Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/8bCbzIiZRFwEEa_E6cs9fnIwV7s.roa
File: 8bCbzIiZRFwEEa_E6cs9fnIwV7s.roa (raw, json)
Hash identifier: 6lVUeh30jGuPMYRzRZNGP4/Zrf/ZrYTybKdA+EzjHEw=
Subject key identifier: F1:B0:9B:CC:88:99:44:5C:04:11:AF:C4:E9:CB:3D:7E:72:30:57:BB
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 0194282822E6E6C07F458265781DCDA699F5
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/8bCbzIiZRFwEEa_E6cs9fnIwV7s.roa
Signing time: Thu 02 Jan 2025 17:55:06 +0000
ROA not before: Thu 02 Jan 2025 17:55:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197897
IP address blocks: 88.203.248.0/22 maxlen: 22
88.203.248.0/24 maxlen: 24
88.203.249.0/24 maxlen: 24
88.203.250.0/24 maxlen: 24
88.203.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:22:e6:e6:c0:7f:45:82:65:78:1d:cd:a6:99:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 17:55:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1b09bcc8899445c0411afc4e9cb3d7e723057bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bd:61:ec:77:e3:b1:01:83:69:8d:94:a2:da:
ae:b3:89:8b:d0:67:ba:bc:b3:a2:4b:02:96:19:6b:
10:27:b4:3e:89:01:a5:2b:d4:6c:d8:25:95:e8:22:
94:28:3b:83:a4:2d:72:dc:b9:24:5b:f3:10:e5:4d:
63:18:56:5a:ac:38:13:44:af:70:57:f7:1a:85:f3:
04:03:ae:a6:16:0e:66:1a:9c:e6:cb:91:6e:83:61:
16:55:39:71:27:e9:8e:70:9f:c7:6f:ee:6e:f9:b8:
94:9d:1a:fc:fc:77:b7:b0:66:8b:97:36:74:7a:b9:
d6:cb:ba:c8:55:2f:0a:72:79:ef:29:97:f6:70:3a:
6a:15:cf:cb:93:29:1f:c5:dc:71:5e:62:2d:7c:19:
9f:b9:6e:da:33:93:91:e3:45:f0:7e:26:f4:13:f7:
b0:6b:ec:1a:f0:60:81:6b:9f:a8:43:6d:32:77:d2:
59:b7:c0:43:f5:45:a5:2d:20:9b:0d:45:d8:d4:22:
de:7a:99:f8:c4:cd:f0:16:ca:10:53:79:19:b5:21:
22:4a:d0:49:06:54:ae:5c:fc:d5:1b:ec:9e:1c:d9:
01:1f:c2:8a:7f:e8:16:d2:a7:53:ce:f4:ac:b8:a7:
91:e4:30:91:68:a1:77:bb:83:6d:5d:69:e4:06:52:
c5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B0:9B:CC:88:99:44:5C:04:11:AF:C4:E9:CB:3D:7E:72:30:57:BB
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/8bCbzIiZRFwEEa_E6cs9fnIwV7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.203.248.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:0d:9c:62:9c:d3:da:d3:2b:fd:39:6d:36:83:e2:d8:34:c7:
e6:9c:13:bc:d6:8f:09:49:eb:d8:56:1c:91:7b:5f:b9:81:08:
14:e7:7c:d1:58:6a:bb:ac:3c:13:5d:b6:d6:0f:50:d7:90:70:
3d:2d:ad:7e:9a:e5:af:e9:38:f7:94:00:85:fb:ab:d1:65:3a:
de:bf:00:05:87:cb:1e:b5:ae:91:f3:f5:39:49:e5:df:63:31:
8c:7f:68:81:06:80:b2:f0:81:fb:b0:ee:99:0c:90:3e:5d:9e:
b2:e7:84:4a:75:87:5e:bc:20:82:bc:07:cb:e2:ff:95:b3:36:
cf:d5:f4:75:15:b2:86:e0:41:b7:b3:2e:8b:64:64:80:92:de:
17:ac:90:50:90:ba:7c:0a:7d:18:ad:db:ab:c1:34:84:40:51:
b7:34:7e:66:ce:0a:21:23:58:2f:3d:63:19:b2:0e:d5:94:b8:
0c:51:f1:0b:e7:1d:35:38:90:f7:32:05:ab:75:e2:8c:3f:45:
a6:da:92:39:44:5d:1f:fe:6b:71:b9:29:94:4f:13:d2:3c:40:
2c:7f:13:52:16:8d:42:7d:98:b2:f1:6a:47:34:6c:af:6e:74:
08:eb:75:a0:05:4d:9c:0b:cc:0c:99:3f:20:2b:aa:4e:2d:3c:
f4:35:23:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:49:23 2025 by rpki-client