Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/fXu6dyybxQWnLI_jekEGclRV-kI.roa
File: fXu6dyybxQWnLI_jekEGclRV-kI.roa (raw, json)
Hash identifier: ybmfpunL7X6Tqn27iyMbozR499AYYSkkrm5Yi5bndZY=
Subject key identifier: 7D:7B:BA:77:2C:9B:C5:05:A7:2C:8F:E3:7A:41:06:72:54:55:FA:42
Certificate issuer: /CN=4e78b6d00614f5565d9d8af8247cc72ea9b8833d
Certificate serial: 0195D739E406A64518C4DFADD12125A49AFC
Authority key identifier: 4E:78:B6:D0:06:14:F5:56:5D:9D:8A:F8:24:7C:C7:2E:A9:B8:83:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tni20AYU9VZdnYr4JHzHLqm4gz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/fXu6dyybxQWnLI_jekEGclRV-kI.roa
Signing time: Thu 27 Mar 2025 10:50:49 +0000
ROA not before: Thu 27 Mar 2025 10:50:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203976
IP address blocks: 45.88.36.0/24 maxlen: 24
45.88.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tni20AYU9VZdnYr4JHzHLqm4gz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 20:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d7:39:e4:06:a6:45:18:c4:df:ad:d1:21:25:a4:9a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e78b6d00614f5565d9d8af8247cc72ea9b8833d
Validity
Not Before: Mar 27 10:50:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d7bba772c9bc505a72c8fe37a4106725455fa42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8b:f5:d1:13:91:c4:85:5e:fd:f8:f9:80:49:
f3:0b:c5:1e:cf:06:e6:3b:fd:8e:e3:8a:2c:ae:cc:
33:19:a6:0e:ab:1e:6c:f3:a5:e2:49:f1:5c:9f:42:
7d:1b:c1:29:78:6e:80:4a:45:a5:78:4f:a1:1c:21:
f2:fc:cf:4e:9d:8e:6a:7c:08:15:e5:0e:9b:ad:e9:
f3:d7:51:93:d0:01:1c:b1:73:6f:e4:f7:02:d1:9d:
cd:c5:4d:a4:3f:50:51:a7:55:08:a8:07:74:94:07:
3e:57:39:2e:dc:b9:e7:42:9f:e3:15:9f:d5:ab:76:
a1:25:f1:54:f6:53:d5:ae:7a:e1:58:2b:80:4c:6e:
d4:de:3f:af:00:13:28:d9:1f:5e:50:45:bd:14:81:
67:98:c2:34:53:db:7a:96:ac:cb:5e:e5:89:67:84:
db:a0:90:b9:de:03:57:37:80:49:86:d3:50:93:26:
2b:df:53:86:20:63:d8:29:76:cf:42:0d:ad:aa:98:
ca:0a:1c:8d:14:89:9f:12:d9:fa:a7:3b:e2:b7:8f:
5f:c8:e7:2f:9c:3d:ec:91:db:05:dc:e6:e9:22:cc:
28:27:2e:04:15:43:9b:8a:4e:17:b9:da:9f:6c:5e:
30:3c:82:a1:66:6e:fe:27:de:8a:2e:b0:7a:a6:65:
94:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:7B:BA:77:2C:9B:C5:05:A7:2C:8F:E3:7A:41:06:72:54:55:FA:42
X509v3 Authority Key Identifier:
keyid:4E:78:B6:D0:06:14:F5:56:5D:9D:8A:F8:24:7C:C7:2E:A9:B8:83:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tni20AYU9VZdnYr4JHzHLqm4gz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/fXu6dyybxQWnLI_jekEGclRV-kI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.36.0/24
45.88.38.0/24
Signature Algorithm: sha256WithRSAEncryption
95:28:1e:46:47:09:05:f6:b0:b0:1e:2f:29:87:2c:22:99:d2:
60:6c:32:a5:de:26:fc:eb:e3:5e:05:0d:d0:04:16:4d:98:9b:
dd:eb:69:f9:60:11:d6:99:68:11:65:35:1d:96:7b:d9:76:a0:
07:f6:b3:53:90:d4:83:35:7c:f2:54:9f:a7:f8:f4:52:50:54:
b0:91:bf:5c:64:79:62:ad:ea:a9:fc:83:49:6d:b3:73:cd:a2:
31:ee:fe:c8:14:20:f3:08:29:6d:ee:75:e6:8b:79:be:54:16:
c9:8e:45:ef:35:23:7f:c9:39:e1:b2:71:4b:73:da:80:08:65:
55:49:f7:e4:62:c2:47:fa:e8:15:7b:ab:bb:60:5f:9e:c5:1e:
77:dd:11:f8:81:14:ef:92:e9:42:19:42:b7:1b:8c:4e:46:3e:
71:0e:43:f9:b8:a1:0d:e9:fd:f7:9c:7f:54:2d:ba:88:8c:9e:
54:de:e1:57:6f:b9:05:8d:74:15:28:a3:b3:94:bb:d0:46:3a:
d9:a2:80:7e:a3:58:70:93:fd:5f:94:b6:de:c8:67:27:55:22:
b8:11:dd:29:3d:16:20:a1:e4:22:b9:63:61:95:4f:a9:d0:ab:
cf:af:28:71:9d:f9:fe:c0:c0:8c:d5:87:b9:ea:76:d5:88:d0:
7d:19:7e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:41:25 2025 by rpki-client