Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/e9WpMQ10Jta4bc-kgx_uUHreKeI.roa
File: e9WpMQ10Jta4bc-kgx_uUHreKeI.roa (raw, json)
Hash identifier: H81o+ZjduZt3vdn9MGamCsdkardNJKChGMtHTgy+fKg=
Subject key identifier: 7B:D5:A9:31:0D:74:26:D6:B8:6D:CF:A4:83:1F:EE:50:7A:DE:29:E2
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 01942444843648344B0790CF06449245DA0D
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/e9WpMQ10Jta4bc-kgx_uUHreKeI.roa
Signing time: Wed 01 Jan 2025 23:47:37 +0000
ROA not before: Wed 01 Jan 2025 23:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6134
IP address blocks: 88.218.192.0/24 maxlen: 24
88.218.194.0/23 maxlen: 24
176.113.68.0/22 maxlen: 24
176.113.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:84:36:48:34:4b:07:90:cf:06:44:92:45:da:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 23:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7bd5a9310d7426d6b86dcfa4831fee507ade29e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:eb:32:96:bd:65:99:4b:ee:02:11:8e:68:62:
fb:b4:f2:15:25:14:0b:e5:be:12:a7:cb:98:ec:e6:
d0:8c:63:e6:7f:dd:01:59:69:e5:e2:cd:9e:60:28:
a3:37:cc:1c:96:36:43:31:0b:1f:08:12:59:1c:cc:
b2:23:61:18:49:fd:16:4f:f3:27:5e:79:bc:b0:71:
d9:3f:bd:cc:07:60:b5:22:87:7a:d9:70:49:d3:8a:
66:eb:47:2a:36:57:85:35:96:f2:69:aa:b7:16:87:
4b:6e:22:be:5c:36:97:11:12:11:d9:4e:a5:9a:bd:
41:6a:4f:c2:2b:a4:eb:8c:bb:df:a1:2f:dc:39:6f:
bb:d2:77:7d:d2:bb:79:d4:cb:bc:e1:7a:32:a7:f7:
31:0d:a8:7a:0a:95:a9:e9:9e:3d:6a:9f:75:82:81:
c8:d1:a9:6d:f2:80:58:1b:20:e3:0b:10:e4:01:c2:
9b:cc:7c:3f:db:70:83:6c:eb:8a:4d:c5:54:26:70:
58:6e:5f:fa:f6:40:c6:1a:25:21:15:93:c9:e2:0f:
c5:58:b9:9f:30:a9:a6:ce:a6:d5:0c:fb:e1:46:09:
e0:b5:16:a9:32:74:c2:b5:44:17:13:b7:2f:8e:9d:
5c:22:44:9f:93:33:b1:42:c1:06:2e:e5:ce:7a:34:
8a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D5:A9:31:0D:74:26:D6:B8:6D:CF:A4:83:1F:EE:50:7A:DE:29:E2
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/e9WpMQ10Jta4bc-kgx_uUHreKeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.192.0/24
88.218.194.0/23
176.113.68.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:c9:43:a2:31:e1:ac:73:42:df:f2:8c:3d:08:a7:95:48:e2:
bf:33:33:d9:b8:49:46:85:2c:03:61:20:35:9d:96:b5:6d:72:
27:8c:28:62:28:33:4f:81:98:e8:10:67:b8:18:c3:1c:fe:c8:
69:5a:71:6b:33:f7:66:4a:b5:7d:f8:0b:5d:dd:71:7c:ce:6b:
7c:27:e3:96:f8:f6:3d:d5:33:b1:e2:06:59:31:34:14:c8:03:
73:d8:1f:8e:4c:42:d7:4b:ef:4f:14:9c:6d:6b:92:fb:02:73:
7b:b6:89:6d:84:6e:60:ae:60:49:58:94:0c:23:08:36:e5:02:
e4:b3:2b:b2:90:d9:93:4b:17:9f:12:e0:28:17:cb:47:6f:58:
c8:d2:ec:8e:73:95:74:ee:b9:31:8b:ed:27:99:81:2c:7d:32:
c3:c1:1a:aa:b9:a7:1d:91:45:e4:2f:2d:18:57:4e:41:f4:8d:
4f:95:3b:54:25:b9:1a:66:2e:4a:7d:dd:b8:d1:98:74:b3:0c:
80:73:65:2d:3d:fc:aa:ef:40:17:b7:5d:fc:3d:1b:d2:ce:81:
42:f3:60:52:5e:db:dc:25:32:d8:03:2e:27:d2:c0:c1:b9:c7:
cc:74:7e:44:b4:00:aa:b4:23:fd:50:84:be:29:23:2f:7a:34:
2c:ed:e9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:58:35 2025 by rpki-client