Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iGvmnlEybF4oQVoveUq6wZ1Izhs.roa
File: iGvmnlEybF4oQVoveUq6wZ1Izhs.roa (raw, json)
Hash identifier: zF++qLPCOAv+/J4GPZIB0BB6EA+e4U9hqJN0gAb4Iqg=
Subject key identifier: 88:6B:E6:9E:51:32:6C:5E:28:41:5A:2F:79:4A:BA:C1:9D:48:CE:1B
Certificate issuer: /CN=894928a39627cd5ee5f975bd897c2d775ab29940
Certificate serial: 019666A9429F05C5411D4582A3279DF1EE4A
Authority key identifier: 89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iGvmnlEybF4oQVoveUq6wZ1Izhs.roa
Signing time: Thu 24 Apr 2025 07:18:10 +0000
ROA not before: Thu 24 Apr 2025 07:18:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135609
IP address blocks: 192.48.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:66:a9:42:9f:05:c5:41:1d:45:82:a3:27:9d:f1:ee:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=894928a39627cd5ee5f975bd897c2d775ab29940
Validity
Not Before: Apr 24 07:18:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=886be69e51326c5e28415a2f794abac19d48ce1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:25:0a:bf:d7:49:6a:22:15:74:10:ea:fe:6c:
c3:6a:7e:64:a7:f2:46:30:34:18:9b:55:90:db:33:
a7:14:33:2a:49:9c:65:a6:e5:14:2b:b0:ea:1d:3b:
58:4d:95:3f:b0:b5:45:2b:5d:06:6a:96:71:dc:97:
f0:9c:66:8f:e5:7c:38:6a:e2:83:62:e9:ef:50:23:
e3:c5:82:36:63:08:92:5f:f0:01:7b:0f:5b:ea:59:
1e:96:c6:1e:2d:a7:0b:dd:2f:44:ab:37:90:85:b2:
d8:27:c5:62:5e:61:1a:3f:78:58:26:92:57:f8:54:
c7:a9:f2:da:b5:a0:7f:21:d5:a6:e4:ae:52:58:8b:
77:5d:b5:36:d2:4e:49:52:72:25:3b:7f:99:3f:60:
ae:fa:74:1e:9b:b1:56:18:b5:a1:86:87:35:d6:76:
2d:a0:9b:a3:ff:e6:3f:96:10:63:d6:90:16:bf:9b:
ce:74:ee:ff:50:6f:6c:c7:7d:00:33:58:78:26:6f:
cb:d6:7f:97:0c:83:d4:d4:9e:fe:74:16:83:45:e4:
f0:5f:c4:52:ff:34:c2:32:26:ba:b0:be:5b:ab:21:
f8:45:6a:bc:ba:44:f9:f5:86:0b:53:03:10:ef:df:
cd:a6:5b:5a:58:f7:fe:2c:e5:27:3f:3c:d6:37:2e:
c2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:6B:E6:9E:51:32:6C:5E:28:41:5A:2F:79:4A:BA:C1:9D:48:CE:1B
X509v3 Authority Key Identifier:
keyid:89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iGvmnlEybF4oQVoveUq6wZ1Izhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.48.31.0/24
Signature Algorithm: sha256WithRSAEncryption
31:19:ef:22:01:36:9d:5c:ad:c5:2f:48:9d:45:6e:6e:0c:2a:
6f:f6:1f:97:5b:2a:2f:d7:61:74:8e:ae:1b:61:df:5d:21:5d:
a8:5e:2b:85:50:5e:51:e4:0a:d1:58:87:95:02:c5:c4:48:a2:
de:b0:00:2c:b7:cd:23:a7:1b:2c:68:b1:78:93:6f:c6:be:17:
0e:1e:17:42:3c:55:66:fe:60:2d:a0:78:dc:2c:9c:6e:ab:8b:
d4:64:90:c8:2f:44:6a:bc:b5:71:d8:0a:2a:ab:42:3e:3f:ee:
3b:13:94:7e:bc:71:99:8e:e5:9d:e0:20:92:05:26:a1:b9:ee:
60:02:77:46:cf:27:0a:16:3c:a8:2e:31:73:3e:65:35:f4:ca:
b9:3d:36:54:e6:f2:b2:49:97:2b:d4:90:44:fb:f1:e2:24:f4:
24:8d:e6:18:fe:66:bc:0d:8a:b9:e3:67:c3:11:44:7a:7c:2a:
2c:c0:a2:d6:2d:39:0e:63:ef:a6:37:52:cb:05:5e:c1:45:0a:
f7:39:3c:62:dc:d3:c9:29:0a:60:04:89:80:be:08:c1:4b:0a:
a5:71:a3:fe:28:2e:64:c9:3f:74:79:ec:4d:79:bc:b1:85:7d:
53:af:6a:36:5a:76:d8:7c:0e:0a:19:c1:d3:17:f1:27:9d:69:
61:be:fb:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:08:55 2025 by rpki-client