Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/5e6786-6377-4224-ba06-dc4769eff1f5/1/e_wW9zvrjOC_XNW6FAaP6katjIc.roa
File: e_wW9zvrjOC_XNW6FAaP6katjIc.roa (raw, json)
Hash identifier: 6VIC6jZ1463kMQDzHIqx4Od/3Y1MNpREDwQzPEt8kvU=
Subject key identifier: 7B:FC:16:F7:3B:EB:8C:E0:BF:5C:D5:BA:14:06:8F:EA:46:AD:8C:87
Certificate issuer: /CN=7f2ba86df787888f6f8592a806a6ffea3046c07a
Certificate serial: 01942067D007BB86D9F42BAB08B64FA04C2D
Authority key identifier: 7F:2B:A8:6D:F7:87:88:8F:6F:85:92:A8:06:A6:FF:EA:30:46:C0:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fyuobfeHiI9vhZKoBqb_6jBGwHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/5e6786-6377-4224-ba06-dc4769eff1f5/1/e_wW9zvrjOC_XNW6FAaP6katjIc.roa
Signing time: Wed 01 Jan 2025 05:47:41 +0000
ROA not before: Wed 01 Jan 2025 05:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47159
IP address blocks: 88.132.208.0/22 maxlen: 22
88.132.212.0/22 maxlen: 22
88.132.216.0/21 maxlen: 21
88.132.244.0/22 maxlen: 22
88.132.248.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/5e6786-6377-4224-ba06-dc4769eff1f5/1/fyuobfeHiI9vhZKoBqb_6jBGwHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/5e6786-6377-4224-ba06-dc4769eff1f5/1/fyuobfeHiI9vhZKoBqb_6jBGwHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/fyuobfeHiI9vhZKoBqb_6jBGwHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:d0:07:bb:86:d9:f4:2b:ab:08:b6:4f:a0:4c:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f2ba86df787888f6f8592a806a6ffea3046c07a
Validity
Not Before: Jan 1 05:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7bfc16f73beb8ce0bf5cd5ba14068fea46ad8c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b8:24:4d:3e:27:94:7b:e8:97:aa:2f:41:35:
dc:ae:08:20:0e:57:42:cc:dc:62:62:27:77:c1:2c:
ec:fd:85:57:8f:42:46:c5:42:19:d5:3b:aa:18:26:
38:3e:91:d1:bf:9d:47:3e:2e:b9:17:d6:4f:74:a2:
84:5f:f1:2f:60:90:82:89:7e:08:65:f8:34:1e:61:
62:93:4c:9a:6a:7f:53:6b:ff:d1:7e:4a:f5:bb:7d:
e3:2c:88:34:ce:07:3e:79:ad:a8:83:2a:98:1c:95:
59:2c:1d:aa:16:96:fd:ea:48:28:4f:b7:cd:c3:00:
0f:95:3f:69:ce:4e:8b:53:ad:0a:da:a1:15:a8:d1:
ab:ef:0d:74:7a:81:7c:67:58:a5:47:02:19:11:3c:
fd:40:70:49:a5:de:1a:da:88:a3:6f:5c:c7:26:d3:
66:1b:40:15:89:95:35:4d:45:c2:c6:85:53:da:dc:
e4:bf:d9:99:7d:4c:f2:3f:06:dd:a1:d3:1d:91:b9:
92:38:db:98:b6:8a:1b:d0:c0:b3:f1:f5:d9:1d:54:
d5:cf:ac:ce:60:b1:53:43:96:f6:cb:65:83:c6:15:
cb:f0:b5:41:f9:29:b1:62:75:95:ad:4c:d2:21:70:
ed:58:76:aa:2c:f3:d6:c0:2e:c6:13:90:a0:2d:fd:
45:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:FC:16:F7:3B:EB:8C:E0:BF:5C:D5:BA:14:06:8F:EA:46:AD:8C:87
X509v3 Authority Key Identifier:
keyid:7F:2B:A8:6D:F7:87:88:8F:6F:85:92:A8:06:A6:FF:EA:30:46:C0:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyuobfeHiI9vhZKoBqb_6jBGwHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5e6786-6377-4224-ba06-dc4769eff1f5/1/e_wW9zvrjOC_XNW6FAaP6katjIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5e6786-6377-4224-ba06-dc4769eff1f5/1/fyuobfeHiI9vhZKoBqb_6jBGwHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.132.208.0/20
88.132.244.0-88.132.251.255
Signature Algorithm: sha256WithRSAEncryption
cb:0d:99:37:60:f7:16:f7:bc:73:03:c7:c5:74:17:8c:5e:57:
89:da:82:46:3f:bc:dc:06:7f:be:c7:c1:06:81:f4:bb:17:59:
14:fd:75:07:06:f6:cf:b5:64:48:b8:15:9d:10:17:22:6f:9e:
2c:02:1a:9c:c4:5d:a5:25:d7:bf:c1:54:a5:43:01:4c:0d:49:
b3:c8:24:cb:c3:5d:26:de:61:f5:4e:ed:6e:ef:f8:e4:4e:cd:
2f:3c:52:7c:5d:0d:5b:fc:ba:a0:7b:ba:a0:f5:a2:8b:f5:78:
32:9f:08:72:cb:02:94:9a:45:66:a6:d8:8c:74:3f:de:62:12:
f3:11:2d:c4:18:0e:de:2b:b7:56:0f:9d:4f:89:b4:8c:3c:34:
7b:3b:fc:30:bd:51:6b:b3:7d:5c:56:3c:76:4e:54:52:22:d3:
bd:a4:3e:9b:06:00:ed:7d:f0:3c:ec:f6:50:f5:d7:f4:ce:7f:
ac:28:d6:a1:23:d3:e9:28:1b:50:49:12:c9:6e:62:94:43:cc:
9f:82:9b:b8:b3:85:9c:47:71:c8:18:b2:18:74:11:71:e2:b2:
5c:55:d7:24:e1:d6:e8:b8:3b:c9:2a:fd:dd:18:d7:f6:fe:ce:
3c:b8:4e:5d:21:a8:09:fe:2f:68:cd:1f:5d:d4:e6:9c:e1:0b:
62:5f:76:21
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Apr 16 16:23:12 2025 by rpki-client