Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/0tVPRt7zVqUIIvmXairhGKRXv0U.roa
File: 0tVPRt7zVqUIIvmXairhGKRXv0U.roa (raw, json)
Hash identifier: dhSo1lkIbUUIXrPA3/k2AFZiXI7dxBUbTf590V+gQts=
Subject key identifier: D2:D5:4F:46:DE:F3:56:A5:08:22:F9:97:6A:2A:E1:18:A4:57:BF:45
Certificate issuer: /CN=88f342dd1127c67af1116ab1f997e27cb4c884e8
Certificate serial: 01942068437CC1EB7A57D383EC6B3C99F6C7
Authority key identifier: 88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/0tVPRt7zVqUIIvmXairhGKRXv0U.roa
Signing time: Wed 01 Jan 2025 05:48:11 +0000
ROA not before: Wed 01 Jan 2025 05:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39841
IP address blocks: 185.88.4.0/24 maxlen: 24
185.88.5.0/24 maxlen: 24
185.88.6.0/24 maxlen: 24
185.88.7.0/24 maxlen: 24
2a03:7d20::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:43:7c:c1:eb:7a:57:d3:83:ec:6b:3c:99:f6:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f342dd1127c67af1116ab1f997e27cb4c884e8
Validity
Not Before: Jan 1 05:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2d54f46def356a50822f9976a2ae118a457bf45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e2:bc:fd:24:14:13:c6:e9:75:4a:d2:24:01:
e4:dd:7b:e7:e4:4a:91:f2:01:42:b8:3c:78:8d:c7:
a3:c6:26:79:97:7c:5b:ef:65:a6:c8:8a:83:ea:9c:
3d:6c:8f:2b:e6:0e:ae:b6:53:0f:72:eb:1a:71:af:
df:c7:20:bf:85:69:9d:62:3e:2f:0f:d6:3d:03:ff:
60:65:a1:a7:cd:2a:0f:9b:97:b4:46:d9:39:e9:5e:
58:6c:0a:c8:eb:88:b5:99:d5:00:d1:b1:9e:49:31:
c8:89:39:3e:7a:bb:d9:4d:c1:82:2b:c8:68:76:f4:
83:5f:d1:ce:86:be:25:bb:50:2f:20:19:a8:f9:f7:
f1:4f:5c:43:ba:b4:47:ca:4e:12:e2:14:57:6f:02:
c4:24:5c:b7:eb:80:73:2f:01:9b:a2:55:c4:21:6f:
55:41:68:ae:36:ca:52:d7:af:36:39:ba:e7:48:d1:
21:4d:2d:9c:d4:5c:a8:ab:43:37:b5:d1:97:6e:08:
e4:4f:a8:f4:5c:ad:58:98:7e:d0:51:b5:4e:d4:80:
c8:dc:50:e8:b8:0f:88:30:33:95:eb:bf:52:f0:23:
09:be:b0:53:b5:8f:6a:ee:0d:90:7c:b4:13:a0:03:
29:53:16:06:65:35:23:f9:95:e6:08:f8:07:6d:d6:
eb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D5:4F:46:DE:F3:56:A5:08:22:F9:97:6A:2A:E1:18:A4:57:BF:45
X509v3 Authority Key Identifier:
keyid:88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/0tVPRt7zVqUIIvmXairhGKRXv0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.88.4.0/22
IPv6:
2a03:7d20::/32
Signature Algorithm: sha256WithRSAEncryption
1c:9b:52:ee:97:c8:1b:f6:d6:07:8e:7b:bb:57:7f:f5:0e:3a:
41:75:8d:e3:21:da:84:97:2b:7b:19:32:92:79:ff:d4:6d:7f:
