Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/iB5EOpTCIaiDbH4uVUFoFKlmWPs.roa
File: iB5EOpTCIaiDbH4uVUFoFKlmWPs.roa (raw, json)
Hash identifier: ZYWC197VLTfAladRXdWqQQYMFzoq9Qadj+kNALRDTVE=
Subject key identifier: 88:1E:44:3A:94:C2:21:A8:83:6C:7E:2E:55:41:68:14:A9:66:58:FB
Certificate issuer: /CN=81df1fe520354dd3bb3e9264a76cf53eb07db072
Certificate serial: 01941F8C88A88D1413294E474B5319223577
Authority key identifier: 81:DF:1F:E5:20:35:4D:D3:BB:3E:92:64:A7:6C:F5:3E:B0:7D:B0:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gd8f5SA1TdO7PpJkp2z1PrB9sHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/iB5EOpTCIaiDbH4uVUFoFKlmWPs.roa
Signing time: Wed 01 Jan 2025 01:48:11 +0000
ROA not before: Wed 01 Jan 2025 01:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210086
IP address blocks: 85.117.248.0/24 maxlen: 24
85.117.249.0/24 maxlen: 24
85.117.250.0/24 maxlen: 24
85.117.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/gd8f5SA1TdO7PpJkp2z1PrB9sHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/gd8f5SA1TdO7PpJkp2z1PrB9sHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gd8f5SA1TdO7PpJkp2z1PrB9sHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 19:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:88:a8:8d:14:13:29:4e:47:4b:53:19:22:35:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81df1fe520354dd3bb3e9264a76cf53eb07db072
Validity
Not Before: Jan 1 01:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=881e443a94c221a8836c7e2e55416814a96658fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:31:17:09:0a:39:5d:1a:41:3e:ad:fd:7d:c9:
17:f7:50:6c:02:9d:28:98:88:9e:73:f9:f2:37:a4:
13:17:75:cd:c4:35:9c:aa:97:01:e3:a1:6d:2d:fd:
37:76:8c:9b:19:c4:80:dd:16:53:5b:fa:75:ad:e6:
6e:61:09:f7:af:ac:20:61:b5:69:32:c6:2f:e6:b5:
67:41:f1:4a:89:a0:2a:6f:0e:af:79:6f:a4:5d:3e:
20:c9:8a:82:af:66:7b:60:12:89:63:8d:a1:b8:ac:
b8:e1:f5:8f:07:8f:3e:9f:14:2f:50:e6:f8:63:ac:
62:cb:66:0a:9c:f8:11:ba:5d:aa:88:15:02:a2:b0:
dd:7d:90:e6:62:cc:da:e5:29:5a:fd:63:28:49:07:
a3:bb:d3:8b:f9:00:e1:6d:fc:1a:d9:99:d3:a5:b9:
13:2d:fc:2d:23:33:37:2d:8b:56:19:f7:53:f5:15:
49:32:45:6b:4f:f6:8d:2f:6e:66:1e:ea:84:b2:ab:
c1:12:4c:0f:39:e7:78:9e:80:ab:6d:48:92:e3:2b:
75:27:7d:63:3a:9c:da:27:ed:ca:c0:98:11:73:19:
22:3d:ff:b7:b6:c2:90:09:34:f9:05:77:75:6a:7b:
18:6c:dc:31:56:45:da:b6:88:53:e6:7f:dc:ba:07:
a8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:1E:44:3A:94:C2:21:A8:83:6C:7E:2E:55:41:68:14:A9:66:58:FB
X509v3 Authority Key Identifier:
keyid:81:DF:1F:E5:20:35:4D:D3:BB:3E:92:64:A7:6C:F5:3E:B0:7D:B0:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gd8f5SA1TdO7PpJkp2z1PrB9sHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/iB5EOpTCIaiDbH4uVUFoFKlmWPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/gd8f5SA1TdO7PpJkp2z1PrB9sHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.117.248.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:45:6b:98:0a:ca:79:78:a1:20:6b:4a:b4:0b:a1:a2:c3:51:
8a:5e:02:c7:17:6b:a4:97:04:30:f8:02:c9:9a:ef:7d:05:b3:
ed:de:64:c2:f5:d6:6d:a6:66:9a:88:68:36:31:20:0e:dc:96:
ee:eb:c7:fa:e7:52:b6:3b:8c:71:82:30:a1:7c:c7:ac:2b:2c:
c9:9d:6a:6a:59:0b:09:b3:2d:3e:c8:98:8f:8e:e7:de:89:52:
8e:70:22:d4:80:6e:3b:16:03:6b:60:68:0a:f5:b7:85:04:e2:
17:7c:74:bf:04:3b:17:88:f6:5e:8a:11:78:d6:5c:78:2e:46:
01:8e:7f:f8:3a:2a:75:5b:06:d1:11:ff:ac:30:ed:80:77:d1:
ac:11:d7:61:ee:40:30:c7:9e:74:a9:da:73:ec:59:e5:a3:23:
9a:8c:94:e0:4c:7d:60:20:68:27:05:39:e6:03:41:9a:50:64:
b5:f7:26:ff:2a:6e:63:78:46:ea:63:90:99:57:36:31:0f:a3:
22:f7:0c:76:e3:63:9e:3a:f0:fc:8f:3f:f7:b7:b9:1d:14:02:
b0:2c:eb:df:ec:54:3f:71:11:ba:31:33:e3:20:35:6f:02:a6:
dc:c1:94:08:57:52:e9:6b:63:74:42:fd:a4:c6:49:70:51:ea:
12:4d:5d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:16:55 2025 by rpki-client