Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/_0aybWFCH9sQtNIuNSdqo2kyCi4.roa
File: _0aybWFCH9sQtNIuNSdqo2kyCi4.roa (raw, json)
Hash identifier: KWPfXhcWbaWVVW3ASSQbJu/8WhGFsW7V9M6JluQq8Xc=
Subject key identifier: FF:46:B2:6D:61:42:1F:DB:10:B4:D2:2E:35:27:6A:A3:69:32:0A:2E
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 019421B22D6BFC145B10F7296A6DE1A83DB2
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/_0aybWFCH9sQtNIuNSdqo2kyCi4.roa
Signing time: Wed 01 Jan 2025 11:48:32 +0000
ROA not before: Wed 01 Jan 2025 11:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201904
IP address blocks: 88.220.82.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:2d:6b:fc:14:5b:10:f7:29:6a:6d:e1:a8:3d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 11:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff46b26d61421fdb10b4d22e35276aa369320a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1f:3c:6a:6b:d3:af:40:7a:5f:b6:91:1a:8e:
44:5d:11:bb:0d:d7:18:07:20:d1:ae:42:76:fc:1f:
5a:30:93:79:60:2f:f6:eb:c3:4c:e3:d7:25:ae:91:
6a:9a:0c:f6:a1:cf:d2:93:7a:6c:51:b1:12:9d:88:
c5:96:ea:e5:14:a7:75:1b:c0:66:ec:ae:70:42:5f:
bf:da:68:d3:8d:76:bd:3e:43:10:3a:08:7d:f8:93:
26:12:9f:29:2d:6f:98:85:21:2b:d1:65:01:27:46:
33:00:a7:9d:4a:5e:54:39:88:23:f7:09:c1:9a:5d:
1d:a8:2f:2a:55:d3:7c:0d:3a:f7:cc:27:65:32:d0:
2d:25:2b:60:c0:f0:ed:48:4f:3c:34:99:12:62:a2:
66:02:b6:b8:11:b9:12:8c:fd:ab:b4:74:d1:32:2a:
c0:a9:38:02:1a:d0:19:f0:b2:91:16:c5:ff:a7:65:
38:f8:d1:64:6c:44:7e:65:80:de:ed:7e:e1:e4:4b:
c1:d3:1e:ce:64:16:ea:80:75:02:4d:da:97:11:49:
26:94:d4:52:57:dc:25:93:e1:59:07:4d:37:5f:c3:
1d:1c:c8:28:d5:a9:4e:b0:a3:53:46:3a:88:cb:84:
13:5c:e5:28:6f:96:f8:b9:2a:8d:1e:4b:82:59:f2:
5d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:46:B2:6D:61:42:1F:DB:10:B4:D2:2E:35:27:6A:A3:69:32:0A:2E
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/_0aybWFCH9sQtNIuNSdqo2kyCi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.220.82.0/23
Signature Algorithm: sha256WithRSAEncryption
02:73:a2:1c:94:7b:20:00:b5:9f:a3:29:60:53:76:7d:15:d6:
be:23:6b:3d:39:09:7e:8a:2f:83:39:f1:10:12:36:f0:1e:56:
6c:07:70:53:4a:35:49:e9:07:63:c8:97:78:e7:1f:5d:76:4b:
e6:81:0e:2e:08:ef:1a:93:f5:80:48:7c:1c:45:bf:ff:23:d8:
d8:12:8b:cb:70:d1:2e:4f:b5:50:62:a7:89:c0:c2:f1:9a:ba:
b0:79:d1:20:82:c6:74:9c:0a:46:e9:e6:90:a2:68:2f:17:29:
1b:f9:ab:fc:8b:a1:f4:56:eb:92:75:13:4b:38:ff:d6:c2:39:
7f:18:25:d4:f5:63:53:d4:e0:3b:65:9d:84:41:e5:45:0a:ad:
6f:c3:61:f0:66:c4:9a:87:38:48:1e:2f:5c:49:36:e1:2f:2c:
9c:30:fb:09:32:8f:b1:60:a9:95:80:29:83:8d:1d:b2:6a:05:
95:b5:69:2f:19:2f:c2:53:0a:ba:d7:4c:6c:95:3e:da:4e:f9:
1e:6d:78:9f:c4:76:fe:08:fe:2b:c2:f2:c3:be:b4:3d:da:5d:
c7:b2:3d:b8:57:dd:48:a6:1d:a9:9f:10:15:df:4a:96:bb:6d:
47:b9:eb:ae:ef:3c:a2:b3:e6:98:b7:b1:4e:ee:7e:0a:d9:33:
91:69:ce:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:15 2025 by rpki-client