Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/k88eKZ3ggVkstFfz6v9jAollFdM.roa
File: k88eKZ3ggVkstFfz6v9jAollFdM.roa (raw, json)
Hash identifier: RToXutf5Qdv2Y+G73kPgZr6gfiGthSFW8G2eqnaoH64=
Subject key identifier: 93:CF:1E:29:9D:E0:81:59:2C:B4:57:F3:EA:FF:63:02:89:65:15:D3
Certificate issuer: /CN=4c51636fde905f8521f411479e81321cdcf49049
Certificate serial: 019421B1F973542111ECFF5D2D142B34B19B
Authority key identifier: 4C:51:63:6F:DE:90:5F:85:21:F4:11:47:9E:81:32:1C:DC:F4:90:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/k88eKZ3ggVkstFfz6v9jAollFdM.roa
Signing time: Wed 01 Jan 2025 11:48:19 +0000
ROA not before: Wed 01 Jan 2025 11:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35224
IP address blocks: 45.93.40.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:f9:73:54:21:11:ec:ff:5d:2d:14:2b:34:b1:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c51636fde905f8521f411479e81321cdcf49049
Validity
Not Before: Jan 1 11:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93cf1e299de081592cb457f3eaff6302896515d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4d:67:6d:4d:e9:78:5e:95:2d:66:5b:65:81:
81:42:a8:d0:16:ea:8a:89:b6:86:0d:1f:d0:3f:8f:
27:c7:44:22:cf:0d:24:85:46:93:17:1f:20:ea:61:
2d:2d:6f:28:de:e5:79:e6:bd:d9:7c:18:87:8a:53:
8c:64:fa:a2:b2:1d:e0:c9:aa:74:fd:7f:f2:37:46:
08:4d:20:88:9c:2a:89:ef:47:92:b6:ab:9b:08:2d:
b4:6d:2e:01:77:c0:6c:42:72:55:f1:12:41:7c:5b:
a3:33:99:b4:38:80:01:d7:11:21:d8:55:21:de:a6:
68:2f:73:fe:f0:b4:2a:bd:e6:cb:4f:97:1c:83:da:
a7:9e:2f:de:d6:ee:8a:b1:6d:dd:2b:c1:18:9b:4f:
7f:ca:7b:5c:16:09:c8:15:02:86:49:96:05:86:a7:
5d:6c:b1:69:c6:69:3c:42:87:3f:50:e6:12:8a:44:
56:d0:10:22:25:25:08:b2:4d:99:84:81:95:f2:bd:
c5:1a:6e:a5:c2:55:2e:d4:af:2b:40:b4:19:29:6b:
1d:63:9f:a4:d6:31:65:49:bb:25:ad:97:a0:9d:32:
99:b6:34:b5:ff:55:5a:13:21:d3:4c:38:62:bd:26:
1c:1c:81:52:d3:3e:8e:03:53:b3:26:f1:1f:95:11:
99:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:CF:1E:29:9D:E0:81:59:2C:B4:57:F3:EA:FF:63:02:89:65:15:D3
X509v3 Authority Key Identifier:
keyid:4C:51:63:6F:DE:90:5F:85:21:F4:11:47:9E:81:32:1C:DC:F4:90:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/k88eKZ3ggVkstFfz6v9jAollFdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.40.0/22
Signature Algorithm: sha256WithRSAEncryption
93:3d:48:bb:57:fd:4f:c0:55:70:a9:17:d3:db:1b:d6:72:b5:
b4:d5:fb:52:64:bd:fa:7f:73:ac:07:f5:13:e1:39:10:29:8b:
e8:48:ab:0c:12:3a:79:8e:cd:a6:77:22:19:ee:1b:c7:cd:56:
16:6b:3d:ac:34:a9:a9:30:30:6d:25:be:50:fc:bc:8d:2c:aa:
a8:12:94:f8:88:13:1d:b0:48:a8:a2:8b:37:0b:84:42:d5:78:
93:37:92:f5:f3:36:de:70:ec:bc:b6:29:d7:d1:01:72:42:ae:
f8:08:09:76:86:61:0e:32:60:3d:02:2f:03:61:c0:75:32:84:
07:84:7d:ad:28:c1:97:db:ba:eb:33:9f:9f:1c:2e:68:6b:b4:
11:97:25:31:20:0f:3c:2c:73:48:0b:af:93:ef:fd:68:aa:3f:
82:eb:f3:f7:ac:a9:24:0d:71:24:63:01:18:d3:b8:30:a0:60:
f8:bf:43:db:1c:4d:32:23:98:db:c0:99:e9:b2:80:2d:7c:cf:
78:3d:9c:e4:ec:66:80:c6:d1:f9:fe:d3:43:e7:13:65:6d:3a:
60:c8:73:a0:82:4a:14:1f:81:5f:d0:ce:b1:a3:8c:86:7f:c7:
6d:6e:6d:4f:27:be:76:b5:93:a7:83:dd:a5:1f:60:ca:43:ba:
49:4c:1f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:57:35 2025 by rpki-client