Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/dvxkA9W_4UhS2erYdME3z2T_tOI.roa
File: dvxkA9W_4UhS2erYdME3z2T_tOI.roa (raw, json)
Hash identifier: DXffYyaeIWruMhnLhf9hmYwI4r98HcxT4gL98yLwBC0=
Subject key identifier: 76:FC:64:03:D5:BF:E1:48:52:D9:EA:D8:74:C1:37:CF:64:FF:B4:E2
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01942826C50012BF4585E1DA06890DADE2F5
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/dvxkA9W_4UhS2erYdME3z2T_tOI.roa
Signing time: Thu 02 Jan 2025 17:53:36 +0000
ROA not before: Thu 02 Jan 2025 17:53:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211440
IP address blocks: 88.216.46.0/24 maxlen: 24
88.216.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:c5:00:12:bf:45:85:e1:da:06:89:0d:ad:e2:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 2 17:53:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=76fc6403d5bfe14852d9ead874c137cf64ffb4e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:71:2b:79:02:18:9e:b3:6d:c2:f4:d1:32:03:
bb:f0:95:b0:e3:96:c8:e3:43:be:51:2d:24:2b:5a:
b8:65:57:88:41:3b:b6:8d:18:74:d6:f0:71:22:63:
56:ca:89:8d:92:d1:1b:e3:29:4b:35:d9:f4:dd:31:
bf:ef:aa:4d:b6:9b:a0:07:b1:1b:66:59:0d:4f:c1:
f1:8b:38:87:a3:31:de:d9:ba:14:ea:b9:d2:1c:b4:
e0:7b:04:7e:f1:ca:3b:a7:59:30:13:75:d4:53:7e:
44:bd:14:7a:b5:d0:11:21:5b:42:5c:af:09:fe:e1:
e2:dc:12:14:4f:18:41:e9:23:86:12:89:ad:43:5e:
75:85:4f:c8:97:33:83:f9:85:25:f7:f6:ca:9f:9d:
22:56:54:86:78:23:a0:66:d8:37:49:b2:d2:a6:d2:
bc:ef:ce:bf:99:84:f9:f7:67:48:e5:b0:18:04:cd:
29:f7:f3:cd:07:f0:63:56:5a:b7:06:6f:b8:34:34:
f1:7c:40:bd:e1:ab:eb:9e:86:96:a6:54:66:df:bf:
d2:ea:3c:2b:01:e8:33:73:22:6d:9e:31:fc:30:ab:
39:04:80:31:4d:9d:c5:c5:96:65:70:bb:a6:86:dc:
53:e0:63:c0:0f:a0:28:6b:b9:33:aa:6c:fa:3a:41:
68:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:FC:64:03:D5:BF:E1:48:52:D9:EA:D8:74:C1:37:CF:64:FF:B4:E2
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/dvxkA9W_4UhS2erYdME3z2T_tOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.46.0/24
88.216.209.0/24
Signature Algorithm: sha256WithRSAEncryption
11:7c:17:0f:a0:98:02:70:59:02:9c:c5:d0:05:21:10:01:44:
59:88:7d:fb:36:70:a7:fe:4a:e5:c9:83:4b:a2:39:d7:71:5d:
d5:ef:7c:4a:ed:8a:60:80:36:c9:22:2e:09:db:93:73:57:6b:
63:33:b4:8f:da:d0:c7:f2:e5:53:de:ce:01:8b:30:1e:c9:99:
3f:f8:ef:f6:fd:25:ae:2d:73:ff:af:5e:c8:50:9e:24:4a:47:
14:7e:45:cf:2a:39:f6:af:81:9c:6f:28:d2:cd:41:ac:5a:d6:
d1:f7:4f:27:89:7b:df:f5:d1:04:3e:51:5c:45:93:b4:07:90:
47:b7:56:16:03:34:a0:ef:0f:d3:e3:f2:f3:43:99:8f:32:30:
a1:c7:92:d2:16:f2:0d:1e:38:21:97:1a:79:85:4b:98:e2:69:
51:8f:87:1f:b7:90:bc:82:20:82:8a:0b:67:94:34:da:96:5c:
3d:b6:80:ee:94:1d:50:43:1b:29:6e:7c:0f:1f:f9:42:2f:c8:
62:d6:dc:d2:c8:b1:8e:87:9c:7e:6a:73:31:2d:66:ad:fa:ec:
be:ea:80:98:f2:dd:c7:3f:b8:09:be:f3:79:87:02:ac:be:c2:
3b:de:84:c4:08:53:e0:cb:1d:a2:8a:2b:55:2a:f8:86:42:55:
2e:7a:f3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:15:26 2025 by rpki-client