Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/988R5OqLx1cdXJRL_JY-sifrbw8.roa
File: 988R5OqLx1cdXJRL_JY-sifrbw8.roa (raw, json)
Hash identifier: BOCl4HP9kR43t+HCwvP5qbX3Z6YHP7lJJWGPo5+9LHA=
Subject key identifier: F7:CF:11:E4:EA:8B:C7:57:1D:5C:94:4B:FC:96:3E:B2:27:EB:6F:0F
Certificate issuer: /CN=45ad6f1f1b730c7a016b562c12b31becc4b3e1fa
Certificate serial: 01942444E4BEF6B72D89342F3C31888DE1EB
Authority key identifier: 45:AD:6F:1F:1B:73:0C:7A:01:6B:56:2C:12:B3:1B:EC:C4:B3:E1:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/988R5OqLx1cdXJRL_JY-sifrbw8.roa
Signing time: Wed 01 Jan 2025 23:48:02 +0000
ROA not before: Wed 01 Jan 2025 23:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30981
IP address blocks: 82.205.132.0/24 maxlen: 24
82.205.216.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:e4:be:f6:b7:2d:89:34:2f:3c:31:88:8d:e1:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45ad6f1f1b730c7a016b562c12b31becc4b3e1fa
Validity
Not Before: Jan 1 23:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7cf11e4ea8bc7571d5c944bfc963eb227eb6f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:1b:1c:45:7e:49:13:c0:c4:e5:4d:fd:8d:77:
e3:d9:eb:5a:47:63:25:b8:45:16:5c:04:23:b1:24:
0e:ec:5f:c2:92:78:43:10:03:6d:73:8c:2e:6e:e1:
d4:dd:4d:7a:69:62:f1:7f:46:18:32:c8:d2:61:c5:
02:f5:9e:a4:76:f1:c7:30:b8:2c:9d:ab:4a:75:f6:
55:3c:24:86:5b:f7:c5:82:e7:cf:6e:e7:fc:22:37:
a3:ef:4b:c5:fe:60:49:5b:ed:61:b1:2a:39:b9:26:
57:5d:d7:8f:50:95:b4:4b:73:5e:3c:8d:58:fd:41:
7f:8e:c0:0a:77:41:bc:02:bd:bd:0f:3e:74:6f:55:
06:f1:fc:a0:cc:b4:cd:5e:2f:34:92:54:3c:50:a4:
65:0f:7f:a9:12:64:47:57:ca:fd:4a:40:14:71:14:
75:1d:16:a8:87:88:2e:d1:a7:45:5f:d7:11:ba:83:
6a:f3:c1:af:b9:89:49:56:59:83:5a:1f:41:8b:97:
f9:d1:b4:15:da:a2:c2:0c:17:00:84:c0:11:8d:06:
91:73:44:58:ae:d7:0d:ac:15:b4:9c:a6:45:9b:e7:
40:98:2f:b1:14:73:59:fd:ab:b9:f9:f3:46:5a:d7:
71:50:17:c8:51:4f:52:9b:6f:67:77:91:8a:cd:1b:
24:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CF:11:E4:EA:8B:C7:57:1D:5C:94:4B:FC:96:3E:B2:27:EB:6F:0F
X509v3 Authority Key Identifier:
keyid:45:AD:6F:1F:1B:73:0C:7A:01:6B:56:2C:12:B3:1B:EC:C4:B3:E1:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/988R5OqLx1cdXJRL_JY-sifrbw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.205.132.0/24
82.205.216.0/21
Signature Algorithm: sha256WithRSAEncryption
7b:90:c0:75:90:17:53:e8:f6:7f:d2:85:eb:68:77:1b:e0:46:
29:21:b8:00:48:42:39:97:43:5e:f9:2a:ed:7a:2d:5f:cb:4a:
d6:bd:dd:33:34:ba:5e:b4:50:8b:0f:87:39:0c:c8:0a:86:2c:
fa:a2:9d:3a:38:e5:84:68:6c:a7:e2:41:3a:fb:4b:54:f4:d2:
8b:3f:20:a7:65:b3:66:cb:70:90:ea:4c:6d:5f:cc:31:f2:e9:
04:fb:c6:85:e9:c2:ef:24:0a:4d:1e:74:fb:a7:5a:bf:70:3b:
f8:e4:88:e0:ac:bd:2f:78:df:30:6a:5b:4c:7b:dc:5f:c2:bc:
82:0e:c3:17:f8:6d:8d:cd:68:7c:09:b8:45:af:96:db:1c:d6:
48:42:39:61:c3:ac:c3:c5:ad:fb:cc:c8:ff:21:70:f2:cf:f7:
0a:3b:89:4a:9f:1a:7f:bb:35:29:5e:26:f3:78:b7:04:4f:ed:
9c:84:3d:4f:9d:22:a0:a0:66:03:ee:7e:7b:2d:d8:be:4a:79:
66:88:0a:f2:6d:4f:15:dd:0a:d3:8a:53:79:3b:ee:29:f7:5d:
b0:ef:77:f0:0b:75:07:8a:66:04:f6:51:5f:9e:52:09:8b:f5:
a8:8e:92:6f:bd:b6:af:95:77:6d:7e:78:86:cc:65:51:c8:80:
99:7b:71:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:41:13 2025 by rpki-client