Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/88b5c3-341c-4ea9-a948-6e8e9d52dd48/1/Rci7eL5oGCzv6_tfiW1PmTeawXg.roa
File: Rci7eL5oGCzv6_tfiW1PmTeawXg.roa (raw, json)
Hash identifier: 3Pq4pZ2HNSo1E8MLs1V/VYEm7An/GW4ggGPzeCvBY/A=
Subject key identifier: 45:C8:BB:78:BE:68:18:2C:EF:EB:FB:5F:89:6D:4F:99:37:9A:C1:78
Certificate issuer: /CN=88d7592f411900c067b5e7a219a345abfdbaa40f
Certificate serial: 019422FB0ACF571B79C7E06F3DA1724469DA
Authority key identifier: 88:D7:59:2F:41:19:00:C0:67:B5:E7:A2:19:A3:45:AB:FD:BA:A4:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNdZL0EZAMBnteeiGaNFq_26pA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/88b5c3-341c-4ea9-a948-6e8e9d52dd48/1/Rci7eL5oGCzv6_tfiW1PmTeawXg.roa
Signing time: Wed 01 Jan 2025 17:47:45 +0000
ROA not before: Wed 01 Jan 2025 17:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62214
IP address blocks: 185.112.156.0/22 maxlen: 22
2a02:6080::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/88b5c3-341c-4ea9-a948-6e8e9d52dd48/1/iNdZL0EZAMBnteeiGaNFq_26pA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/88b5c3-341c-4ea9-a948-6e8e9d52dd48/1/iNdZL0EZAMBnteeiGaNFq_26pA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/iNdZL0EZAMBnteeiGaNFq_26pA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 20:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:0a:cf:57:1b:79:c7:e0:6f:3d:a1:72:44:69:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d7592f411900c067b5e7a219a345abfdbaa40f
Validity
Not Before: Jan 1 17:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45c8bb78be68182cefebfb5f896d4f99379ac178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a2:62:39:bc:ca:98:f1:6e:48:4b:f8:79:8a:
fb:fc:85:e1:98:43:fe:fd:8a:12:c6:1c:0d:78:87:
50:6b:8b:a9:55:99:ae:43:39:80:6c:ce:11:2e:db:
55:76:e0:24:a2:1b:02:ec:21:e9:86:f9:bf:a9:8f:
e1:6f:c3:5b:bb:06:ad:67:e3:38:40:9c:d7:01:df:
d7:43:20:91:e7:b4:30:96:5f:0d:56:c5:44:83:30:
48:21:a3:f5:6b:80:95:49:3a:8c:8a:09:e0:4a:76:
43:b0:00:6d:18:27:fc:33:39:6d:de:93:08:0d:f0:
7f:36:b4:45:b8:1f:45:19:e5:d7:6c:25:46:9f:3d:
6e:6d:f1:3b:65:fc:58:99:f2:6a:ae:59:29:90:e9:
23:e7:40:77:f9:2e:03:3c:00:d5:4b:a7:ee:bd:77:
31:1d:a3:99:9e:41:11:e8:96:3c:7c:5c:1d:15:a0:
e2:95:cd:3d:eb:a1:a3:02:41:be:7e:ee:60:2b:a9:
ae:c2:3d:db:df:64:a1:a0:dc:89:c0:16:c0:63:35:
ae:28:d0:0c:6e:2f:9a:ef:15:9a:4d:c4:e0:e2:08:
21:95:0c:58:e5:10:a3:07:ae:e7:a5:e2:c6:e1:40:
f9:ad:c4:96:a2:41:27:fb:5f:c7:d0:5e:bf:ed:37:
39:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C8:BB:78:BE:68:18:2C:EF:EB:FB:5F:89:6D:4F:99:37:9A:C1:78
X509v3 Authority Key Identifier:
keyid:88:D7:59:2F:41:19:00:C0:67:B5:E7:A2:19:A3:45:AB:FD:BA:A4:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNdZL0EZAMBnteeiGaNFq_26pA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/88b5c3-341c-4ea9-a948-6e8e9d52dd48/1/Rci7eL5oGCzv6_tfiW1PmTeawXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/88b5c3-341c-4ea9-a948-6e8e9d52dd48/1/iNdZL0EZAMBnteeiGaNFq_26pA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.156.0/22
IPv6:
2a02:6080::/32
Signature Algorithm: sha256WithRSAEncryption
5f:47:36:4b:04:c2:e4:c3:aa:87:3c:cd:25:1c:95:6b:59:7b:
03:a7:8a:06:5f:47:63:21:a6:20:4c:83:58:5c:99:8b:8e:50:
81:04:9a:af:82:90:df:cf:a4:b5:b3:77:7e:e6:59:b5:a2:0d:
ab:a8:5e:cf:aa:64:c2:01:0f:51:d1:f8:22:6b:b6:df:2d:03:
6f:59:ba:50:63:8d:d7:f2:6f:8c:ec:98:9f:51:ec:e1:80:bc:
f1:6b:a2:9e:31:8f:05:97:dd:8a:48:19:82:22:e4:cb:2c:d7:
20:4b:14:9a:ac:7a:78:b4:fa:a9:52:01:ea:b5:cd:0e:bb:17:
7c:cc:6b:8d:05:43:05:df:bf:25:46:42:de:42:b1:98:49:17:
c7:4e:f9:e1:d5:1d:98:9b:93:6d:79:11:21:2d:5a:7c:46:3b:
2a:81:3c:b7:52:e2:87:6b:a0:e0:ae:d2:9b:20:dc:e6:80:ad:
3b:ff:8f:38:b2:48:a2:d4:e9:98:ef:f6:f6:23:fe:ac:5c:0e:
1b:9d:91:a6:18:08:1f:df:62:71:cc:d5:de:c8:49:e4:a7:d2:
5a:4c:1d:a9:88:2f:4a:ef:71:0d:98:14:aa:29:ab:11:bb:09:
82:96:10:62:d9:67:3a:73:63:9a:63:80:a7:28:4a:c0:10:97:
71:64:d5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:35:29 2025 by rpki-client