Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/iObLoZRw9mIMSAOqLwjRFug79vY.roa
File: iObLoZRw9mIMSAOqLwjRFug79vY.roa (raw, json)
Hash identifier: m+1uimwhze5uvNShnEbztYK/XzK+OCrmQl/L4h/lLgw=
Subject key identifier: 88:E6:CB:A1:94:70:F6:62:0C:48:03:AA:2F:08:D1:16:E8:3B:F6:F6
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 01956531D786C47C671D370ACBAA04F6C720
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/iObLoZRw9mIMSAOqLwjRFug79vY.roa
Signing time: Wed 05 Mar 2025 07:25:20 +0000
ROA not before: Wed 05 Mar 2025 07:25:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 93.88.144.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:65:31:d7:86:c4:7c:67:1d:37:0a:cb:aa:04:f6:c7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Mar 5 07:25:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=88e6cba19470f6620c4803aa2f08d116e83bf6f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:59:57:e5:c2:96:3e:25:78:0b:07:52:df:c9:
aa:b4:8a:53:a9:1d:a4:ee:6c:8e:cf:0e:05:14:60:
48:da:b2:5a:e1:04:d8:d2:31:79:82:89:4e:ae:ce:
18:5b:fc:ad:ec:3d:b8:4c:fb:6f:88:73:27:97:3e:
76:cf:7e:2a:56:ea:08:32:50:29:2a:f0:3d:3b:06:
8c:83:e0:ec:e4:7f:f1:73:37:64:d0:bc:9a:58:ef:
1b:43:ca:32:45:bc:0c:46:66:62:ed:be:4c:df:9a:
7f:5d:b9:48:89:2c:38:1d:53:d5:26:d1:99:b4:14:
f0:47:f5:f5:25:6f:bc:4f:7c:96:27:40:5f:5d:53:
58:0b:c5:03:ad:23:33:1a:35:06:69:04:97:23:5e:
1f:0f:77:62:b9:05:ef:cc:fa:fc:98:7e:47:ab:6c:
fc:71:1a:ec:f8:4a:5d:eb:7e:c9:af:6e:9f:4e:12:
dc:1e:f0:14:0a:40:ae:27:dc:55:9f:2c:17:52:a2:
ad:a5:ce:48:58:e8:99:16:6f:e3:51:4d:f7:f7:44:
c8:cf:be:68:38:ad:68:23:55:3b:59:41:f1:5f:c6:
78:13:14:61:df:14:64:71:b2:f3:1f:f6:d2:b5:8d:
d1:9a:74:6b:6a:3a:7d:0e:80:63:e0:7b:80:b0:74:
ac:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E6:CB:A1:94:70:F6:62:0C:48:03:AA:2F:08:D1:16:E8:3B:F6:F6
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/iObLoZRw9mIMSAOqLwjRFug79vY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.88.144.0/21
Signature Algorithm: sha256WithRSAEncryption
93:26:32:68:b9:e2:e7:ba:47:47:f0:e9:09:f8:e3:b9:e8:fa:
10:b4:66:32:60:33:a1:8c:8f:d8:39:0b:bc:e1:43:08:6b:c8:
37:8e:6b:3e:fa:3d:6f:98:a3:31:e1:98:c0:7a:92:1b:25:7e:
1b:0f:12:45:15:a2:4f:d4:5f:72:ed:23:ce:a4:49:47:cb:37:
e4:e7:8b:1d:10:51:ed:2a:93:87:e9:ab:34:b5:1d:ae:9e:b3:
de:01:ef:ee:db:2c:73:ef:38:12:1e:8b:ef:92:9f:d5:22:88:
4c:4e:67:ec:2d:56:36:7a:5d:34:eb:8c:7c:c5:83:c9:8a:da:
bf:0d:35:b4:a6:dc:9b:40:fa:c1:06:3f:f0:80:57:a4:68:ad:
e6:e4:2d:80:8b:7b:4b:ef:50:dd:a2:fd:27:a3:31:95:1e:b2:
a9:18:ee:d5:34:a8:93:56:69:a7:e7:8a:fb:8a:0a:86:0b:21:
7c:8b:d9:0d:32:fd:c6:ba:1b:c3:ed:05:77:76:d3:0d:eb:0f:
b7:c9:a5:d3:a8:d5:1f:bd:a6:9c:5e:a9:a5:95:ba:6d:4c:99:
c0:76:39:ba:49:a3:e3:1f:83:15:ba:ba:44:11:8e:aa:8e:13:
83:96:e5:f5:d6:fa:57:d9:3f:c5:e9:fb:89:8c:ed:b4:89:9d:
5b:92:8e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:08:25 2025 by rpki-client