Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/76YLPrhx6YZ6wPUnxx4hhghh_yA.roa
File: 76YLPrhx6YZ6wPUnxx4hhghh_yA.roa (raw, json)
Hash identifier: 9g4sgttXIK8h4MyA93dVripngZ6JdbGVj8k/XjqSGOA=
Subject key identifier: EF:A6:0B:3E:B8:71:E9:86:7A:C0:F5:27:C7:1E:21:86:08:61:FF:20
Certificate issuer: /CN=5cf4501b755002d9143e8fa6736815e9f0f93695
Certificate serial: 0194266C0D505D9C784BCC06A11A6C38DEED
Authority key identifier: 5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/76YLPrhx6YZ6wPUnxx4hhghh_yA.roa
Signing time: Thu 02 Jan 2025 09:50:02 +0000
ROA not before: Thu 02 Jan 2025 09:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215000
IP address blocks: 88.97.172.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 08:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:0d:50:5d:9c:78:4b:cc:06:a1:1a:6c:38:de:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf4501b755002d9143e8fa6736815e9f0f93695
Validity
Not Before: Jan 2 09:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efa60b3eb871e9867ac0f527c71e21860861ff20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:63:01:1a:c3:d8:9a:89:10:15:06:40:ae:0b:
76:39:7d:bc:cd:3e:d5:58:27:a5:7d:36:58:36:24:
0d:39:22:e3:e1:ed:ff:ce:88:7b:4d:8a:a9:6b:7a:
f4:f9:fc:8e:6f:7c:98:14:de:61:48:01:27:b1:31:
d6:0b:52:17:8f:94:2f:a6:d4:de:97:be:23:39:57:
84:35:68:64:f9:41:3e:9b:24:90:cd:e8:f7:45:57:
13:6b:97:86:56:5b:a8:b0:aa:6f:b7:fe:5b:c3:9d:
45:f3:d5:e3:bf:ce:84:11:bc:00:72:44:d1:2d:ff:
0f:3e:9d:46:67:f9:77:35:89:57:04:2f:af:05:af:
3f:f8:23:18:e9:98:14:6c:cc:c7:e0:6d:50:45:f6:
55:22:78:e8:62:34:4f:6b:1b:77:11:47:d0:7d:20:
0a:c5:88:7d:5a:f3:0c:20:6d:2e:5e:dc:0f:3e:fb:
2a:28:c0:a7:63:e7:10:07:d6:02:d1:3e:7f:29:7c:
0a:10:02:c5:51:18:e4:55:44:23:28:e1:21:f0:18:
40:a8:41:5c:09:1d:fa:20:20:02:ed:20:93:b4:2c:
1a:5c:94:5a:cf:84:2e:36:87:b1:5b:85:0f:3e:e9:
9f:16:60:11:61:94:bf:9e:64:e8:bc:b2:07:01:4b:
fb:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A6:0B:3E:B8:71:E9:86:7A:C0:F5:27:C7:1E:21:86:08:61:FF:20
X509v3 Authority Key Identifier:
keyid:5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/76YLPrhx6YZ6wPUnxx4hhghh_yA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.97.172.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:81:c5:0a:12:26:07:41:a8:ee:ea:0a:cd:b8:97:e8:f1:2d:
bb:bc:42:b1:67:9a:80:69:86:3f:84:3f:5b:0a:eb:79:75:f1:
1f:f6:c5:14:ff:20:9b:fa:61:e4:3c:5c:54:4d:24:92:6b:b4:
1e:4e:b7:0d:3e:1b:60:33:71:8d:5e:e6:b7:73:ba:53:4f:19:
a7:26:c9:10:91:27:11:7a:16:38:df:e7:84:f2:fe:ae:3a:16:
25:4c:0b:a8:cd:ec:c3:f7:02:d9:d4:f7:00:a8:b8:79:ca:6d:
05:a3:2d:32:a1:e7:eb:03:b6:be:ea:8b:0a:f8:1e:d4:18:be:
57:86:35:df:29:54:0c:d3:b8:d1:96:33:42:10:9a:eb:89:49:
68:46:41:74:27:76:9e:7f:8c:55:aa:5c:3b:77:d5:44:8f:f7:
d5:26:7d:7a:8d:ec:0a:f7:77:c4:66:ea:fb:11:2e:ad:82:b8:
ea:f5:b4:7e:0c:0e:16:51:77:74:62:34:fb:0f:cd:e8:3b:b8:
4d:4b:57:5f:f9:bc:cd:10:5d:eb:1a:74:4c:69:2e:93:65:d7:
99:05:d1:01:d9:82:53:22:89:7f:12:d8:9d:b6:b7:50:8a:7b:
55:ff:e9:c5:52:8b:0d:0d:ea:3a:4e:4f:08:52:47:62:e2:5c:
99:76:36:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:35:25 2025 by rpki-client