Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/_ogMXTvwuiGuXrWQ2hK3AO0_Fcw.roa
File: _ogMXTvwuiGuXrWQ2hK3AO0_Fcw.roa (raw, json)
Hash identifier: WEgomRLuOpaCXAroET1pTNRkA9KLGMtgaXxjhp1OXmU=
Subject key identifier: FE:88:0C:5D:3B:F0:BA:21:AE:5E:B5:90:DA:12:B7:00:ED:3F:15:CC
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 019427B677273CB91889A96872D6F798E886
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/_ogMXTvwuiGuXrWQ2hK3AO0_Fcw.roa
Signing time: Thu 02 Jan 2025 15:50:56 +0000
ROA not before: Thu 02 Jan 2025 15:50:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8657
IP address blocks: 88.221.64.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:77:27:3c:b9:18:89:a9:68:72:d6:f7:98:e8:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Jan 2 15:50:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe880c5d3bf0ba21ae5eb590da12b700ed3f15cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:81:0e:ac:a8:48:c8:9a:63:5e:b0:2f:c6:d1:
b5:15:32:0f:81:df:27:8c:dd:2c:f6:81:b6:db:2c:
80:d1:b8:ec:df:1c:65:45:04:71:8b:38:06:e0:8e:
46:ff:d8:42:ff:95:96:a7:41:a9:24:f9:13:46:92:
7f:97:b4:2b:66:6d:a1:6e:45:9f:33:ef:ae:d9:63:
46:ad:f1:a3:05:66:e8:29:ef:3d:5a:ad:16:59:1f:
2e:d0:e5:98:a4:54:53:50:ce:1b:28:55:80:08:6d:
2e:48:70:b1:a4:10:56:83:47:cc:3d:59:73:77:1d:
6e:ee:3b:00:98:dc:a3:83:d4:cd:12:fc:f7:97:28:
a2:3b:09:09:69:d9:61:e4:19:6b:07:2f:b7:ea:06:
9a:10:4c:9a:e8:08:1f:9a:41:cd:a6:1e:84:85:b5:
07:74:19:33:f2:3f:7d:17:d5:24:3d:46:13:9b:56:
70:50:2f:cf:de:42:b0:ef:58:12:cc:0d:1f:87:d1:
46:ed:58:ad:b9:4c:2b:f6:5f:08:f7:1a:1f:f5:23:
c5:bf:56:21:53:e9:61:8f:14:08:29:db:cd:1e:78:
1d:d7:b7:cb:a2:56:39:64:0e:86:9d:98:1d:8a:b5:
f9:42:7a:6b:e4:d8:0a:ed:92:a5:35:11:cc:7b:3a:
20:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:88:0C:5D:3B:F0:BA:21:AE:5E:B5:90:DA:12:B7:00:ED:3F:15:CC
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/_ogMXTvwuiGuXrWQ2hK3AO0_Fcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.221.64.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:77:43:be:cb:8e:5d:bf:9d:b9:49:27:6b:ed:11:df:d9:6c:
95:b2:57:7e:82:ee:1b:9a:a6:7f:e5:43:cf:da:23:03:48:4e:
f1:da:c4:cb:c6:0f:9e:1c:da:ba:9f:8e:b9:b6:98:9c:b4:80:
a9:97:96:ab:98:23:f7:b7:22:8a:96:db:6d:e9:01:e2:a1:88:
3a:ea:50:4e:2a:46:f0:ee:a2:20:9a:da:5a:a3:52:91:e9:a3:
6f:f5:50:bf:e5:ab:9a:85:b0:1f:2c:9f:88:89:18:cd:db:71:
7c:aa:69:09:14:0a:af:0a:69:9e:35:56:b6:ad:a8:a3:97:4a:
53:95:fd:9b:d7:33:65:21:03:46:53:0d:05:1a:06:c4:01:e7:
f1:22:67:4e:b7:95:f7:c7:88:ff:d8:cd:f1:a2:df:e0:5f:8e:
11:60:f2:a6:ff:84:a2:32:c8:1b:e2:ae:6e:0d:5a:66:5b:22:
dd:0d:3c:5b:db:6c:ae:8d:45:21:d7:27:22:bf:4d:30:9b:ec:
bf:82:7a:a0:81:38:ad:16:36:27:b8:ad:5c:87:ac:e9:c1:8a:
9d:d1:e0:bd:1c:59:de:b7:7d:f8:76:a5:ee:f5:9b:d7:d2:8a:
1c:d9:56:ca:02:6f:a2:e4:3e:7d:f2:38:4a:d2:d4:3c:c6:c3:
2a:30:01:58
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntncnPLkYialoctb3mOiGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNWZjYmJlYTQ4OTM3YTQ0MmJhYmRiMzMwMjEzMmM0YmM5
YmQ2YWEwHhcNMjUwMTAyMTU1MDU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTg4MGM1ZDNiZjBiYTIxYWU1ZWI1OTBkYTEyYjcwMGVkM2YxNWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4EOrKhIyJpjXrAvxtG1FTIPgd8n
jN0s9oG22yyA0bjs3xxlRQRxizgG4I5G/9hC/5WWp0GpJPkTRpJ/l7QrZm2hbkWf
M++u2WNGrfGjBWboKe89Wq0WWR8u0OWYpFRTUM4bKFWACG0uSHCxpBBWg0fMPVlz
dx1u7jsAmNyjg9TNEvz3lyiiOwkJadlh5BlrBy+36gaaEEya6AgfmkHNph6EhbUH
dBkz8j99F9UkPUYTm1ZwUC/P3kKw71gSzA0fh9FG7VituUwr9l8I9xof9SPFv1Yh
U+lhjxQIKdvNHngd17fLolY5ZA6GnZgdirX5Qnpr5NgK7ZKlNRHMezogrQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP6IDF078Lohrl61kNoStwDtPxXMMB8GA1UdIwQY
MBaAFGtfy76kiTekQrq9szAhMsS8m9aqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQt
ODhkMWNhYzllNGYxLzEvX29nTVhUdnd1aUd1WHJXUTJoSzNBTzBfRmN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQtODhkMWNhYzllNGYx
LzEvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCWN1AMA0G
CSqGSIb3DQEBCwUAA4IBAQCMd0O+y45dv525SSdr7RHf2WyVsld+gu4bmqZ/5UPP
2iMDSE7x2sTLxg+eHNq6n465tpictICpl5armCP3tyKKlttt6QHioYg66lBOKkbw
7qIgmtpao1KR6aNv9VC/5auahbAfLJ+IiRjN23F8qmkJFAqvCmmeNVa2raijl0pT
lf2b1zNlIQNGUw0FGgbEAefxImdOt5X3x4j/2M3xot/gX44RYPKm/4SiMsgb4q5u
DVpmWyLdDTxb22yujUUh1yciv00wm+y/gnqggTitFjYnuK1ch6zpwYqd0eC9HFne
t334dqXu9ZvX0ooc2VbKAm+i5D598jhK0tQ8xsMqMAFY
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:51:34 2025 by rpki-client