Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/i-SIIpuMBwOBq-YIQlQfh7_lGfY.roa
File: i-SIIpuMBwOBq-YIQlQfh7_lGfY.roa (raw, json)
Hash identifier: csU2fjkcrHqyQip6BCY1whUCu05jLpnH4yxw8VxoNgU=
Subject key identifier: 8B:E4:88:22:9B:8C:07:03:81:AB:E6:08:42:54:1F:87:BF:E5:19:F6
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0194266C5FCA1830F7C37A1677575F5B82DC
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/i-SIIpuMBwOBq-YIQlQfh7_lGfY.roa
Signing time: Thu 02 Jan 2025 09:50:24 +0000
ROA not before: Thu 02 Jan 2025 09:50:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16054
IP address blocks: 213.228.96.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:5f:ca:18:30:f7:c3:7a:16:77:57:5f:5b:82:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 09:50:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8be488229b8c070381abe60842541f87bfe519f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:91:63:47:97:b6:3c:e0:40:37:dd:e8:cb:7a:
6d:60:cf:6c:5a:d8:68:76:cc:49:20:00:e3:b0:7a:
b2:97:ed:c6:61:d5:8b:08:4c:02:62:8c:31:b4:da:
3a:63:a9:5e:a5:91:10:06:ae:2b:80:b9:8d:fd:8e:
00:60:d1:3b:49:9a:f7:d5:8d:f0:4f:e6:3f:4c:dd:
9d:f5:33:35:3d:5f:6b:a1:74:56:a5:d6:f9:b9:5a:
54:31:ab:d0:80:4a:d4:1b:a2:fd:eb:97:37:00:6b:
39:9a:aa:fa:2c:ec:05:ea:b1:c2:49:b7:c3:fe:73:
4b:18:bd:57:00:a8:f2:bd:fb:bc:d1:35:48:29:e4:
85:b5:e7:7a:dd:ad:5d:3b:bc:3c:03:3b:87:18:6f:
c3:2e:af:4b:66:95:7a:1a:b4:15:cd:40:b2:da:f5:
8c:79:f6:2d:79:04:b5:4d:6c:b9:9d:15:9c:4b:0f:
7f:6e:16:8c:73:d1:5b:bb:be:fa:56:4a:0f:6f:fb:
a7:60:37:a1:7b:96:0b:f0:10:f2:c6:a0:14:5f:7c:
48:81:ba:46:9c:ad:50:88:c0:6a:24:f5:35:37:47:
2f:04:2c:0c:de:01:b7:5c:de:b1:25:ab:db:33:8b:
6a:bc:ec:6d:d9:8b:4e:6c:98:2c:b7:d9:ce:56:b5:
c3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E4:88:22:9B:8C:07:03:81:AB:E6:08:42:54:1F:87:BF:E5:19:F6
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/i-SIIpuMBwOBq-YIQlQfh7_lGfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.228.96.0/21
Signature Algorithm: sha256WithRSAEncryption
00:13:6a:65:c0:62:4b:4d:09:c4:d8:cd:89:a9:61:b8:ef:25:
fa:24:6f:e1:ca:f8:79:cd:0f:53:ea:77:27:bd:db:90:34:7c:
7b:16:ab:bf:c0:26:ce:66:10:1a:6e:a0:f1:26:3a:3c:a9:da:
ec:aa:de:05:b2:4f:e6:dd:48:d9:b3:8b:c2:26:24:c9:1f:a4:
11:5d:c1:20:0e:9c:eb:7e:ce:be:d4:a3:ca:ca:55:23:c9:19:
9c:c5:d5:c9:59:a0:b1:f1:fb:3b:d5:22:f5:19:1e:a9:b8:61:
93:eb:f7:4a:f8:c1:b2:b3:02:f5:6b:8a:c2:c5:bc:3e:60:af:
be:a2:a3:72:11:f2:43:0f:24:56:cf:aa:14:41:08:3f:55:c9:
9b:ad:ee:65:b1:ca:17:65:cf:f0:67:fe:cb:74:00:b0:70:05:
a0:74:b5:b9:ff:81:da:33:ba:e6:bc:53:23:78:9b:ac:c2:9c:
7b:9c:84:40:3c:e9:c8:de:20:4b:35:d5:c7:98:b5:a0:e2:48:
a6:96:bb:2d:1f:54:b6:48:61:ed:29:a8:dd:b2:d3:bc:91:7d:
66:9e:38:13:40:5a:a6:0f:d0:5e:f7:8f:19:b4:fb:3c:ac:3a:
a3:13:6a:2e:d1:74:ca:cd:da:ef:58:c5:4e:93:ce:8f:c6:d9:
b0:7c:9d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:50:37 2025 by rpki-client