Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/59rlgV96ANnvbttVckQTSpcL4gg.roa
File: 59rlgV96ANnvbttVckQTSpcL4gg.roa (raw, json)
Hash identifier: yMmqOnSAlEZI0n5Ljt8KnwxkwDwpOxx+NBJ3GGUG5bk=
Subject key identifier: E7:DA:E5:81:5F:7A:00:D9:EF:6E:DB:55:72:44:13:4A:97:0B:E2:08
Certificate issuer: /CN=1d6b6b6a5061a4115d53040cffdc64b3b0d71a78
Certificate serial: 01942521A977B35A09417EB6CE82AB995336
Authority key identifier: 1D:6B:6B:6A:50:61:A4:11:5D:53:04:0C:FF:DC:64:B3:B0:D7:1A:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HWtralBhpBFdUwQM_9xks7DXGng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/59rlgV96ANnvbttVckQTSpcL4gg.roa
Signing time: Thu 02 Jan 2025 03:49:10 +0000
ROA not before: Thu 02 Jan 2025 03:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200706
IP address blocks: 185.88.16.0/22 maxlen: 22
185.88.16.0/23 maxlen: 23
185.88.16.0/24 maxlen: 24
185.88.17.0/24 maxlen: 24
185.88.18.0/23 maxlen: 23
185.88.18.0/24 maxlen: 24
185.88.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/HWtralBhpBFdUwQM_9xks7DXGng.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/HWtralBhpBFdUwQM_9xks7DXGng.mft
rsync://rpki.ripe.net/repository/DEFAULT/HWtralBhpBFdUwQM_9xks7DXGng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:a9:77:b3:5a:09:41:7e:b6:ce:82:ab:99:53:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d6b6b6a5061a4115d53040cffdc64b3b0d71a78
Validity
Not Before: Jan 2 03:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7dae5815f7a00d9ef6edb557244134a970be208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:66:ba:71:60:67:e5:b0:69:4a:df:38:ed:f5:
2b:61:ba:8c:dd:a7:32:c1:50:73:5d:00:51:42:d9:
1e:4a:b0:d2:2f:8e:c2:ce:61:d5:0e:6b:dc:47:9d:
5b:3b:47:15:4a:68:a7:38:e3:2d:77:17:4c:15:da:
69:ed:71:09:01:ed:67:fa:e0:54:87:5c:36:b2:53:
a1:49:0a:87:64:49:16:6d:9c:d3:af:bc:00:a4:08:
07:99:68:86:90:32:eb:8c:1a:ea:22:07:0b:9c:7a:
2a:05:fc:e1:4d:ef:5f:31:61:06:8e:bd:65:63:70:
bb:8e:01:df:f9:2a:97:eb:93:bb:03:d7:58:05:93:
2f:e5:d1:51:e3:36:e7:3e:6c:b6:c5:0b:64:bb:42:
96:30:17:8a:fc:be:90:c6:ff:c7:b2:e2:cb:3c:35:
79:23:e4:21:98:a4:60:5c:30:85:d9:88:04:0d:6c:
e1:10:25:74:e4:c4:12:ef:1b:b8:7b:ff:6d:c1:ca:
c1:51:ff:72:3b:31:5a:3f:53:8b:16:56:3c:2f:ee:
2a:33:66:fc:4b:28:8e:b6:12:b7:15:ee:50:3b:16:
0f:a7:0a:60:94:4c:71:e5:c8:f6:41:e2:79:87:b9:
d1:27:d3:5a:70:74:0e:bb:d7:4b:e9:15:f1:51:ac:
58:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:DA:E5:81:5F:7A:00:D9:EF:6E:DB:55:72:44:13:4A:97:0B:E2:08
X509v3 Authority Key Identifier:
keyid:1D:6B:6B:6A:50:61:A4:11:5D:53:04:0C:FF:DC:64:B3:B0:D7:1A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWtralBhpBFdUwQM_9xks7DXGng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/59rlgV96ANnvbttVckQTSpcL4gg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/HWtralBhpBFdUwQM_9xks7DXGng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.88.16.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:0d:33:0b:67:04:f9:64:a0:42:9d:16:94:15:9f:50:ee:2f:
e9:47:64:02:2d:12:ef:d3:62:43:65:a9:10:c4:8a:33:f2:39:
11:2a:ad:d5:e2:88:d2:ce:08:56:f0:15:41:cd:68:e0:2f:e2:
6a:7d:6d:6b:ef:72:8c:b1:a0:36:df:60:a1:9e:ed:61:28:b5:
b2:72:d1:c3:21:12:6f:eb:99:f0:21:89:82:50:d3:8d:ee:c3:
f1:0f:67:69:69:9a:53:44:c6:f0:9f:1e:0b:bb:ae:22:ea:1d:
45:76:dc:a9:59:e1:00:97:b7:35:50:cc:f8:0b:c4:27:4c:48:
09:94:e3:1c:24:1a:cd:59:65:52:4c:a6:96:4e:4c:7b:dd:7e:
5e:d1:dd:a4:58:e3:9f:4f:7c:b8:35:30:56:ae:a5:90:67:34:
64:9e:ba:f3:0b:cf:da:69:ba:b9:b1:1f:14:fa:1b:58:0d:6e:
a8:d6:3c:2f:78:c2:70:ff:5d:26:1b:69:7d:6b:a6:5e:c4:95:
27:03:5a:59:e4:02:68:fc:7e:ed:50:6a:dd:c0:ca:a1:14:8f:
59:8f:39:9c:1b:6b:25:b3:b8:a3:64:5f:78:d2:47:bb:13:c9:
b7:66:40:e0:b0:6c:64:16:63:b3:4a:f4:62:d1:3c:4c:8d:2f:
17:14:20:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:44:41 2025 by rpki-client