Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/l3aNToPytPwYHgxWfH_Fxe7l9-8.roa
File: l3aNToPytPwYHgxWfH_Fxe7l9-8.roa (raw, json)
Hash identifier: rud0x/u1K9V6C61gkvZO4dPUmEXcZ8EJf2+cgfvlR5g=
Subject key identifier: 97:76:8D:4E:83:F2:B4:FC:18:1E:0C:56:7C:7F:C5:C5:EE:E5:F7:EF
Certificate issuer: /CN=e6f38e3e86ab561fa0dd3cb09a70d61b2ca44740
Certificate serial: 019427B612195E64CFAF47351BC27AFF5EF2
Authority key identifier: E6:F3:8E:3E:86:AB:56:1F:A0:DD:3C:B0:9A:70:D6:1B:2C:A4:47:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vOOPoarVh-g3TywmnDWGyykR0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/l3aNToPytPwYHgxWfH_Fxe7l9-8.roa
Signing time: Thu 02 Jan 2025 15:50:31 +0000
ROA not before: Thu 02 Jan 2025 15:50:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214431
IP address blocks: 88.135.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/5vOOPoarVh-g3TywmnDWGyykR0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:12:19:5e:64:cf:af:47:35:1b:c2:7a:ff:5e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6f38e3e86ab561fa0dd3cb09a70d61b2ca44740
Validity
Not Before: Jan 2 15:50:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97768d4e83f2b4fc181e0c567c7fc5c5eee5f7ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:de:f3:43:53:68:d1:4b:e0:e6:84:3c:5a:80:
35:b1:98:b5:97:dd:1c:c1:1c:a0:70:10:71:14:c0:
d3:75:db:c5:4d:79:88:ff:da:6e:2f:d1:a8:ed:d4:
21:c0:9d:55:27:b3:80:a8:e8:90:5e:1f:7b:5c:42:
fa:ab:23:ef:3e:df:05:71:e4:91:21:4e:12:bf:dd:
60:ad:01:99:c7:cf:7b:d5:49:9c:d9:99:be:c4:e0:
d1:0a:bb:d1:cd:8f:d1:9d:c4:c6:36:de:ae:97:2b:
c9:09:19:17:3f:50:22:ca:00:a0:db:68:ea:15:2d:
99:21:9d:8f:0a:31:5d:1f:ac:02:e2:dc:6b:95:f3:
49:df:dd:80:b7:2a:41:c2:ed:4b:f0:df:25:25:d7:
bf:bd:15:13:bb:9c:e3:8e:a8:46:df:2e:f6:e8:ae:
5f:29:73:8a:ea:a4:87:9f:6b:50:53:c8:32:a5:0e:
9e:2d:dd:da:65:68:f9:06:3b:e5:82:de:9d:43:9a:
67:2d:b3:c3:33:b4:aa:54:e8:2e:db:eb:ff:55:c0:
8a:b3:ed:c3:3d:05:0c:2d:e5:81:89:03:e8:12:f0:
23:aa:78:95:56:e4:9e:7c:e6:f4:9d:d9:77:e0:8f:
0c:07:91:0b:17:e4:2f:17:42:8c:08:f3:c7:83:22:
26:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:76:8D:4E:83:F2:B4:FC:18:1E:0C:56:7C:7F:C5:C5:EE:E5:F7:EF
X509v3 Authority Key Identifier:
keyid:E6:F3:8E:3E:86:AB:56:1F:A0:DD:3C:B0:9A:70:D6:1B:2C:A4:47:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vOOPoarVh-g3TywmnDWGyykR0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/l3aNToPytPwYHgxWfH_Fxe7l9-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.75.0/24
Signature Algorithm: sha256WithRSAEncryption
69:bc:82:cb:63:92:82:49:3c:a9:98:2a:14:fa:5c:e9:2b:53:
a5:7d:69:8b:23:96:ec:f1:17:4d:10:f0:0e:63:1d:0e:c2:f6:
db:85:84:cf:95:a8:11:ec:e9:3e:c3:af:78:06:6b:c0:86:84:
5a:70:f3:e8:11:d4:33:d8:ea:25:d5:64:85:4c:92:29:6c:c9:
83:02:cf:73:27:41:74:b2:5f:fc:64:52:3a:7e:b4:33:a7:54:
e6:81:8a:5f:9a:3d:e5:95:58:b5:47:e8:58:ed:03:c5:29:41:
f1:7c:2e:87:2d:11:13:1d:4a:6c:d5:bb:54:a9:72:04:f4:09:
b3:f1:94:60:83:48:1c:5f:8c:ea:a4:0b:41:93:79:0a:49:e7:
3a:38:01:73:59:64:18:e3:8b:ad:5f:8d:0b:5f:96:91:08:ce:
dc:21:ff:60:2c:6e:58:84:4a:e1:48:eb:76:5b:4c:e4:6f:3d:
c7:37:62:83:cf:b9:30:db:56:76:02:ad:3e:57:ba:b9:95:bf:
7d:49:f5:4a:67:df:44:6e:fb:73:25:fc:94:84:fc:b1:c7:2d:
63:13:2c:01:31:b8:ed:65:0b:c7:8b:c2:cb:a8:d1:bd:05:fe:
45:4c:b1:b8:b9:d4:4f:a9:54:15:e9:de:5b:d6:e7:0a:e2:67:
f3:6c:95:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:18:50 2025 by rpki-client