gZ7hDjqWsuWYXnKA06k.roa (raw, json)
Hash identifier: EJ6xKkVoas6urLwLSHL1qGXfG7nshMzfhgWsYNbJ5+c=
Subject key identifier: 21:33:2E:FF:D1:B4:81:9E:E1:0E:3A:96:B2:E5:98:5E:72:80:D3:A9
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 0194228E4A4BD084A9AFB4F48F03DF1FC1C5
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/ITMu_9G0gZ7hDjqWsuWYXnKA06k.roa
Signing time: Wed 01 Jan 2025 15:48:58 +0000
ROA not before: Wed 01 Jan 2025 15:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397630
IP address blocks: 213.145.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:4a:4b:d0:84:a9:af:b4:f4:8f:03:df:1f:c1:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Jan 1 15:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21332effd1b4819ee10e3a96b2e5985e7280d3a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:57:3b:51:86:fe:d5:8e:cb:87:eb:78:d6:86:
cf:df:fc:41:4f:01:ec:0e:bd:04:83:bc:16:6d:1b:
82:e0:f2:16:06:4a:e5:da:17:44:dd:a9:a1:8f:3e:
b5:9a:bd:67:d8:a2:70:79:6f:3c:15:b7:58:dd:8e:
43:b9:69:89:7a:1f:f5:e7:f0:15:28:ba:d7:66:03:
68:a6:08:6f:13:55:2c:08:c0:e7:6a:e5:b5:0f:ae:
59:41:da:04:fb:96:5a:75:22:17:75:a0:a4:38:55:
ee:f5:70:20:7f:53:86:fa:8c:f6:03:4f:56:8e:1e:
ca:2d:0b:0e:4b:7d:82:35:4f:56:73:f1:f4:2d:8d:
a0:69:3f:cc:43:8d:e6:f6:d3:c4:33:2a:1d:85:73:
31:fe:14:5b:58:89:00:ea:88:1d:4f:36:30:9c:9e:
c1:5f:fe:af:0c:81:63:99:7f:45:96:3c:56:62:b3:
0f:73:56:e6:91:d9:86:f5:d0:f0:48:9e:29:61:55:
78:52:a7:66:40:70:69:dd:c9:e9:3a:02:6b:5d:93:
e9:6c:49:fd:be:6d:b6:64:71:08:f3:5c:35:f7:22:
23:63:06:7c:24:db:38:be:80:be:e8:16:1e:90:c2:
94:dc:60:e5:d2:fa:0c:f4:40:b7:d9:6c:72:35:00:
fd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:33:2E:FF:D1:B4:81:9E:E1:0E:3A:96:B2:E5:98:5E:72:80:D3:A9
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/ITMu_9G0gZ7hDjqWsuWYXnKA06k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.74.0/24
Signature Algorithm: sha256WithRSAEncryption
e7:80:3c:42:50:4a:c1:ad:4e:c1:8e:3b:15:85:6b:35:f3:8a:
9d:dd:59:fe:1a:94:90:5e:0e:92:9d:41:ea:1c:df:2c:1e:c9:
5b:fa:7e:a4:8a:1c:85:9c:37:7f:35:37:d8:4c:52:ef:be:3f:
57:24:bd:7e:4d:f2:e7:78:fb:16:51:07:53:c4:17:72:d4:41:
85:90:17:56:4b:f7:02:4f:b4:04:0b:6b:c3:2b:b2:8d:11:b5:
de:c4:b1:d0:28:37:93:80:ad:3e:cc:52:5b:27:9a:27:e2:01:
04:2c:26:61:13:42:5e:c7:2c:12:a5:d8:bd:33:a8:ea:dd:c4:
f1:10:4c:75:cb:06:c7:e4:86:52:33:86:0f:d6:8f:ac:1e:7a:
cc:e2:bb:ee:1b:43:19:48:d5:93:0d:d1:16:87:3c:49:ba:da:
1e:3d:10:d7:34:ce:37:f6:db:70:a4:52:37:5a:14:41:d6:c1:
c1:b5:3b:8e:d8:62:01:2b:9d:ff:8e:75:ee:11:8a:69:43:53:
12:e8:fd:c2:69:8f:85:02:f0:96:c2:73:39:ba:bf:1c:80:71:
83:7f:64:e0:b2:21:4e:14:a3:d7:73:f3:cb:2a:3d:f8:3a:b8:
5a:bc:88:b3:98:16:74:77:bc:6f:34:82:9f:a2:aa:7d:e0:cd:
fb:c4:4a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:02:32 2025 by rpki-client