Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/mY1ufwtGCljFF7lZ6CWRsYHr8SQ.roa
File: mY1ufwtGCljFF7lZ6CWRsYHr8SQ.roa (raw, json)
Hash identifier: g60/pAqTVBNRMpLoOtOl1CqOXpp6KEeIdA1Y9Rm5TG8=
Subject key identifier: 99:8D:6E:7F:0B:46:0A:58:C5:17:B9:59:E8:25:91:B1:81:EB:F1:24
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 0194266B7FAA8F39D46AC3ABEE2BC0DEA016
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/mY1ufwtGCljFF7lZ6CWRsYHr8SQ.roa
Signing time: Thu 02 Jan 2025 09:49:26 +0000
ROA not before: Thu 02 Jan 2025 09:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51249
IP address blocks: 87.99.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:7f:aa:8f:39:d4:6a:c3:ab:ee:2b:c0:de:a0:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Jan 2 09:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=998d6e7f0b460a58c517b959e82591b181ebf124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:59:df:d1:30:6c:fd:fd:e7:a6:bf:8e:5c:a8:
7a:f6:39:c4:22:d2:fc:fe:a2:05:f5:8c:a6:5e:04:
9c:5e:72:cf:3b:ac:a6:a0:75:89:ad:98:04:3b:1f:
4d:58:a7:5d:33:73:00:72:f6:eb:7d:22:dd:eb:12:
0e:3f:2b:77:22:49:75:26:bc:50:95:e1:6e:66:e5:
b7:fb:c0:b0:fb:8e:73:9d:07:cb:a1:95:21:dd:80:
8c:1d:c1:d6:eb:e9:ee:58:c0:6f:af:8a:d1:65:cd:
e4:8c:5b:9d:03:8d:cf:9d:4a:e6:12:49:91:71:79:
61:36:1c:a3:f9:f1:c5:6f:d3:48:7f:92:dd:ff:47:
ff:64:83:da:4e:9c:d6:6a:18:cd:73:50:08:12:16:
51:e4:e6:c9:5d:5f:b6:e3:7d:c9:b8:76:c1:31:91:
9a:fd:a1:63:69:bc:6a:2a:17:ec:18:90:90:00:a9:
c5:80:d4:32:65:e6:c8:e0:aa:c2:3f:90:b0:31:4b:
39:9e:9e:c0:c1:3a:38:9a:f2:f5:dd:34:33:0c:92:
81:b8:18:0f:f0:07:16:04:0f:85:d9:73:e5:4b:b5:
ad:dd:cf:46:17:bb:74:08:1f:03:21:26:56:16:cc:
38:e1:2e:88:99:a3:2d:52:60:80:cf:f4:71:51:3d:
6b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:8D:6E:7F:0B:46:0A:58:C5:17:B9:59:E8:25:91:B1:81:EB:F1:24
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/mY1ufwtGCljFF7lZ6CWRsYHr8SQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.99.71.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:72:c9:a7:65:37:4f:65:b0:ee:96:3e:39:fc:60:1f:02:8f:
e4:70:ee:c7:68:35:35:3c:ca:49:a6:fc:1a:76:83:f4:77:ea:
74:4f:aa:47:20:98:0f:4e:b9:dc:ec:9e:c9:85:f9:07:46:f1:
28:10:bd:c7:87:81:cb:48:cb:1f:58:0d:3a:27:b0:57:8e:90:
5c:43:29:54:81:22:98:74:0f:41:0a:24:b4:32:e6:65:c7:db:
7c:b3:f2:62:d2:0c:6a:a3:7e:5b:8d:7c:c4:94:7b:bd:f1:47:
fe:20:e4:d0:e5:ca:80:e5:7b:83:38:0b:04:99:67:94:58:df:
bd:ac:52:69:b6:2b:41:57:2b:44:d4:98:90:5a:c9:6f:50:2b:
d2:4c:18:e1:23:e8:9a:13:78:d9:6b:f3:8e:56:fa:91:55:45:
7f:64:6f:6b:81:22:29:fb:c8:cf:04:8c:9a:1c:d3:37:6e:a0:
68:fc:04:34:db:04:5d:99:50:0e:e4:87:2e:84:9b:bd:99:b0:
14:29:d9:d0:24:9c:ba:95:e9:75:18:72:cd:5d:99:69:99:3f:
6b:59:f0:d4:12:9a:88:b6:27:4a:c7:e8:4a:dd:cb:cf:fb:18:
7b:5e:28:e1:45:03:60:1b:f0:1f:63:01:63:10:90:12:61:cd:
6f:0d:7a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:12:32 2025 by rpki-client