Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/IhchjAlH7wZG7kzQTy4JNv3HhP8.roa
File: IhchjAlH7wZG7kzQTy4JNv3HhP8.roa (raw, json)
Hash identifier: MX+poTln1XfrF458aN+rzETZ5ejTHBJDcPW84QX3+eg=
Subject key identifier: 22:17:21:8C:09:47:EF:06:46:EE:4C:D0:4F:2E:09:36:FD:C7:84:FF
Certificate issuer: /CN=46fe7b56722245116d4234be484a02a48a1dde1f
Certificate serial: 0194221F41A0A471FD16AC3FD7D33CFECAD7
Authority key identifier: 46:FE:7B:56:72:22:45:11:6D:42:34:BE:48:4A:02:A4:8A:1D:DE:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rv57VnIiRRFtQjS-SEoCpIod3h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/IhchjAlH7wZG7kzQTy4JNv3HhP8.roa
Signing time: Wed 01 Jan 2025 13:47:41 +0000
ROA not before: Wed 01 Jan 2025 13:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15576
IP address blocks: 185.79.200.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rv57VnIiRRFtQjS-SEoCpIod3h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:41:a0:a4:71:fd:16:ac:3f:d7:d3:3c:fe:ca:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46fe7b56722245116d4234be484a02a48a1dde1f
Validity
Not Before: Jan 1 13:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2217218c0947ef0646ee4cd04f2e0936fdc784ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e4:90:e7:d4:71:55:20:1e:f1:e5:3d:79:0d:
36:7b:13:9f:89:bf:15:00:67:20:8e:a5:c5:6a:bb:
e1:f7:70:15:c7:31:39:22:ba:8c:23:96:f5:66:c0:
0e:3e:57:57:46:cd:20:0f:26:3a:2d:10:51:9a:f2:
25:1c:25:05:66:08:5c:c1:77:8c:b6:db:c2:d9:3b:
65:cb:f7:04:d8:30:14:f6:8b:b8:b3:3b:6c:b3:47:
8c:2f:27:ac:a7:c0:9c:78:d7:5f:7a:84:d1:25:4e:
5c:50:d8:d1:ff:6f:57:bc:f9:b6:42:1e:74:c7:45:
a7:81:dc:d8:0e:c5:a1:dd:5f:e5:65:2f:bb:b2:a1:
8c:19:73:5f:62:88:e2:61:10:27:96:75:c4:ee:db:
ba:6e:88:5a:d3:c8:37:52:50:86:03:c8:83:de:00:
b1:f4:40:d9:97:6d:ac:5e:c4:d3:d0:49:b8:76:28:
4a:e6:e6:e0:44:e1:1c:03:fc:ba:7c:04:38:90:e9:
9c:23:80:c8:5c:ae:2a:73:b3:a0:42:a1:10:1c:9c:
c9:7b:2c:3b:7c:dd:b7:5a:ae:e6:f8:cd:58:f9:d0:
98:7c:55:f8:0b:ec:48:78:3b:eb:b0:c6:92:4f:21:
93:08:b1:73:2e:67:a8:90:44:cb:96:b4:a2:84:3d:
92:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:17:21:8C:09:47:EF:06:46:EE:4C:D0:4F:2E:09:36:FD:C7:84:FF
X509v3 Authority Key Identifier:
keyid:46:FE:7B:56:72:22:45:11:6D:42:34:BE:48:4A:02:A4:8A:1D:DE:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rv57VnIiRRFtQjS-SEoCpIod3h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/IhchjAlH7wZG7kzQTy4JNv3HhP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.79.200.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:44:f2:c6:e1:ff:54:57:ad:d8:e3:9d:09:fd:87:f5:37:80:
43:cb:71:ff:cb:b8:04:28:09:bf:35:f8:a3:e6:35:3d:65:89:
27:f8:8f:fc:de:a5:d4:61:06:d5:06:f7:cd:78:fd:10:b0:37:
14:a2:f7:91:47:40:4b:63:19:cc:e0:55:27:9c:c5:9e:23:ec:
e2:ff:41:f6:91:46:9e:d2:3e:c2:95:3b:3e:b5:68:0a:fa:65:
db:94:78:d0:69:b1:52:34:04:d0:f7:4d:c9:ef:d0:89:4c:95:
37:1d:d8:a8:95:02:bf:5c:e4:d0:51:d5:57:cd:97:9b:fd:1e:
ba:f6:4f:6d:bc:1a:8f:5f:43:86:c5:1e:d2:b8:34:1e:78:dc:
55:aa:86:c8:6f:3e:ac:c9:01:41:68:c8:28:ce:fd:9b:96:7d:
50:27:3c:57:02:8a:85:b2:48:75:c6:a3:21:ef:4b:d0:0b:0e:
e7:ea:d0:d5:94:2b:19:92:5b:9c:8e:29:ed:17:7d:17:9a:85:
97:cf:0a:59:6f:9d:74:08:23:4e:34:54:63:48:5c:d0:d1:7d:
fb:d9:aa:83:a9:1b:58:c8:b1:6b:e5:cf:b7:0d:18:dd:c3:21:
6d:85:4c:f8:20:3f:eb:bc:90:c7:2c:ef:b0:47:d2:ed:5a:f3:
23:bb:b1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 10:08:22 2025 by rpki-client