Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/vyLjFvSuQm0_pQih6LiAdYCNY9c.roa
File: vyLjFvSuQm0_pQih6LiAdYCNY9c.roa (raw, json)
Hash identifier: /6CYLPOjXexhIIIeJnrGjEKoKdtpezbqkCXs7RqU3FI=
Subject key identifier: BF:22:E3:16:F4:AE:42:6D:3F:A5:08:A1:E8:B8:80:75:80:8D:63:D7
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 019427B5B37A972F4B42A2E3E5183ED2C730
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/vyLjFvSuQm0_pQih6LiAdYCNY9c.roa
Signing time: Thu 02 Jan 2025 15:50:06 +0000
ROA not before: Thu 02 Jan 2025 15:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212815
IP address blocks: 188.66.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:b3:7a:97:2f:4b:42:a2:e3:e5:18:3e:d2:c7:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Jan 2 15:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf22e316f4ae426d3fa508a1e8b88075808d63d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3b:ac:60:1f:a1:46:00:93:21:9a:b7:66:1d:
2f:ee:ff:cf:33:ee:6e:44:78:f6:bd:f7:29:8e:cf:
6e:9c:ed:c7:8e:98:32:4a:29:eb:fe:84:96:fe:3a:
b2:bf:7b:b1:01:19:71:06:fc:0e:07:1a:3f:25:ff:
2b:27:5a:e4:0c:05:1c:fd:f4:6b:56:38:01:68:a2:
8e:7b:38:bc:58:fc:88:2c:22:e1:bd:7c:87:a3:7d:
9a:bc:57:bc:b5:18:f2:a8:4d:98:8a:1a:e6:cf:db:
65:13:f4:2c:a2:8b:c7:57:27:7b:f3:6d:19:c1:02:
8e:7d:38:65:15:11:c6:f8:86:d4:7f:5a:41:13:cb:
d4:9a:6f:19:3a:02:de:4b:37:99:71:7a:c4:fe:fb:
fb:d5:48:63:15:62:26:fc:b7:dc:c2:14:e8:3e:e6:
3a:f0:6d:dc:89:d1:ba:ca:3c:05:18:8d:22:6b:0e:
8e:09:33:69:4d:ca:da:26:52:af:aa:c1:a5:da:f9:
be:d5:87:e6:cc:a0:38:e0:94:0e:9a:8e:16:58:f9:
4b:7b:7a:83:35:45:ac:03:dc:f8:a7:d2:91:cf:1a:
be:2c:a9:8c:b6:79:99:e9:6f:b6:62:a7:7c:b9:e1:
98:c5:f1:3b:4d:62:bb:f9:42:8a:43:48:e1:48:72:
8e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:22:E3:16:F4:AE:42:6D:3F:A5:08:A1:E8:B8:80:75:80:8D:63:D7
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/vyLjFvSuQm0_pQih6LiAdYCNY9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.66.27.0/24
Signature Algorithm: sha256WithRSAEncryption
38:03:10:c4:d8:0b:80:03:bb:a8:f4:60:df:9a:38:22:de:0d:
3e:16:96:79:69:64:7d:41:1a:3d:de:7c:4d:d4:b5:07:92:03:
1a:e5:2c:d8:d5:e6:bd:67:b6:d6:9b:04:1d:37:7c:6f:3f:b9:
46:a9:af:14:18:0d:84:02:58:2b:b0:55:1d:a7:9b:17:fe:26:
0c:40:c2:39:f7:17:a9:b3:82:d0:9b:02:ce:68:42:2f:1f:e6:
ff:20:16:ed:90:4b:fa:76:49:5b:fb:72:d8:3d:2a:99:6d:8a:
36:22:b7:b7:bb:77:4d:f4:5c:73:c3:14:26:f3:d2:65:d0:c0:
89:33:31:61:b0:37:c3:ed:84:e2:01:60:9e:c8:14:14:7e:04:
65:21:51:eb:d4:c5:98:86:d1:48:cb:b4:36:3a:ee:fa:b1:e8:
94:0a:f7:b0:ba:d1:1b:16:84:c7:7b:52:c5:ab:86:1c:28:09:
93:1b:9f:82:62:0a:ec:c3:c5:11:98:f9:14:2c:ac:e8:ba:3f:
24:66:f7:3c:83:36:95:75:1b:57:2b:fc:c5:2b:3a:b5:f9:8d:
af:2f:19:1f:82:51:dc:ff:19:2f:5a:05:53:ce:79:03:7e:00:
b7:32:53:16:fa:89:0a:e3:72:f1:27:04:96:37:67:75:2e:87:
c1:8c:6e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:10:07 2025 by rpki-client