Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/w9tecX0WpG6EBeEQV6lN7pOizZM.roa
File: w9tecX0WpG6EBeEQV6lN7pOizZM.roa (raw, json)
Hash identifier: r56/6xcnyNBLy2vRf5p/uK/JECPQgO4M3DafNXdoW0g=
Subject key identifier: C3:DB:5E:71:7D:16:A4:6E:84:05:E1:10:57:A9:4D:EE:93:A2:CD:93
Certificate issuer: /CN=896a82a725ed22bb46847ae568912078de25c108
Certificate serial: 0194221F7F23238F3FBB3441030E8184A932
Authority key identifier: 89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/w9tecX0WpG6EBeEQV6lN7pOizZM.roa
Signing time: Wed 01 Jan 2025 13:47:57 +0000
ROA not before: Wed 01 Jan 2025 13:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210314
IP address blocks: 88.151.224.0/24 maxlen: 24
88.151.229.0/24 maxlen: 24
88.151.231.0/24 maxlen: 24
192.124.199.0/24 maxlen: 24
192.124.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:7f:23:23:8f:3f:bb:34:41:03:0e:81:84:a9:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896a82a725ed22bb46847ae568912078de25c108
Validity
Not Before: Jan 1 13:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3db5e717d16a46e8405e11057a94dee93a2cd93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f0:ea:96:0a:d9:f8:4c:2d:93:34:63:b3:74:
34:f1:fb:1b:0a:8e:9d:de:54:97:1c:56:92:ed:eb:
30:20:54:85:96:be:68:cb:a4:c5:28:af:41:66:21:
e3:70:32:3f:52:2a:71:ca:78:c9:5e:17:44:25:fa:
45:24:0a:fb:47:d7:ab:a2:a4:c8:40:ca:98:0a:c0:
e8:d8:02:d3:3a:ab:8e:53:02:dd:8b:0b:65:83:60:
c9:5c:e6:4f:30:a9:4d:41:f2:66:17:97:2d:8f:f6:
ba:ae:2e:2d:61:da:6b:7b:85:65:23:6e:4e:bd:1a:
39:2c:9e:e0:20:58:b1:54:b3:6c:3b:f0:71:e3:79:
16:e0:6d:d2:1d:21:66:b1:8d:37:5d:5f:82:90:88:
60:64:18:41:36:ef:13:fc:cc:ff:62:a7:e4:fe:7d:
0b:e4:5b:0c:f5:10:da:59:f0:d6:90:a9:89:c3:67:
9f:0e:1b:bb:6a:b4:f0:97:51:7c:53:90:ff:69:71:
ab:f4:1b:c8:9b:2c:cd:d3:99:53:3d:69:e0:98:9b:
c2:43:7a:01:ce:c5:dc:79:54:9e:e0:6c:43:fc:6e:
31:4d:8f:d5:c7:87:8b:c2:04:f0:dc:2e:d2:aa:91:
51:5a:82:a8:43:d8:05:20:37:c1:db:d9:6e:7e:74:
81:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:DB:5E:71:7D:16:A4:6E:84:05:E1:10:57:A9:4D:EE:93:A2:CD:93
X509v3 Authority Key Identifier:
keyid:89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/w9tecX0WpG6EBeEQV6lN7pOizZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.224.0/24
88.151.229.0/24
88.151.231.0/24
192.124.199.0/24
192.124.205.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:6e:ca:18:c4:83:9a:3f:54:af:b3:b1:be:79:2b:af:1c:58:
f0:44:60:b2:84:ab:9d:45:a0:aa:56:be:0a:de:a5:49:1c:6a:
f4:ad:05:2f:4d:3c:98:66:42:67:15:74:8a:8f:01:ac:99:75:
7b:8b:37:28:da:0e:6f:05:54:6c:06:f1:fb:61:a1:29:c7:52:
f9:98:f0:e9:00:63:98:69:ec:a2:92:34:46:d5:ef:0c:7e:b0:
2c:03:c2:d9:e3:47:9f:3c:ea:c9:58:ef:dd:11:df:4e:8e:30:
cd:8a:cc:29:4c:9f:e1:61:bd:e5:fe:a5:b4:24:07:5f:5e:06:
cd:3e:ad:f4:14:75:4e:23:97:7c:aa:67:1a:5e:31:98:7a:67:
ec:37:32:45:f5:ba:24:e5:7e:fa:84:62:ce:e9:eb:a8:6e:7a:
d7:47:54:b9:bb:d8:57:6f:72:52:c7:bf:7b:98:9e:3e:3a:c9:
4d:f4:50:bb:80:c5:9d:23:d3:0e:c4:6b:4a:b1:e4:30:3c:55:
2b:21:5b:0c:30:b8:33:ea:e9:9b:a6:5a:52:9f:37:a7:78:71:
96:99:ba:b6:d2:13:89:10:13:05:c5:fd:32:2a:3b:94:66:af:
77:2a:74:ca:fe:c0:1a:a5:0d:71:a5:24:f8:86:24:1e:c3:c2:
b1:6b:c0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:34:11 2025 by rpki-client