e0:af:98:32:ce:57:98:22:d3:27:8b:0d:09:c9:fa:ac:90:de:
f9:01:45:58:eb:d1:c4:5d:0c:43:1b:c7:a0:ed:0d:2f:c5:55:
cc:4a:22:f1:7e:70:cf:72:5b:2a:91:84:f8:2c:aa:a1:07:9f:
37:82:cf:8a:24:cb:74:bc:56:e1:1c:10:bf:66:0a:d5:0a:0b:
be:d9:26:ee:2f:bd:03:7f:ba:3d:27:3d:4e:3d:d5:f8:ce:df:
26:38:c1:e9:d7:f0:2a:5a:dc:62:b3:95:68:c5:5d:59:9a:de:
30:97:76:0e:9d:2e:cb:24:1c:a3:13:97:95:43:05:60:eb:de:
64:49:bd:b0:ec:d0:d8:06:7b:d3:60:81:b6:09:79:0c:01:a6:
84:ba:f5:3c:84:eb:75:d6:34:16:65:9e:d0:33:f8:82:bc:8c:
6d:47:64:7a:18:c5:7a:18:95:fa:09:8f:a1:77:54:b1:3a:66:
23:41:f9:57:80:4e:02:32:31:e1:57:16:b2:79:80:6e:75:ce:
2b:24:9a:21:a0:69:d5:49:b4:63:b6:9c:4b:02:a3:8e:be:b2:
d6:ec:6d:18
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQgaEN8wet6V9OD7Gs8mfbHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZjM0MmRkMTEyN2M2N2FmMTExNmFiMWY5OTdlMjdjYjRj
ODg0ZTgwHhcNMjUwMTAxMDU0ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMmQ1NGY0NmRlZjM1NmE1MDgyMmY5OTc2YTJhZTExOGE0NTdiZjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+K8/SQUE8bpdUrSJAHk3Xvn5EqR
8gFCuDx4jcejxiZ5l3xb72WmyIqD6pw9bI8r5g6utlMPcusaca/fxyC/hWmdYj4v
D9Y9A/9gZaGnzSoPm5e0Rtk56V5YbArI64i1mdUA0bGeSTHIiTk+ervZTcGCK8ho
dvSDX9HOhr4lu1AvIBmo+ffxT1xDurRHyk4S4hRXbwLEJFy364BzLwGbolXEIW9V
QWiuNspS1682ObrnSNEhTS2c1Fyoq0M3tdGXbgjkT6j0XK1YmH7QUbVO1IDI3FDo
uA+IMDOV679S8CMJvrBTtY9q7g2QfLQToAMpUxYGZTUj+ZXmCPgHbdbrhwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFNLVT0be81alCCL5l2oq4RikV79FMB8GA1UdIwQY
MBaAFIjzQt0RJ8Z68RFqsfmX4ny0yIToMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVBOQzNSRW54bnJ4RVdxeC1aZmlmTFRJaE9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yNGZkMTUtMjJhOS00YmQ2LWEyMzIt
OGIzNmU5ZDA2M2ExLzEvMHRWUFJ0N3pWcVVJSXZtWGFpcmhHS1JYdjBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC8yNGZkMTUtMjJhOS00YmQ2LWEyMzItOGIzNmU5ZDA2M2Ex
LzEvaVBOQzNSRW54bnJ4RVdxeC1aZmlmTFRJaE9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuVgEMA0E
AgACMAcDBQAqA30gMA0GCSqGSIb3DQEBCwUAA4IBAQAcm1Lul8gb9tYHjnu7V3/1
DjpBdY3jIdqElyt7GTKSef/UbX/gr5gyzleYItMniw0JyfqskN75AUVY69HEXQxD
G8eg7Q0vxVXMSiLxfnDPclsqkYT4LKqhB583gs+KJMt0vFbhHBC/ZgrVCgu+2Sbu
L70Df7o9Jz1OPdX4zt8mOMHp1/AqWtxis5VoxV1Zmt4wl3YOnS7LJByjE5eVQwVg
695kSb2w7NDYBnvTYIG2CXkMAaaEuvU8hOt11jQWZZ7QM/iCvIxtR2R6GMV6GJX6
CY+hd1SxOmYjQflXgE4CMjHhVxayeYBudc4rJJohoGnVSbRjtpxLAqOOvrLW7G0Y
-----END CERTIFICATE-----
Generated at Tue Apr 8 18:14:00 2025 by rpki-client