Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/aL0W7YFAWQDek90M6uYrqFlJU3w.roa
File: aL0W7YFAWQDek90M6uYrqFlJU3w.roa (raw, json)
Hash identifier: dUiHtOivc1FQqzns9rdo+CrXQqj78BECwXZA38heHVc=
Subject key identifier: 68:BD:16:ED:81:40:59:00:DE:93:DD:0C:EA:E6:2B:A8:59:49:53:7C
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01942826B204122E5B91D08435B58253FAD9
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/aL0W7YFAWQDek90M6uYrqFlJU3w.roa
Signing time: Thu 02 Jan 2025 17:53:32 +0000
ROA not before: Thu 02 Jan 2025 17:53:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47341
IP address blocks: 88.216.146.0/24 maxlen: 24
2001:4048:108::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 02:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:b2:04:12:2e:5b:91:d0:84:35:b5:82:53:fa:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 2 17:53:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68bd16ed81405900de93dd0ceae62ba85949537c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0d:b5:65:ea:f2:9e:f5:ce:d8:da:49:e6:7c:
e9:f0:b6:88:09:1c:77:b9:f5:7a:82:98:44:96:32:
bf:50:ef:42:5a:5d:30:8f:93:4b:4b:7a:be:8f:31:
07:33:f6:7f:7e:8d:e1:2e:a5:ae:63:bf:b5:5e:0f:
e7:56:dd:d1:92:4a:ce:30:5a:83:a4:b2:7d:ab:ec:
c3:a4:af:b5:9e:07:a9:c9:32:2d:b0:34:58:a3:45:
2a:e3:40:c3:37:79:a6:ad:87:5c:e7:95:bf:1a:8c:
94:73:a5:46:fe:12:31:27:d8:db:16:66:a8:4b:58:
9d:09:16:a6:47:68:1a:89:ee:fd:e7:ea:77:08:9c:
64:1c:49:9a:34:2f:9b:0b:1f:ea:08:53:b4:be:e3:
80:75:de:20:83:72:b4:e2:f8:7e:e2:d6:8c:aa:b7:
68:7a:17:76:e5:e4:b9:33:0e:d2:74:8b:f1:2b:58:
4d:74:06:bd:b9:92:07:6e:81:71:21:f0:b6:de:79:
3f:f3:41:ef:4f:6e:83:b0:b3:70:82:7b:42:dc:be:
fc:ee:7c:3c:71:5e:12:07:34:b3:ce:15:79:1d:52:
3d:38:af:ae:09:8f:3e:e6:a4:ef:a1:c0:ab:3d:40:
00:db:d2:86:8f:9d:91:1e:0e:c7:bc:a3:c1:a9:4e:
a1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:BD:16:ED:81:40:59:00:DE:93:DD:0C:EA:E6:2B:A8:59:49:53:7C
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/aL0W7YFAWQDek90M6uYrqFlJU3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.146.0/24
IPv6:
2001:4048:108::/48
Signature Algorithm: sha256WithRSAEncryption
5e:5c:0a:80:13:5f:12:30:23:ff:32:b5:34:dd:de:f7:91:22:
3d:48:f4:a4:7a:2e:5f:17:68:5a:ba:8d:53:0e:bc:45:71:49:
b4:5c:3e:9f:d7:77:66:4e:8f:85:7d:ca:47:f6:fa:73:48:d4:
3f:43:78:ed:29:fc:b6:5a:8d:08:90:f5:2f:ef:54:75:4e:20:
8a:a7:f9:9f:b6:dd:b0:f2:f5:d7:a1:f0:7f:90:e9:6a:a5:cf:
b0:3e:de:f1:1b:06:59:ad:2b:c4:77:18:dc:7f:64:54:91:76:
cb:9e:58:12:5a:c6:d0:3d:17:d9:bb:c2:29:11:d8:38:fa:c7:
0a:e3:ee:42:f6:70:c7:75:9a:6d:2e:20:ad:7b:46:bf:d7:8c:
94:93:39:c4:ff:7c:6c:b0:7b:40:ea:6c:64:bc:2c:bc:6e:c0:
b8:2b:ce:2c:91:8c:30:04:e6:94:4f:e8:5f:22:1a:db:49:a5:
3c:9f:78:2d:40:d6:52:47:96:3a:d0:bb:40:30:84:41:aa:99:
3e:cb:1a:45:85:b1:a2:4c:5d:ab:33:6f:95:88:1d:1e:57:09:
49:29:c2:1d:ad:15:7f:65:26:7e:8d:e8:a9:fe:9e:07:a2:ad:
a6:a5:9f:1f:c3:73:85:e8:ea:1b:6a:b4:3e:67:8e:0d:b6:ea:
e9:4d:58:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:50:52 2025 by rpki-client