Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/11lOaRU7MF7FcgxE4R9XRkIdnqo.roa
File: 11lOaRU7MF7FcgxE4R9XRkIdnqo.roa (raw, json)
Hash identifier: M2CH14vyLfisxEvGm4ORm0aaawOu/BRSvOS3W2Ud6h0=
Subject key identifier: D7:59:4E:69:15:3B:30:5E:C5:72:0C:44:E1:1F:57:46:42:1D:9E:AA
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 0194ACC125B558017231584B2018D325ADAE
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/11lOaRU7MF7FcgxE4R9XRkIdnqo.roa
Signing time: Tue 28 Jan 2025 11:52:06 +0000
ROA not before: Tue 28 Jan 2025 11:52:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51178
IP address blocks: 93.88.172.0/22 maxlen: 22
93.88.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ac:c1:25:b5:58:01:72:31:58:4b:20:18:d3:25:ad:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 28 11:52:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7594e69153b305ec5720c44e11f5746421d9eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:de:16:1d:30:76:99:b8:aa:1f:46:7e:f4:04:
e5:65:45:5c:52:ed:d9:f9:b5:62:49:b8:84:cc:f8:
81:1d:a8:4a:ef:c6:aa:14:56:e5:e5:fd:3c:1f:25:
1f:62:9c:7d:6f:bf:53:42:fa:7a:34:e9:a8:76:34:
0f:0d:66:9b:74:0d:fa:bc:1c:d2:8e:a4:35:fc:e0:
b4:73:ed:14:5f:b9:94:75:92:2a:e0:92:03:79:07:
8c:4f:5b:6c:8f:d6:bc:03:f4:ab:56:1e:67:64:56:
fe:51:ed:e3:2a:83:16:9c:66:97:83:4f:12:e8:41:
ed:ca:d4:48:84:17:6a:f2:ac:c5:67:d9:65:47:a3:
14:36:d4:2b:44:05:cb:d0:0d:52:d1:d9:b2:16:67:
de:c8:f6:4e:33:a7:71:ce:e7:2d:61:e7:5f:79:4d:
ea:76:a6:30:1f:d9:77:90:e0:43:d0:b7:39:2d:1e:
18:f3:69:d4:b7:c2:5e:9d:b4:24:73:3e:a3:5c:47:
8e:6d:c1:43:40:b6:b4:8f:34:6a:67:25:1c:ad:e8:
86:1d:b6:88:81:4f:6d:46:d5:10:65:f6:b9:d4:78:
32:78:62:83:54:43:6d:18:26:48:5b:7b:64:1d:f3:
21:7b:48:47:e4:44:3f:34:02:51:67:fc:08:ba:13:
56:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:59:4E:69:15:3B:30:5E:C5:72:0C:44:E1:1F:57:46:42:1D:9E:AA
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/11lOaRU7MF7FcgxE4R9XRkIdnqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.88.172.0/22
Signature Algorithm: sha256WithRSAEncryption
c9:9e:f3:02:74:23:8d:1e:41:fc:5a:71:7e:c6:49:10:35:ca:
2b:92:1f:c3:6a:0b:16:58:0c:7d:aa:c0:26:f3:00:f9:c1:ff:
9f:56:be:5c:13:f2:72:8a:7d:ac:60:95:89:7c:74:e9:bd:e3:
c9:a6:56:74:87:03:1c:9b:c8:81:b1:66:62:b6:2e:33:ce:74:
64:eb:c6:a3:b0:16:a5:2c:8f:04:00:1f:70:93:4a:d0:af:0c:
66:d8:82:dc:df:3d:b6:a3:01:8f:8b:4b:6e:d1:bf:5c:2c:44:
29:cd:0e:4d:c9:f7:07:8a:b7:c8:8d:bd:ce:1b:3d:44:ab:c1:
b4:7b:2a:7f:12:5e:e4:81:d5:b8:a0:02:b1:a5:b0:20:9b:87:
30:87:8e:37:30:0a:6e:4b:58:c5:0c:8d:68:ca:ca:d4:ec:ed:
6b:fb:08:bf:61:e1:fb:36:ac:ff:75:5e:24:0f:1f:73:04:e4:
7a:27:f7:62:ee:80:3e:41:d7:a9:e7:b1:11:e1:8e:02:83:03:
c5:65:cd:ed:86:73:24:37:03:63:8d:9a:68:a7:58:ea:7a:20:
d8:1c:dd:47:c2:5e:40:a3:ab:f8:5c:9c:4a:bc:46:84:89:95:
be:3a:90:ab:0c:a0:2f:25:6b:c7:0b:e2:72:dc:e4:ff:9e:b4:
2d:fc:af:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:36:41 2025 by rpki-client