Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/cMumkbL5TqKwPnOj8dOY09Dk3yw.roa
File: cMumkbL5TqKwPnOj8dOY09Dk3yw.roa (raw, json)
Hash identifier: IZd0MKUvKIC0AQe/s7+Tpnst0eVNJJ5OLJeONb0fsT0=
Subject key identifier: 70:CB:A6:91:B2:F9:4E:A2:B0:3E:73:A3:F1:D3:98:D3:D0:E4:DF:2C
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 019586BCF9D294CB9F678DDA65C5B3BB5790
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/cMumkbL5TqKwPnOj8dOY09Dk3yw.roa
Signing time: Tue 11 Mar 2025 19:44:46 +0000
ROA not before: Tue 11 Mar 2025 19:44:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21840
IP address blocks: 88.216.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 02:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:86:bc:f9:d2:94:cb:9f:67:8d:da:65:c5:b3:bb:57:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Mar 11 19:44:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70cba691b2f94ea2b03e73a3f1d398d3d0e4df2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:de:31:8a:29:4c:18:ec:fe:d7:d2:d5:cc:af:
a0:0c:14:88:c1:b8:61:19:c6:2b:b4:6a:6e:08:25:
6b:a1:71:68:56:ae:d5:a5:86:00:f9:f9:3e:78:e3:
73:52:59:16:50:ca:af:2f:3b:3b:40:f0:76:18:7a:
66:91:40:09:e2:01:8f:5a:17:59:dc:82:94:bf:69:
cc:d7:3a:17:b0:98:21:16:ab:96:8e:de:e5:e5:fc:
29:eb:e8:41:70:8e:a3:81:9f:6d:bd:b0:52:f4:f6:
2e:53:6e:0d:9c:a3:87:0b:d8:f6:9e:90:57:9e:d5:
78:83:39:78:02:43:a9:e7:ce:fb:af:13:32:d7:57:
cb:10:4e:af:37:b3:44:fb:63:3d:39:21:36:c1:12:
34:e2:ab:83:72:50:e3:d6:12:32:17:0b:50:b9:f8:
3b:ef:0f:e2:13:a0:cf:51:f1:da:de:53:75:63:b1:
60:71:f2:d2:e2:1f:46:1c:39:99:30:36:28:b1:c3:
f4:f4:eb:e0:6f:0b:2e:87:a9:59:51:22:8f:5a:3d:
be:b5:3b:95:a4:54:5d:49:62:3d:04:30:e2:6a:f3:
bc:6f:08:7e:78:e3:9e:d5:55:65:08:7b:5f:d6:82:
c7:aa:de:4b:4a:bf:1f:e6:87:e9:c4:de:86:94:4e:
4e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:CB:A6:91:B2:F9:4E:A2:B0:3E:73:A3:F1:D3:98:D3:D0:E4:DF:2C
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/cMumkbL5TqKwPnOj8dOY09Dk3yw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.223.0/24
Signature Algorithm: sha256WithRSAEncryption
05:af:38:b9:c0:dc:b2:dc:e1:6a:8a:41:7d:30:3c:be:ec:82:
55:62:55:99:24:95:98:52:a4:20:aa:75:ed:de:c7:11:e8:9d:
62:fd:a2:ea:dd:45:db:8e:e9:c8:37:ed:48:09:96:61:b8:d7:
01:41:82:36:3d:3c:a3:d4:5f:c3:10:9d:48:d5:28:2d:cf:34:
a7:5d:a5:9d:f9:5a:37:ea:79:cd:78:6b:b9:01:34:0e:ea:aa:
ea:6a:bf:c8:a7:10:00:a5:96:ab:7e:55:c0:7b:7a:bf:32:b9:
9a:61:f3:35:c4:41:28:b8:84:5a:54:f9:d4:b4:19:20:df:68:
19:0d:fe:0f:b6:e6:1c:a7:6f:77:e9:f2:00:c7:a0:8a:27:ef:
a3:d6:84:d4:21:1b:05:37:b3:6f:43:01:4e:0b:12:78:17:ba:
51:11:95:7b:bd:00:c6:47:b0:e8:25:dc:4a:e8:3c:17:6f:d9:
bc:53:73:68:ed:bc:b4:ad:06:8c:fa:d2:c5:a2:58:fc:f2:04:
f1:3e:7a:85:75:b2:94:a0:ca:2f:86:3c:8f:42:8e:f1:0f:c0:
43:8b:19:82:64:fc:6d:05:03:dc:86:94:b7:18:a7:88:96:63:
8a:3f:e2:2b:af:81:d7:10:15:81:ef:b5:8e:c0:86:85:78:aa:
b5:99:7a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:08:12 2025 by rpki-client