Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/oX4OQTT3ZNO6jiHbCPKwnSxxoY8.roa
File: oX4OQTT3ZNO6jiHbCPKwnSxxoY8.roa (raw, json)
Hash identifier: vNMlQG1WxmqtpQpoHVYa4f74vxwlRF26BOkAHuQEvDM=
Subject key identifier: A1:7E:0E:41:34:F7:64:D3:BA:8E:21:DB:08:F2:B0:9D:2C:71:A1:8F
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01942747DA5552B96CD99A926BBC6803DEBA
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/oX4OQTT3ZNO6jiHbCPKwnSxxoY8.roa
Signing time: Thu 02 Jan 2025 13:50:07 +0000
ROA not before: Thu 02 Jan 2025 13:50:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215670
IP address blocks: 188.130.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 03:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:da:55:52:b9:6c:d9:9a:92:6b:bc:68:03:de:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 13:50:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a17e0e4134f764d3ba8e21db08f2b09d2c71a18f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9a:51:b6:7e:d5:ee:ca:f6:c5:96:0a:51:4b:
41:e5:93:fa:f3:31:37:74:d2:fb:ba:d3:5c:d2:34:
fd:05:dc:88:b6:1f:b8:71:47:37:de:b3:6e:df:c3:
5c:12:42:7e:6a:99:ec:af:7e:55:1c:11:f7:55:60:
3e:c6:72:11:20:5d:10:b0:bd:8b:fb:1f:f4:81:cc:
c4:61:39:0f:4e:e4:68:b1:98:09:42:3d:7a:97:6d:
55:61:ef:82:6c:85:06:e8:66:a8:a8:71:d9:96:67:
92:62:64:28:de:79:bb:8a:71:c8:07:67:d0:94:01:
ab:c8:d8:ea:1c:e3:a2:6a:18:af:1b:e1:3f:49:84:
9f:29:9a:fe:15:ff:98:4f:ca:22:e9:39:b1:50:2f:
9f:b9:ed:d9:8b:3b:85:75:dc:6b:43:bf:df:84:d6:
0e:bd:f4:79:91:26:a1:18:86:45:45:59:16:13:31:
c5:9d:59:8d:b4:ad:c9:ee:54:72:f6:40:7a:ab:15:
34:1d:42:e0:12:6a:d5:05:cf:1c:38:68:8a:52:93:
1d:41:8f:fc:59:9f:05:71:b7:a1:20:36:e2:c6:32:
a9:05:a8:ef:89:62:cc:2e:9c:71:c7:84:78:c6:35:
7e:45:67:23:e5:a7:2c:d3:2a:99:db:99:f2:85:8a:
06:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:7E:0E:41:34:F7:64:D3:BA:8E:21:DB:08:F2:B0:9D:2C:71:A1:8F
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/oX4OQTT3ZNO6jiHbCPKwnSxxoY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.130.238.0/24
Signature Algorithm: sha256WithRSAEncryption
77:be:93:5b:e2:96:21:72:f9:8a:a0:5f:9f:f0:91:db:e1:f7:
83:bb:ee:e5:60:09:69:ab:d0:2b:2c:30:96:3c:40:91:87:be:
13:15:ce:7c:f6:33:de:00:e4:c2:b5:d7:cf:0f:0b:9f:b1:9c:
e9:c2:e3:94:fc:06:f1:bb:a8:23:0e:25:8c:21:d2:11:1f:e0:
b8:46:6e:4b:c6:ff:df:b5:03:8c:21:43:ef:21:8e:46:18:d8:
dc:c2:37:3b:4e:f3:ad:64:27:b5:60:d4:c5:87:b3:6a:bb:97:
92:87:b1:47:9b:23:9e:b3:3a:d7:f3:07:19:e0:c0:76:92:b7:
64:3f:79:15:0a:46:b4:8e:b1:6e:f2:a3:e9:98:0b:9a:d5:d8:
63:28:16:cd:2a:97:55:73:ee:be:30:63:91:89:23:aa:4e:ed:
66:22:1b:79:3d:db:6d:86:06:c4:7e:f0:4f:97:17:1f:76:60:
a0:c2:aa:a0:9f:25:29:94:92:ef:20:1e:6b:4d:ee:d4:57:77:
43:07:39:cd:f8:d6:79:3b:2b:31:c9:64:2b:af:5d:a4:65:78:
96:c8:e2:96:5c:00:fd:ae:55:f7:37:be:7b:4a:08:bf:9b:2b:
db:5e:36:1b:45:f7:c2:ab:fe:02:fa:95:a2:33:15:0a:fe:a6:
30:44:f5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:30:08 2025 by rpki-client