Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/H2uK25QOHBwVJUTx8nYyD5ujgkc.roa
File: H2uK25QOHBwVJUTx8nYyD5ujgkc.roa (raw, json)
Hash identifier: 3NAJj+6B9qEb5qUIdU4REnPiZhsICF7vX1K74eyVjhk=
Subject key identifier: 1F:6B:8A:DB:94:0E:1C:1C:15:25:44:F1:F2:76:32:0F:9B:A3:82:47
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 0195ECFBF47E4ACDB418D702CC2B01FA3BDE
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/H2uK25QOHBwVJUTx8nYyD5ujgkc.roa
Signing time: Mon 31 Mar 2025 16:14:49 +0000
ROA not before: Mon 31 Mar 2025 16:14:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209372
IP address blocks: 88.214.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ec:fb:f4:7e:4a:cd:b4:18:d7:02:cc:2b:01:fa:3b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Mar 31 16:14:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f6b8adb940e1c1c152544f1f276320f9ba38247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fb:9a:ae:82:5d:8a:c6:be:1c:a7:e3:8c:71:
0e:02:d5:64:10:70:f6:ce:5d:cd:8b:f9:fc:c4:ea:
e5:36:5b:08:aa:22:b3:d6:5b:d8:e1:ea:08:45:89:
0b:33:ff:d8:b7:a4:ee:c5:2d:08:0f:c5:3b:e9:d3:
38:2d:b2:a1:e2:47:f2:26:ad:a7:34:a4:c1:9f:ac:
bd:67:4f:86:5e:f6:9c:44:b7:e1:b9:20:17:7a:99:
0e:98:1e:ba:7b:b1:38:21:e6:5e:4e:a5:8a:ca:92:
48:32:2e:1a:7e:55:21:02:54:14:50:3a:a5:7a:0e:
b1:b3:2e:4f:72:63:59:00:71:bd:2d:22:3d:24:7d:
76:d2:f9:14:09:e3:6d:88:f4:de:0d:7e:65:fc:4c:
2f:a5:1f:cb:5a:99:43:76:55:dd:8f:1e:9e:98:22:
40:32:06:8b:95:1a:d1:f4:3e:2c:52:9a:c6:21:9b:
fe:e8:28:fe:2a:cc:b4:3d:b2:cf:df:17:6b:3b:d7:
98:d7:8f:4e:2e:57:b9:2e:04:76:6b:fb:b3:df:8b:
27:ce:39:97:2e:bc:45:3d:02:ba:d5:52:37:b2:70:
da:f6:b3:11:7e:02:9e:4f:88:40:3a:94:5c:89:ae:
b9:36:9e:a3:dd:b2:b0:51:60:74:d8:25:5b:9a:f2:
41:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:6B:8A:DB:94:0E:1C:1C:15:25:44:F1:F2:76:32:0F:9B:A3:82:47
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/H2uK25QOHBwVJUTx8nYyD5ujgkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.51.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:3c:61:41:66:f0:0b:4e:eb:9a:5f:68:da:a6:c8:62:9f:76:
50:0a:52:c0:8d:e9:65:30:e9:29:70:c3:da:39:6d:26:93:b7:
3e:d4:0c:c0:f6:1c:d8:b6:36:85:e5:68:42:de:31:fd:53:68:
e8:80:15:34:1a:3d:05:3b:3f:f6:2a:bc:33:33:54:91:73:0e:
3e:cb:18:5c:16:29:78:dd:e0:ab:98:2d:d9:58:4d:2d:3d:c9:
fd:51:f4:f9:01:6a:56:ad:06:16:71:ad:25:74:f7:ac:49:a0:
f3:c2:2f:60:fa:81:e0:36:60:ba:9c:a7:af:76:0c:00:2a:18:
1f:d1:6e:f1:5e:56:5b:04:09:d4:bd:b3:09:71:48:78:cf:9c:
2f:62:3f:08:45:21:2c:91:6c:f0:c5:ce:6e:d9:1e:e0:54:e6:
f6:ad:50:3f:4d:c2:d5:fb:4d:d8:ea:2b:67:23:25:9e:d4:bb:
1a:9f:8d:62:18:80:d3:44:ab:e8:98:85:c4:35:92:ec:3f:3d:
48:de:f3:44:ad:c9:e5:3d:94:e4:e0:9a:6c:b0:0f:de:7c:a2:
1b:e3:86:ae:eb:b0:9b:41:91:1f:6d:2a:19:b6:71:bb:ba:b0:
d1:1d:d1:30:fa:98:36:d1:09:88:0a:f5:df:92:ab:cc:ea:67:
48:72:61:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:53:20 2025 by rpki-client