Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/r9os7zEjOsZnc1Wl-CTHZfeZu1I.roa
File: r9os7zEjOsZnc1Wl-CTHZfeZu1I.roa (raw, json)
Hash identifier: J+lGW4BEqJzE0sL3dz8Ot9PeGRBEpUgKhx+p+Du4rwI=
Subject key identifier: AF:DA:2C:EF:31:23:3A:C6:67:73:55:A5:F8:24:C7:65:F7:99:BB:52
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01942826ACE4B0A35E6AA1527A12399C1F24
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/r9os7zEjOsZnc1Wl-CTHZfeZu1I.roa
Signing time: Thu 02 Jan 2025 17:53:30 +0000
ROA not before: Thu 02 Jan 2025 17:53:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 88.216.57.0/24 maxlen: 24
88.216.181.0/24 maxlen: 24
88.216.228.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:ac:e4:b0:a3:5e:6a:a1:52:7a:12:39:9c:1f:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 2 17:53:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=afda2cef31233ac6677355a5f824c765f799bb52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a1:cb:cb:75:7e:4b:93:cb:27:5d:f1:30:ea:
36:e1:27:7e:71:dd:bb:63:f9:a3:39:da:24:d4:04:
d9:59:75:6d:b6:de:2c:ea:7a:42:01:02:fe:16:74:
a1:4b:0a:97:a3:3b:30:27:9c:52:45:e2:47:54:1c:
ba:4b:77:d8:24:e0:88:33:92:29:0f:63:a9:78:4a:
11:4f:16:06:39:85:53:ae:55:60:a3:e6:fb:2a:9b:
70:e0:19:ab:2a:36:83:56:a6:37:c6:14:6b:f9:4e:
90:c5:03:30:2b:fb:16:cc:a2:62:e3:79:8c:f2:2b:
de:82:99:14:fd:ae:18:35:6a:39:73:57:d7:17:67:
2c:b7:5a:14:fe:56:f4:9f:51:de:21:95:68:a1:2b:
7a:d4:67:89:39:f1:94:ac:0d:11:80:94:20:8d:63:
27:09:8f:5c:1d:3e:fa:ae:c1:81:81:ee:e8:b3:e9:
56:37:0d:87:8e:d0:e5:aa:65:16:44:38:90:44:56:
d4:72:6e:5c:6b:00:96:72:65:93:32:6d:79:f2:9f:
1e:3b:fb:8c:f4:35:5d:eb:a1:b3:a5:af:68:d5:5a:
12:eb:89:10:44:6a:61:b5:43:b4:a0:54:3b:2c:b4:
70:cf:1e:71:e0:ed:22:ed:12:60:1b:20:2d:03:29:
ab:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:DA:2C:EF:31:23:3A:C6:67:73:55:A5:F8:24:C7:65:F7:99:BB:52
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/r9os7zEjOsZnc1Wl-CTHZfeZu1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.57.0/24
88.216.181.0/24
88.216.228.0/22
88.216.236.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:3d:be:88:2e:b8:cb:2f:e5:12:da:53:26:7b:d8:13:91:67:
c4:6d:3f:d7:b1:74:80:d7:b9:cb:cd:b9:3e:13:5a:ae:9d:74:
bc:e9:7e:96:25:d8:d9:03:5e:67:9f:32:4d:e0:ca:fa:df:42:
ba:29:63:7c:4c:15:48:d8:3c:2b:54:74:86:51:8d:62:6a:03:
28:ee:0b:28:6d:21:60:9a:b2:7e:02:c1:bc:00:7e:f8:50:f8:
a2:de:7e:19:74:ba:32:b3:5a:ba:52:19:c1:ed:bb:e4:69:d6:
f3:2d:ad:e4:54:17:ca:12:e7:54:c4:af:19:4a:ad:91:88:04:
1a:de:d4:f3:40:64:1a:42:03:21:ea:d1:e6:ca:6c:97:76:95:
9c:9b:bf:35:21:14:da:bd:f0:2e:0e:44:eb:62:57:36:67:b3:
5d:52:4b:d9:d6:5a:33:a9:0b:65:d3:7b:e2:b5:5a:e5:d4:36:
a1:c5:85:fe:ff:8e:72:25:27:be:a9:6a:43:9f:8b:88:ea:f7:
51:e4:44:df:b4:e7:ca:81:60:d2:2a:27:d9:3d:e8:86:37:da:
f8:e0:99:47:3d:d0:5a:fc:b8:f4:0d:2b:38:8a:ce:bc:24:69:
eb:ed:c9:cd:3c:81:d9:8e:4d:5f:99:aa:51:0d:34:29:53:5b:
e6:01:9c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:05:33 2025 by rpki-client