Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/iqsUTfguaYVXgXe8Vuc2DqYtis4.roa
File: iqsUTfguaYVXgXe8Vuc2DqYtis4.roa (raw, json)
Hash identifier: 7sUhJ+4DrqI1GXlkga4LbUKQ6fX31R18iQCPmLz2YM0=
Subject key identifier: 8A:AB:14:4D:F8:2E:69:85:57:81:77:BC:56:E7:36:0E:A6:2D:8A:CE
Certificate issuer: /CN=2679520fb81a45fcbc42a6e9355807eb9a7641f9
Certificate serial: 019428234D5A7AF6761ACB086F4812FC1158
Authority key identifier: 26:79:52:0F:B8:1A:45:FC:BC:42:A6:E9:35:58:07:EB:9A:76:41:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JnlSD7gaRfy8QqbpNVgH65p2Qfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/iqsUTfguaYVXgXe8Vuc2DqYtis4.roa
Signing time: Thu 02 Jan 2025 17:49:49 +0000
ROA not before: Thu 02 Jan 2025 17:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204126
IP address blocks: 178.213.88.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JnlSD7gaRfy8QqbpNVgH65p2Qfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:4d:5a:7a:f6:76:1a:cb:08:6f:48:12:fc:11:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2679520fb81a45fcbc42a6e9355807eb9a7641f9
Validity
Not Before: Jan 2 17:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8aab144df82e6985578177bc56e7360ea62d8ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:60:58:b6:82:db:c9:46:8b:b3:c2:8c:b9:5e:
9c:bd:f9:10:2b:56:a7:d7:7d:84:e7:43:1e:60:a2:
88:e8:dd:33:46:12:5b:3d:1b:0c:4b:32:cc:76:b9:
ba:eb:e5:c5:f0:9e:3c:b2:32:56:a2:ff:4d:e9:e2:
3e:94:6c:16:84:ff:e5:7f:51:aa:41:5e:ef:69:bf:
a7:12:92:e6:bc:2f:75:db:f3:c9:b4:bc:d8:d7:6d:
69:b0:4b:f4:6e:e2:e6:c5:58:f2:5f:2d:7a:d8:4a:
78:ef:25:84:76:63:5c:8b:f3:e3:40:03:26:d8:5d:
eb:c4:54:e1:7e:63:fe:19:54:cb:74:16:11:61:fe:
f6:44:67:5c:1a:b2:f6:6f:7e:3d:fc:3f:2d:77:d6:
c2:2a:28:f9:59:da:4c:57:d2:7f:68:12:39:79:dc:
ef:8d:ac:88:38:39:6f:17:35:9b:1a:05:22:62:6b:
60:be:87:56:88:46:53:3b:76:af:aa:90:93:f0:6b:
a4:c6:d7:16:f6:61:dd:ae:7c:08:1b:c4:61:af:6c:
b6:ca:fe:7c:cb:ee:02:66:50:51:a2:60:96:60:28:
03:79:bc:da:28:dc:fd:00:b6:74:59:f9:4f:83:aa:
e0:c2:46:78:92:b7:d1:89:47:17:f5:fb:29:b8:3d:
d1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:AB:14:4D:F8:2E:69:85:57:81:77:BC:56:E7:36:0E:A6:2D:8A:CE
X509v3 Authority Key Identifier:
keyid:26:79:52:0F:B8:1A:45:FC:BC:42:A6:E9:35:58:07:EB:9A:76:41:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JnlSD7gaRfy8QqbpNVgH65p2Qfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/iqsUTfguaYVXgXe8Vuc2DqYtis4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.213.88.0/21
Signature Algorithm: sha256WithRSAEncryption
9a:34:d2:9d:79:49:db:e2:35:7c:b7:f3:18:1d:6a:be:ce:2c:
0d:ba:d7:46:ee:35:b9:89:c5:8b:e0:f0:2c:3b:40:88:45:41:
23:3f:31:ad:6c:72:8e:2a:61:9c:4a:a6:67:f9:2e:ca:e9:cb:
64:34:e0:d0:e4:05:0b:ff:ed:c6:6c:ad:b2:88:36:41:7f:d8:
39:2b:57:68:f6:67:ab:4b:4d:a6:7f:5f:1e:56:fd:03:c4:3d:
8a:3d:5a:15:c3:1d:fb:37:f8:0c:bc:15:9d:a0:a7:ca:2a:76:
ea:75:a4:b7:1f:21:8a:0b:3d:5c:2c:24:31:8f:43:1b:b6:db:
e1:74:1e:be:b8:56:f8:ab:0a:e4:30:77:e0:9f:45:07:b3:05:
b3:b5:aa:13:a5:86:52:b0:9f:9e:f0:d4:da:75:fa:21:b2:c5:
01:ff:c6:b7:b5:2b:87:6f:de:fe:d1:e4:5d:95:3a:6f:e8:da:
f1:53:d5:db:a3:65:ad:16:f0:3f:ed:ee:1b:4d:7d:5d:a0:e3:
23:a5:c6:a0:e5:89:c5:d6:3a:23:ce:a8:de:f7:83:b3:df:1a:
8a:f1:27:be:7c:99:6f:b3:ca:97:19:79:0f:c4:f1:61:16:e8:
99:45:3b:b1:4f:2d:26:cb:0e:f5:0c:af:66:2e:85:63:60:0a:
dc:79:3b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 18:52:53 2025 by rpki-client