Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iGdbx3ZhGf3XamrGJudCQfeeFHI.roa
File: iGdbx3ZhGf3XamrGJudCQfeeFHI.roa (raw, json)
Hash identifier: cjZ96HG3dU9X2ePEMCobgvCGwz4TbabPJsr998TZBVs=
Subject key identifier: 88:67:5B:C7:76:61:19:FD:D7:6A:6A:C6:26:E7:42:41:F7:9E:14:72
Certificate issuer: /CN=894928a39627cd5ee5f975bd897c2d775ab29940
Certificate serial: 019666A857FCB80864989E2B59EC534789AA
Authority key identifier: 89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iGdbx3ZhGf3XamrGJudCQfeeFHI.roa
Signing time: Thu 24 Apr 2025 07:17:10 +0000
ROA not before: Thu 24 Apr 2025 07:17:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142165
IP address blocks: 192.48.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 16:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:66:a8:57:fc:b8:08:64:98:9e:2b:59:ec:53:47:89:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=894928a39627cd5ee5f975bd897c2d775ab29940
Validity
Not Before: Apr 24 07:17:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=88675bc7766119fdd76a6ac626e74241f79e1472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:35:32:6a:22:27:52:5d:bf:45:2c:ea:8f:d2:
55:3f:28:1b:89:e9:89:23:d9:88:55:fd:d1:77:00:
7f:78:5b:ec:da:65:f8:20:ef:7c:e1:e9:23:46:3d:
11:a2:53:2b:dd:54:2b:4b:3a:c3:02:6c:59:74:bc:
15:e6:75:96:f8:c0:c9:77:0f:ea:f1:6c:9b:28:80:
36:e5:25:38:d3:62:7f:6a:53:65:db:9a:60:2d:18:
40:98:4f:e8:1a:ab:62:f8:d6:dd:b4:4d:ca:60:fa:
6d:b7:a9:07:4e:92:0c:71:8d:ab:d3:f7:b0:85:51:
c8:68:66:c1:c2:63:41:ba:2d:90:45:44:4b:99:e7:
45:e4:8a:2a:ff:25:0e:09:4a:fd:e7:f4:e2:e6:26:
96:46:9d:07:7e:c5:14:54:7c:9d:89:62:35:c4:c8:
30:91:14:34:b3:37:66:8f:83:27:35:88:5b:f6:87:
0a:7e:9b:af:63:b9:7c:43:85:3f:b3:04:de:32:bc:
0f:4e:11:17:e6:27:85:3b:21:38:01:2d:43:bd:f9:
a3:9a:67:94:80:eb:26:8a:b3:6f:c6:51:0b:e1:f8:
d4:1d:45:17:9e:f2:f7:38:2a:70:11:5a:e6:73:50:
16:d2:78:5e:9f:1b:a3:70:f6:23:82:c9:de:1e:8f:
60:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:67:5B:C7:76:61:19:FD:D7:6A:6A:C6:26:E7:42:41:F7:9E:14:72
X509v3 Authority Key Identifier:
keyid:89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iGdbx3ZhGf3XamrGJudCQfeeFHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.48.31.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:71:38:22:18:f1:34:77:1a:7a:bc:5e:9f:b8:ab:00:29:d9:
97:60:1f:44:b9:a8:42:73:ad:8a:f4:1c:9f:4f:8b:24:06:40:
5c:2d:03:13:85:2f:49:aa:75:b2:17:43:4a:c0:b4:02:01:ac:
8b:5a:a1:6a:c5:05:14:0e:a3:32:ce:36:e4:4e:62:b0:4b:4a:
02:ee:fc:1c:68:0a:3d:0f:dc:81:59:a6:f4:c5:27:be:df:1d:
8c:08:d1:ce:85:b8:28:96:3a:a1:af:86:3e:8c:64:91:2b:3e:
ae:4a:dc:a0:15:38:37:a9:d5:80:bc:1c:6f:39:0b:e2:5b:9f:
73:6c:f7:17:2f:a1:50:ac:b5:05:20:dd:5c:77:6f:c8:e5:2a:
ec:e2:f4:c4:85:6c:1f:a1:46:17:87:1e:b5:65:89:48:29:db:
7e:40:7a:b7:5e:70:0a:90:f6:fc:97:19:94:1b:9b:00:d3:de:
92:30:02:e6:1f:30:32:58:a5:f8:c3:58:c1:24:57:05:3f:00:
d9:03:cc:d3:38:3e:6b:5e:b7:fa:7d:91:a0:0f:40:bc:ff:a9:
98:24:81:ad:31:bd:9a:92:93:2f:bb:41:e6:9a:28:0d:14:e0:
ff:ed:e8:84:8b:0f:60:56:e4:95:d2:b8:67:30:24:13:8e:e0:
eb:2d:e4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:46:17 2025 by rpki-client