Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ak8pY1DlJzO_CSEHmayRey5v8OM.roa
File: ak8pY1DlJzO_CSEHmayRey5v8OM.roa (raw, json)
Hash identifier: PekhkWRURTNootnFYbI/M3mbiiQ223EcBynXl5EVBNQ=
Subject key identifier: 6A:4F:29:63:50:E5:27:33:BF:09:21:07:99:AC:91:7B:2E:6F:F0:E3
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01942826C915BBC9F66DE069737E769B10E8
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ak8pY1DlJzO_CSEHmayRey5v8OM.roa
Signing time: Thu 02 Jan 2025 17:53:37 +0000
ROA not before: Thu 02 Jan 2025 17:53:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214159
IP address blocks: 88.216.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:c9:15:bb:c9:f6:6d:e0:69:73:7e:76:9b:10:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 2 17:53:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a4f296350e52733bf09210799ac917b2e6ff0e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b7:d6:cd:af:47:91:38:d9:e3:17:44:ba:37:
b9:3c:15:50:d0:0b:98:10:10:b2:19:7e:5e:34:e6:
9b:96:72:bc:f0:e0:60:48:fd:60:2d:98:d4:7a:40:
e1:db:b8:c3:fb:31:b0:c2:21:86:66:42:fb:f3:76:
c7:d4:3e:0b:eb:e6:63:6b:83:68:b0:a9:b0:cb:5b:
ba:a1:7a:1c:19:23:c4:f8:18:56:70:e7:3a:e0:81:
63:75:fa:2d:6a:2f:88:ed:87:ed:a8:56:6b:5c:8f:
4a:e3:88:ee:54:df:ab:1c:4c:e5:ab:ed:12:f7:92:
73:b2:6e:d8:6d:9c:16:79:f9:65:62:6e:36:58:93:
7f:1b:da:6f:67:d4:75:ea:85:f4:e1:8a:0f:9b:91:
ce:b4:11:8f:b2:42:fc:4c:18:62:d8:ea:75:73:c2:
34:b8:87:bb:08:42:1b:29:5f:ba:61:dd:c7:7f:72:
ca:4f:fe:d4:53:97:c1:66:93:70:40:e5:ca:81:5e:
1f:43:84:99:0a:2f:b2:e3:63:6c:0c:46:3e:2a:17:
e7:93:a8:bf:29:a1:47:1f:d1:76:79:fc:84:bf:8b:
78:3f:ce:d9:5f:e4:13:72:60:73:12:7b:8f:49:55:
97:3f:b3:f3:a4:6a:e2:d0:87:d8:2c:3c:65:02:08:
5e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:4F:29:63:50:E5:27:33:BF:09:21:07:99:AC:91:7B:2E:6F:F0:E3
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ak8pY1DlJzO_CSEHmayRey5v8OM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.214.0/24
Signature Algorithm: sha256WithRSAEncryption
97:3f:3b:7f:e8:37:4d:a6:eb:eb:db:b1:66:ce:3a:3c:eb:8a:
17:d9:d2:fe:88:c6:eb:b5:d3:d3:e7:dd:db:65:ed:75:d3:c2:
62:e6:1c:1e:02:4d:8d:c4:c2:5a:5c:45:97:03:dd:d5:8c:2a:
ed:73:c3:a8:d3:d4:cd:fd:bf:a9:3a:ea:01:48:f0:79:40:0d:
50:9a:9c:a6:80:be:13:97:f0:fb:2a:27:67:8e:64:51:72:31:
75:87:0b:5d:73:cb:9a:8e:04:8f:07:30:17:3f:d7:11:c4:4a:
e2:98:96:be:e5:7d:c1:2c:0c:0e:ea:e7:b2:63:f3:a3:c8:20:
d6:f3:3c:f5:ad:26:52:a5:9e:e1:56:2b:87:89:ad:52:e5:6e:
2d:77:17:b2:ff:74:7f:36:71:01:14:a4:e9:ab:19:3b:0e:a7:
af:22:bf:48:02:38:22:37:29:c3:76:0a:da:21:a3:3a:56:19:
12:2f:67:1e:9b:a3:f7:a5:78:fd:38:1d:f7:a1:2d:8c:41:07:
d4:f2:44:05:8d:94:a2:13:6b:a9:50:9b:81:95:8b:8c:41:e9:
51:dd:db:69:25:26:e6:6b:83:be:f6:d8:9d:d4:e1:9e:04:e8:
09:97:aa:a3:4d:4c:a5:e3:85:e1:34:38:21:7e:49:26:8c:3c:
20:8e:d7:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:16:30 2025 by rpki-client