Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/iURVB1eIH7-zZIiqhRQg7gdAwYQ.roa
File: iURVB1eIH7-zZIiqhRQg7gdAwYQ.roa (raw, json)
Hash identifier: yVBY39STqb01EP6P/h6ZGncQpMpKLvHXHfUtYawrctg=
Subject key identifier: 89:44:55:07:57:88:1F:BF:B3:64:88:AA:85:14:20:EE:07:40:C1:84
Certificate issuer: /CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
Certificate serial: 019614D3D79A724B4F0AFEBFF6A01E9BE297
Authority key identifier: B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/iURVB1eIH7-zZIiqhRQg7gdAwYQ.roa
Signing time: Tue 08 Apr 2025 09:55:49 +0000
ROA not before: Tue 08 Apr 2025 09:55:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214225
IP address blocks: 195.96.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:14:d3:d7:9a:72:4b:4f:0a:fe:bf:f6:a0:1e:9b:e2:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
Validity
Not Before: Apr 8 09:55:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8944550757881fbfb36488aa851420ee0740c184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dc:1f:fb:a4:5f:a2:ef:61:8f:94:2e:d6:3d:
2f:06:38:86:d4:4c:63:4f:a7:fa:53:a3:8c:09:58:
ac:66:c0:3d:ae:1f:c0:2a:31:09:16:16:16:ff:d3:
e8:f7:51:63:56:91:00:bb:f4:e1:10:3f:45:e0:e5:
b7:fd:95:e1:7b:75:44:c6:bb:ff:47:e1:62:8f:3a:
88:d3:98:34:d0:94:e8:e7:70:e9:cf:b6:8e:bb:63:
4d:76:64:0a:74:4b:85:83:cd:15:3c:28:ed:1d:69:
65:45:f0:8e:08:34:71:d9:95:78:c8:98:62:a2:c3:
00:7a:29:2d:45:47:d9:db:4c:e7:5c:32:f9:ff:df:
61:e2:da:5b:05:5a:83:20:20:13:f1:10:f6:d9:07:
8f:ea:ca:8f:7b:24:95:a0:c8:65:00:41:6c:7a:ec:
8a:70:37:e8:92:9a:4b:06:af:54:c9:a8:ba:cd:79:
b7:83:d8:d4:34:f7:9b:b3:df:74:c4:a0:65:6a:8d:
ae:1d:7a:a8:4f:a1:b5:b9:66:bc:b7:98:f7:24:b4:
81:e2:e9:a5:5a:ea:1c:74:fd:f0:ba:82:fd:ad:34:
d3:f6:2a:5f:fc:7e:76:62:ef:05:ec:33:e5:db:6a:
e9:3e:ac:dc:91:96:ae:19:4c:16:35:07:8f:83:8e:
02:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:44:55:07:57:88:1F:BF:B3:64:88:AA:85:14:20:EE:07:40:C1:84
X509v3 Authority Key Identifier:
keyid:B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/iURVB1eIH7-zZIiqhRQg7gdAwYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.96.128.0/24
Signature Algorithm: sha256WithRSAEncryption
59:3e:13:c9:c9:64:dc:35:0a:5b:a2:6d:b0:e1:d3:e5:07:9c:
51:36:9c:08:e1:d8:13:06:42:af:dd:93:94:69:74:52:28:bd:
ca:25:14:08:0d:78:10:8c:d8:ca:06:8b:0e:dc:97:18:c1:48:
01:0f:81:91:9b:e9:49:c5:45:4b:dc:7e:df:e9:73:fe:19:34:
0d:b4:8b:0d:49:a1:ec:01:9e:d3:11:da:25:63:d2:b4:72:82:
34:65:a3:76:d4:10:37:20:40:de:e4:3d:1a:64:54:04:1c:7b:
67:93:54:04:e0:ae:9a:f6:5d:10:aa:91:8b:bd:69:33:e4:26:
59:09:8e:05:cb:a3:db:2d:30:64:16:79:7b:9a:45:bf:13:83:
f2:a5:06:2f:39:a2:dc:75:e1:68:c2:d9:f9:36:ac:02:4e:05:
e1:23:d9:c4:dc:54:07:fa:24:ce:7c:d5:71:59:87:50:cc:ba:
79:a4:c8:51:da:a6:0c:5e:fe:e6:f3:8f:24:a5:ad:ae:1f:dd:
6b:b5:2a:2a:b3:0f:c0:b3:86:04:60:de:cf:c4:18:52:e4:17:
3d:d9:27:9c:25:b2:e8:0b:06:e9:1a:a3:8b:26:b8:0c:b7:dc:
ff:e2:c5:e1:a5:fc:6d:f6:28:63:80:f7:9a:10:35:b3:20:e1:
9e:4d:c6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:14:17 2025 by rpki-client