Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/tW44KD7kc2Fe2JyVeiW1tI8Nias.roa
File: tW44KD7kc2Fe2JyVeiW1tI8Nias.roa (raw, json)
Hash identifier: biRRHG58RedKK5lcKFghSo8h6uCeYuijmXOqQa5R9ig=
Subject key identifier: B5:6E:38:28:3E:E4:73:61:5E:D8:9C:95:7A:25:B5:B4:8F:0D:89:AB
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 019421B211555E2BB8BBC1DA2B3191E4E37C
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/tW44KD7kc2Fe2JyVeiW1tI8Nias.roa
Signing time: Wed 01 Jan 2025 11:48:25 +0000
ROA not before: Wed 01 Jan 2025 11:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30816
IP address blocks: 88.220.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:11:55:5e:2b:b8:bb:c1:da:2b:31:91:e4:e3:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 11:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b56e38283ee473615ed89c957a25b5b48f0d89ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:66:a4:be:d5:4e:72:c3:8e:c4:9d:97:f7:45:
5b:2f:8e:51:3b:0f:f4:08:5a:8c:d9:31:63:1a:69:
8f:85:8b:e7:72:6b:20:3e:6e:09:76:ff:79:1f:51:
9a:81:5c:a0:4a:9c:db:25:06:f8:d9:da:c2:53:49:
49:89:dc:fa:64:c9:10:70:ad:65:3f:10:a9:38:2b:
5f:3d:a3:c2:be:8d:5c:4a:5a:e6:e0:de:4d:9e:86:
97:19:43:8f:e2:c8:bc:86:06:2f:e5:6a:66:63:16:
7a:d3:88:65:ac:57:c7:dc:8d:d5:99:6e:f0:0b:19:
59:9a:1a:d9:43:f2:49:3e:a2:0d:fd:0c:28:ce:c7:
b5:6a:62:d3:c7:2d:a3:1e:82:5c:e6:a9:2d:4e:ce:
9a:3f:12:7b:47:df:f3:22:af:82:5c:f2:d9:42:1c:
4f:4c:0d:16:75:bb:8d:8f:dd:5f:f4:8d:30:9e:d2:
91:23:62:04:30:06:f7:a3:35:37:60:27:d9:37:eb:
d9:5e:da:18:a6:ec:4d:f9:6c:f3:1a:5e:ab:fe:87:
16:28:5f:47:30:c4:5b:65:e3:a7:cf:2d:81:c1:63:
0e:2a:a9:6a:5a:73:0f:bd:4a:89:02:16:6f:4a:82:
ca:49:c9:5e:0a:c0:4b:60:33:14:89:26:d2:e8:b6:
a0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:6E:38:28:3E:E4:73:61:5E:D8:9C:95:7A:25:B5:B4:8F:0D:89:AB
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/tW44KD7kc2Fe2JyVeiW1tI8Nias.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.220.139.0/24
Signature Algorithm: sha256WithRSAEncryption
43:a8:5a:44:dc:80:3f:6e:7d:10:1a:10:2b:0d:a9:c8:00:ac:
a6:22:cd:ba:52:a2:7a:a3:12:dd:d0:9b:84:d6:86:d0:f1:59:
72:ae:a0:47:37:e4:ea:0e:1d:3b:36:95:26:b6:ef:e0:ed:da:
0c:73:af:70:bd:60:1b:02:23:c4:bd:ae:5e:81:11:2a:8c:e3:
67:40:8e:97:89:3e:91:86:19:60:40:f1:0a:9f:b0:fb:59:30:
d0:3f:29:78:10:8f:e1:d3:ee:63:0b:c6:a1:d2:3a:a7:9a:57:
87:d2:0c:75:ca:20:ec:2b:25:fb:d8:d8:33:9e:5b:88:01:64:
ae:db:4a:d4:19:d8:f1:bf:12:47:9a:18:fb:c8:d7:a5:98:bc:
8b:1d:e6:d5:75:52:fc:b1:d6:48:6a:bd:47:da:ef:16:c3:53:
c5:b4:fc:82:88:9b:9d:fe:0c:4e:cb:19:2a:e6:7f:54:dd:31:
ea:b6:ec:02:b1:16:de:94:ff:df:41:9a:38:d2:70:09:7c:1f:
7c:1b:b4:72:cd:74:3f:30:f6:b7:ae:cc:cc:9c:bc:0e:00:5d:
73:c6:6e:6b:06:16:8c:a1:b0:34:dd:c3:82:e8:45:a3:e1:8f:
c4:78:69:03:73:be:39:03:4c:85:eb:78:f0:39:62:0a:76:23:
ae:c3:18:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:40 2025 by rpki-client