Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/utCd6CG9brIiyKNs-78OyfD6MN0.roa
File: utCd6CG9brIiyKNs-78OyfD6MN0.roa (raw, json)
Hash identifier: k+kO8nKWexjZOOApGZKnpFKFg6bAeOnZQ4lga+iGpfI=
Subject key identifier: BA:D0:9D:E8:21:BD:6E:B2:22:C8:A3:6C:FB:BF:0E:C9:F0:FA:30:DD
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01953C94D95CA93D14ABA6798474DA3E45AD
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/utCd6CG9brIiyKNs-78OyfD6MN0.roa
Signing time: Tue 25 Feb 2025 10:09:02 +0000
ROA not before: Tue 25 Feb 2025 10:09:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3223
IP address blocks: 188.213.19.0/24 maxlen: 24
188.213.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 20:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3c:94:d9:5c:a9:3d:14:ab:a6:79:84:74:da:3e:45:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Feb 25 10:09:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bad09de821bd6eb222c8a36cfbbf0ec9f0fa30dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8c:a5:cd:9f:b3:71:a2:37:ee:37:51:c1:93:
1c:51:a0:fe:96:1e:89:63:4f:37:0e:2e:e8:bb:c8:
0d:54:d4:fc:76:10:3c:36:de:0d:d5:ff:96:11:b8:
9e:f3:d6:ca:ed:08:24:a5:fb:3f:3d:1c:1d:19:4b:
b2:78:c9:65:3a:ca:e1:5e:6a:87:37:98:26:3e:54:
ae:e5:c9:b4:0a:a4:92:c6:06:5b:67:70:f2:e0:9c:
5d:f2:57:6b:bc:cb:85:96:7f:a5:35:48:b9:e7:80:
d9:46:b7:4a:54:04:09:69:44:92:ca:71:81:f8:32:
23:6b:44:59:87:21:87:93:99:85:b3:d8:f4:47:43:
64:f2:81:b4:56:fd:82:60:79:86:64:2a:af:87:d2:
65:3d:23:60:7d:49:ad:48:6a:4c:a1:d9:76:5c:e2:
44:16:c8:5e:ce:4f:2c:32:6b:da:04:a4:44:67:60:
fd:56:ad:b9:0e:d2:7b:8a:f3:e6:17:a7:ae:dc:8a:
07:75:bb:7c:15:dd:d2:08:9d:d5:71:50:8c:a2:7b:
31:ef:8e:0e:d9:db:d2:3a:85:8a:f4:dc:71:d8:b0:
11:45:67:ca:82:98:17:98:73:fe:9e:22:fa:89:95:
b3:f6:d7:dd:90:91:89:a4:9b:ba:7e:4b:64:15:21:
f9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D0:9D:E8:21:BD:6E:B2:22:C8:A3:6C:FB:BF:0E:C9:F0:FA:30:DD
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/utCd6CG9brIiyKNs-78OyfD6MN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.213.19.0/24
188.213.22.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:e6:ea:02:fd:82:c9:54:d8:ed:ae:ab:c0:90:8a:67:4d:94:
03:f2:36:3d:67:59:12:85:6e:d0:6f:44:0b:0a:c1:85:6d:64:
d7:ec:0a:72:ce:4f:1a:98:09:98:59:20:e8:9e:93:2a:a9:21:
34:4d:13:44:c3:02:c9:24:58:d4:d9:62:c7:68:6d:12:72:b1:
ef:0f:81:56:30:22:8e:38:72:7b:7e:2e:48:d8:4b:95:d6:8c:
d2:9b:b0:a9:df:72:66:78:eb:60:ef:17:92:c2:12:29:22:5a:
36:67:24:45:e5:64:d0:7c:1e:7e:55:f1:1d:cf:8a:32:38:39:
90:6d:9d:d0:ac:a5:9b:b1:9d:26:ae:d3:f2:a5:6b:8a:40:ea:
e9:e9:cc:80:0c:ce:74:01:ad:11:56:e9:d2:76:24:10:2a:6d:
ca:21:98:fd:05:78:44:17:5f:6b:c0:49:27:06:2a:48:9e:5b:
a6:e2:01:dc:2e:df:1b:88:8f:06:47:58:47:68:49:d7:f8:60:
7a:29:35:3b:b7:30:93:92:e3:33:31:4c:63:b7:03:c2:93:54:
87:61:de:2e:fc:72:f2:f8:b8:b7:a5:15:83:ee:db:ae:96:51:
ea:22:8f:01:60:80:c6:fd:23:9e:35:f7:cf:96:b1:c5:c4:e1:
ad:c5:27:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:46 2025 by rpki-client