Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/TiwKb7nlOPMc1Vnv8DcKupSD5jY.roa
File: TiwKb7nlOPMc1Vnv8DcKupSD5jY.roa (raw, json)
Hash identifier: nQWhe0fyffCN2quQfKSQ56T2rfLrYZUxC64fwkrxixE=
Subject key identifier: 4E:2C:0A:6F:B9:E5:38:F3:1C:D5:59:EF:F0:37:0A:BA:94:83:E6:36
Certificate issuer: /CN=cf8df52adfe2fce6ae96f6fe05d14089e0247cee
Certificate serial: 019424454EB2D45E855F63ABE942BF397724
Authority key identifier: CF:8D:F5:2A:DF:E2:FC:E6:AE:96:F6:FE:05:D1:40:89:E0:24:7C:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z431Kt_i_Oaulvb-BdFAieAkfO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/TiwKb7nlOPMc1Vnv8DcKupSD5jY.roa
Signing time: Wed 01 Jan 2025 23:48:29 +0000
ROA not before: Wed 01 Jan 2025 23:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205784
IP address blocks: 88.210.29.0/24 maxlen: 24
88.210.49.0/24 maxlen: 24
94.142.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/z431Kt_i_Oaulvb-BdFAieAkfO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:4e:b2:d4:5e:85:5f:63:ab:e9:42:bf:39:77:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf8df52adfe2fce6ae96f6fe05d14089e0247cee
Validity
Not Before: Jan 1 23:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e2c0a6fb9e538f31cd559eff0370aba9483e636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:46:bf:dd:96:d0:0c:2e:22:c4:f7:31:8e:67:
5e:d2:72:5e:29:17:37:dc:34:05:a8:45:98:c1:b8:
c7:ee:83:fc:e2:9e:f9:f9:5d:71:49:68:4d:2e:c5:
17:0f:58:92:97:63:8e:35:dd:09:0b:e6:8d:d6:c7:
17:22:f4:c2:1c:59:d6:3d:fe:92:4b:4a:a5:42:14:
50:87:4b:e9:b3:c2:01:d6:79:9d:c0:9b:f0:fb:c8:
83:fc:9b:b1:6a:f5:5f:08:db:60:a6:2a:fd:b6:8b:
a3:49:2b:02:52:0d:46:34:ae:ec:27:52:7b:78:70:
22:87:66:88:6e:8d:98:53:42:78:cd:d0:f1:8b:55:
c7:03:fc:de:d5:c3:bc:da:2e:da:1e:64:e8:1f:eb:
23:28:ce:a9:0d:26:21:d6:86:c5:d7:f8:58:56:8e:
a1:15:ba:b3:1e:d2:2e:19:16:5c:9d:44:ec:51:c1:
f5:7e:af:3e:64:e2:d8:01:07:7a:bf:2e:72:12:60:
fa:83:3a:84:75:1d:18:82:30:e6:5a:3e:7e:5a:06:
44:83:52:cf:95:e5:9a:29:3b:b7:6a:df:5b:d6:58:
79:8c:e8:21:bc:ba:32:69:72:34:ae:72:4e:aa:2a:
0c:fb:c6:e2:55:44:8c:c7:49:c5:7e:7b:a6:30:0d:
36:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:2C:0A:6F:B9:E5:38:F3:1C:D5:59:EF:F0:37:0A:BA:94:83:E6:36
X509v3 Authority Key Identifier:
keyid:CF:8D:F5:2A:DF:E2:FC:E6:AE:96:F6:FE:05:D1:40:89:E0:24:7C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z431Kt_i_Oaulvb-BdFAieAkfO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/TiwKb7nlOPMc1Vnv8DcKupSD5jY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.210.29.0/24
88.210.49.0/24
94.142.248.0/24
Signature Algorithm: sha256WithRSAEncryption
65:c3:6e:08:9d:aa:5c:43:91:22:47:3b:21:24:b6:47:e4:e6:
ce:56:db:e2:1d:a7:92:0d:aa:e2:da:8c:22:a9:1d:5b:6e:34:
32:2e:5d:8f:e2:b8:12:fa:c4:01:ce:88:45:02:16:2b:b8:d0:
55:54:12:3a:42:10:c2:bf:26:79:95:70:25:4d:ae:0e:a3:7c:
ff:02:5f:ee:96:2e:ab:ac:8b:2e:79:f6:2a:f4:eb:ba:84:8e:
fd:e4:88:db:72:92:0a:46:9b:84:21:57:62:dd:a9:4d:d5:0a:
5b:65:db:cb:59:db:da:d4:36:7e:f2:40:48:1b:77:29:b2:1c:
23:38:38:a3:7f:d9:1a:1b:cf:43:38:86:11:a7:42:34:76:5b:
f9:46:24:ae:d1:8f:cc:83:a8:5c:d1:f2:7a:b3:24:de:32:8c:
ed:08:f1:7c:a2:26:90:77:b6:d4:91:00:9d:40:a8:3e:f2:29:
cf:54:06:e1:f3:03:90:57:9a:df:fe:a2:be:e1:f6:59:39:a3:
c7:d5:15:9b:70:ab:f1:1d:b7:81:6f:bb:6e:43:9f:b4:9a:87:
8a:4c:a0:7e:c2:82:05:2f:d0:cc:23:cd:9e:0c:31:5e:85:81:
0b:fe:af:a3:ee:d0:7b:48:8c:56:02:7e:d8:77:ec:2f:0f:92:
23:a1:08:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:24 2025 by rpki-client