Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/rtEOFTOttDdskjTRkIEEQ2lhPbo.roa
File: rtEOFTOttDdskjTRkIEEQ2lhPbo.roa (raw, json)
Hash identifier: /Lf+xqlu0+334vguLGf9g6R3YuTOFfLWSie+GfS9FPE=
Subject key identifier: AE:D1:0E:15:33:AD:B4:37:6C:92:34:D1:90:81:04:43:69:61:3D:BA
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 0194266B99F0AAC3DBF5EA9445C22A3837D5
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/rtEOFTOttDdskjTRkIEEQ2lhPbo.roa
Signing time: Thu 02 Jan 2025 09:49:33 +0000
ROA not before: Thu 02 Jan 2025 09:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203068
IP address blocks: 88.148.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:99:f0:aa:c3:db:f5:ea:94:45:c2:2a:38:37:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 09:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aed10e1533adb4376c9234d19081044369613dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5c:94:2f:48:1d:75:c9:f2:27:a4:39:3d:e0:
f4:52:af:bc:bd:7a:8e:df:cb:14:c5:ee:4c:91:15:
33:89:1f:2e:e8:7e:4d:9f:13:4b:19:0e:35:d8:84:
8f:a5:1f:da:0d:52:b0:e4:3b:ef:7e:5e:51:50:72:
eb:8c:cd:c3:80:65:19:1e:57:b1:15:7b:30:eb:2e:
cc:c9:ca:5c:81:6e:6d:b5:4d:e3:de:16:08:83:80:
a0:64:d7:83:6e:40:f2:f6:8b:4d:74:3a:fa:c0:2d:
19:ad:22:06:79:e5:a2:7b:cc:8b:a9:82:e8:1a:d4:
7c:89:0c:ee:dd:be:2e:d0:b4:6d:8f:df:dc:00:b3:
0a:c5:a9:e4:68:d8:05:d5:22:c5:bb:f5:30:18:a3:
25:0a:6f:d7:15:11:6b:64:31:0a:ea:d1:3a:1b:60:
f9:dc:3b:f8:2f:be:f0:fc:fc:47:01:69:fb:18:b9:
0b:fd:2f:c3:7e:e7:e0:ce:41:6d:0e:81:fc:db:d3:
82:63:b2:84:b1:6a:68:64:67:4c:76:a3:aa:f1:d5:
17:18:62:04:81:da:68:7d:b4:3d:03:2d:c4:16:ff:
10:22:d7:b5:c3:3d:3b:07:d3:dc:13:04:59:b1:59:
af:27:4a:af:7c:65:e9:5e:e8:79:a1:1e:a3:f9:ac:
0c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D1:0E:15:33:AD:B4:37:6C:92:34:D1:90:81:04:43:69:61:3D:BA
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/rtEOFTOttDdskjTRkIEEQ2lhPbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.148.88.0/24
Signature Algorithm: sha256WithRSAEncryption
60:cd:27:72:6f:72:82:dd:b0:36:d2:6b:f8:24:57:4d:4e:ae:
63:64:cd:3f:6a:d1:e7:83:91:25:f5:d0:04:b0:e3:1e:f3:fc:
8e:69:12:02:0b:67:dc:93:da:24:50:57:40:66:80:db:1f:9e:
40:b2:1c:94:f2:84:63:99:4f:25:b4:7c:00:6c:bb:3f:ae:a1:
a6:41:9b:29:08:a3:69:bc:1c:0a:1d:88:18:86:73:13:4f:d3:
6f:ee:aa:91:20:e7:2c:59:d9:b4:74:2d:e4:07:6b:e4:4d:46:
ba:ca:67:9a:e8:f1:09:e9:2b:7f:32:3d:88:a7:eb:00:0d:84:
8a:3e:0e:9b:1f:e4:62:19:45:af:f7:cd:87:22:60:6d:a5:19:
2a:26:be:97:ae:2e:7c:c8:83:e4:25:53:26:60:25:e1:de:b8:
fb:a4:99:64:36:22:3f:9f:a8:a9:54:17:48:b3:08:ab:63:43:
41:8c:e6:8a:6c:71:1f:c5:a6:98:57:56:db:a3:0a:b8:ba:63:
42:03:e2:6d:a8:6d:b0:49:15:e8:fa:07:14:ef:29:e8:94:0f:
a9:c8:4a:a2:90:07:d1:80:1e:e1:f1:cc:e5:49:0c:d4:26:0a:
fc:82:ca:a0:87:3e:60:5b:db:fb:9d:b1:c4:76:fd:ae:d5:58:
26:51:1c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:49:34 2025 by rpki-client