Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/iJlwOcYtq6S6by64254FoSzLE8w.roa
File: iJlwOcYtq6S6by64254FoSzLE8w.roa (raw, json)
Hash identifier: Ys9uGytZ03eLGynO2qp/0wqUtSSyig0DVGcqnBMWCB0=
Subject key identifier: 88:99:70:39:C6:2D:AB:A4:BA:6F:2E:B8:DB:9E:05:A1:2C:CB:13:CC
Certificate issuer: /CN=f811fa5eff370bc36d0e3929625e3414081a2392
Certificate serial: 01941FFA5E02F0D6D8B1E454D455FB86F5F7
Authority key identifier: F8:11:FA:5E:FF:37:0B:C3:6D:0E:39:29:62:5E:34:14:08:1A:23:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/iJlwOcYtq6S6by64254FoSzLE8w.roa
Signing time: Wed 01 Jan 2025 03:48:09 +0000
ROA not before: Wed 01 Jan 2025 03:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42187
IP address blocks: 78.41.88.0/22 maxlen: 22
78.41.92.0/22 maxlen: 24
91.190.232.0/22 maxlen: 24
94.127.92.0/24 maxlen: 24
94.127.94.0/24 maxlen: 24
185.33.120.0/22 maxlen: 22
2a01:9f00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 17:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:5e:02:f0:d6:d8:b1:e4:54:d4:55:fb:86:f5:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f811fa5eff370bc36d0e3929625e3414081a2392
Validity
Not Before: Jan 1 03:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=88997039c62daba4ba6f2eb8db9e05a12ccb13cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:95:7b:57:0a:a4:fd:88:85:3a:73:19:78:af:
68:3a:29:ed:f5:ca:c4:a5:6e:cb:75:fc:f3:14:50:
fc:0b:ed:f8:91:a8:06:f5:03:65:29:c5:24:cc:8e:
29:96:84:34:b2:ea:c5:39:8c:00:f3:e2:eb:62:c3:
65:47:4d:19:5d:4e:70:54:33:2a:eb:8e:0e:34:1a:
d3:59:2c:8d:f0:2c:34:8f:ad:dd:e6:1a:6e:a4:9f:
5a:45:da:a0:4a:45:00:79:5d:3a:69:47:03:2a:3d:
59:63:6e:fe:00:1c:72:34:42:77:8a:9f:7c:45:79:
75:6f:7f:44:d3:45:02:2a:18:a2:3c:ff:9f:56:1f:
da:38:67:26:f8:c1:b5:ff:ac:09:5d:a5:9a:2c:eb:
ca:92:74:b4:f3:16:60:d5:5d:52:7e:92:f1:64:6b:
36:92:ea:84:7c:8f:11:b6:22:9f:66:eb:0a:d5:52:
41:57:b2:a4:01:4b:2f:12:7d:32:11:0c:73:fb:bc:
96:be:7c:76:c8:c8:2c:bd:bb:07:73:e6:3e:0d:4c:
db:59:04:d8:11:5a:c7:04:5c:f5:70:c0:74:1b:0f:
ad:fe:1c:86:a5:43:d4:aa:f0:4d:c1:ef:60:2b:60:
e0:c7:0d:77:f6:4f:5b:dd:07:c7:ea:79:10:cf:33:
52:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:99:70:39:C6:2D:AB:A4:BA:6F:2E:B8:DB:9E:05:A1:2C:CB:13:CC
X509v3 Authority Key Identifier:
keyid:F8:11:FA:5E:FF:37:0B:C3:6D:0E:39:29:62:5E:34:14:08:1A:23:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/iJlwOcYtq6S6by64254FoSzLE8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.41.88.0/21
91.190.232.0/22
94.127.92.0/24
94.127.94.0/24
185.33.120.0/22
IPv6:
2a01:9f00::/32
Signature Algorithm: sha256WithRSAEncryption
7d:05:9b:10:19:a5:6f:dc:e5:ac:ce:cf:8a:d2:30:9f:f1:b1:
36:6e:9c:e5:96:01:01:62:bc:a9:8f:36:b0:59:5e:64:46:94:
4d:b6:48:12:58:d2:b1:f5:1f:ad:f1:c3:6e:c1:de:dc:94:66:
4d:32:23:14:07:9c:b2:9a:05:8a:5e:f5:4c:e5:ef:ae:86:a8:
51:91:bd:66:f8:87:8f:ba:7e:6c:08:6e:ff:3b:22:a9:01:13:
8d:fb:e0:7d:6e:ce:31:02:8a:0e:e7:d4:01:14:45:86:01:15:
d5:d0:ef:43:02:53:4f:27:98:df:c4:25:57:71:74:1a:aa:2b:
35:6c:98:1e:27:01:6e:ac:d0:82:4a:f8:37:4a:67:ce:63:f0:
86:92:4e:79:34:08:1f:02:4e:b7:a5:33:7b:c9:94:63:1b:d3:
18:f4:42:5b:c3:63:70:79:23:54:ea:92:1b:69:94:1a:53:5a:
7f:98:54:ff:6b:2b:00:8c:b9:28:0a:1d:da:71:35:58:c6:82:
da:24:10:05:e4:b1:b0:42:59:13:72:08:e6:25:c1:66:ea:00:
11:6d:15:90:3a:cd:35:0c:2a:86:01:8c:58:00:fc:70:ab:02:
29:ac:ac:8b:7d:d5:d2:dc:66:01:67:65:b3:56:a9:38:7b:04:
be:5f:6f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:13:36 2025 by rpki-client