Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/mM9fzXSoteGdEr_hlrJMHt7_TmM.roa
File: mM9fzXSoteGdEr_hlrJMHt7_TmM.roa (raw, json)
Hash identifier: vll9Nqv9p3NjvwxMsl22PpBH1pWGOfJIFQPscqf1TFY=
Subject key identifier: 98:CF:5F:CD:74:A8:B5:E1:9D:12:BF:E1:96:B2:4C:1E:DE:FF:4E:63
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 019691B574E15B4E292AA68D9EF07AB70F04
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/mM9fzXSoteGdEr_hlrJMHt7_TmM.roa
Signing time: Fri 02 May 2025 15:55:10 +0000
ROA not before: Fri 02 May 2025 15:55:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216384
IP address blocks: 45.88.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:b5:74:e1:5b:4e:29:2a:a6:8d:9e:f0:7a:b7:0f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: May 2 15:55:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98cf5fcd74a8b5e19d12bfe196b24c1edeff4e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:91:2f:e3:4e:de:a1:a5:fb:92:60:a5:52:c9:
0e:70:22:8f:48:d9:e2:a0:cf:fd:e4:e5:7d:97:1d:
b0:be:f4:df:00:94:70:93:c1:56:aa:81:c4:a9:fa:
f7:7e:4b:ab:99:83:c9:d4:48:90:0c:70:fe:9e:31:
c8:ae:aa:f6:3a:7e:7f:8c:47:66:f4:82:ba:19:cc:
d0:77:c8:6a:aa:40:0e:2a:5c:d0:c8:7b:49:98:8b:
b3:95:36:d0:08:f0:a6:70:94:7d:ea:d8:d8:d9:70:
ca:1f:37:31:77:63:91:98:6c:a9:d7:db:d0:9f:a4:
25:de:07:27:8a:b1:fc:c1:09:8f:8d:66:80:89:e7:
ff:ba:55:ba:cf:f7:2e:11:08:0b:45:93:0f:31:34:
0b:00:d8:5d:28:ea:a3:a0:33:ec:77:18:8a:07:cd:
17:70:7d:3c:6a:75:d9:c2:6b:5b:63:e8:e8:ca:1e:
4d:08:32:ce:b2:76:a3:6a:ed:3a:2e:f4:ed:3f:02:
5e:34:ea:45:06:21:76:66:b7:db:a5:c6:29:12:19:
f9:02:67:61:5d:a4:b9:5a:d9:cf:13:15:c4:3f:ed:
b1:6a:8d:49:f9:da:80:8c:3a:31:e9:eb:f3:19:da:
91:ea:1b:86:c2:f2:a8:21:bb:20:96:d8:ba:63:7a:
b9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:CF:5F:CD:74:A8:B5:E1:9D:12:BF:E1:96:B2:4C:1E:DE:FF:4E:63
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/mM9fzXSoteGdEr_hlrJMHt7_TmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.159.0/24
Signature Algorithm: sha256WithRSAEncryption
48:ad:78:0d:11:bf:b4:a0:56:6e:f6:f8:cc:49:de:e0:24:a1:
a8:69:2b:0a:ad:f7:12:3c:34:23:21:b9:b3:b7:4d:af:8b:0a:
3a:88:4d:c9:7a:30:63:ca:cf:51:bd:43:25:d1:e7:f6:30:fb:
ed:ab:82:49:70:3e:ee:56:a2:63:2f:e1:dd:c3:9a:77:c1:fc:
35:82:b4:a5:bd:25:3c:cb:24:68:82:2b:d3:1a:55:f5:6c:e4:
45:dc:6f:15:2a:f2:95:64:f7:58:b4:ab:1a:a6:52:47:4d:a4:
2e:36:d8:ef:fc:93:e2:62:ba:9e:3f:bf:c1:42:2e:b0:f7:c9:
27:ed:4a:7c:01:f6:3c:15:20:5e:da:97:0c:18:ab:f7:49:f0:
42:da:48:2b:59:87:88:96:fc:38:17:d2:83:a7:ce:c6:5c:20:
cb:ad:a5:76:b4:79:8e:1c:50:d9:99:d0:20:2b:77:5c:13:2e:
73:b9:6b:01:36:f6:78:ee:4c:91:71:78:57:11:9e:24:cf:8b:
df:05:de:e6:45:70:ec:e8:60:a5:a8:0f:1c:b7:18:69:65:33:
21:d7:7a:10:be:39:cf:f3:e3:73:4e:fe:f7:bc:84:d5:49:6a:
7e:d0:78:83:77:3d:c1:c4:30:8d:5f:d5:50:61:5e:84:a9:40:
03:fb:b8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:29:31 2025 by rpki-client