Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/petiIsIFbviSTRyaoMc5UMub-wE.roa
File: petiIsIFbviSTRyaoMc5UMub-wE.roa (raw, json)
Hash identifier: l4qT7ZrSLWFzhclk+OXfLseDA6eVzRRK9BUNH6axnkY=
Subject key identifier: A5:EB:62:22:C2:05:6E:F8:92:4D:1C:9A:A0:C7:39:50:CB:9B:FB:01
Certificate issuer: /CN=56c8a1713c7476e00ed2b77fd98fd89330365d87
Certificate serial: 01942747630B0ADAFDB49BC06FF4F976DCFD
Authority key identifier: 56:C8:A1:71:3C:74:76:E0:0E:D2:B7:7F:D9:8F:D8:93:30:36:5D:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/petiIsIFbviSTRyaoMc5UMub-wE.roa
Signing time: Thu 02 Jan 2025 13:49:37 +0000
ROA not before: Thu 02 Jan 2025 13:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41870
IP address blocks: 88.80.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:63:0b:0a:da:fd:b4:9b:c0:6f:f4:f9:76:dc:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56c8a1713c7476e00ed2b77fd98fd89330365d87
Validity
Not Before: Jan 2 13:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5eb6222c2056ef8924d1c9aa0c73950cb9bfb01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f1:22:d0:d6:83:d1:f3:9b:cc:7d:a4:df:ca:
8c:15:9c:71:9a:5e:2e:32:a8:40:a3:b1:90:25:2b:
e0:2e:4e:3c:52:33:05:77:df:60:c8:5d:c7:17:07:
02:1f:66:80:6f:a1:70:b9:f3:e3:bb:1f:b2:ec:46:
63:37:5a:ca:9f:57:ca:e7:f2:78:86:9d:df:79:4e:
eb:5a:6e:ab:45:eb:53:ef:d1:3e:79:ae:c0:06:69:
38:21:c6:27:e5:0e:d6:a3:8a:dd:f3:e9:b9:92:38:
be:30:c1:b0:aa:23:e8:a7:c2:19:66:79:64:78:41:
5d:ba:49:98:05:07:81:58:23:dc:9f:14:d1:a9:76:
6c:0b:7a:d3:53:88:f7:d5:52:2b:6f:75:36:6b:b6:
04:fd:94:2b:c2:88:1e:f7:13:a2:67:23:29:ae:4a:
76:96:c7:83:91:a3:e5:7c:41:19:a7:d2:23:83:1a:
1b:a1:a5:a9:77:17:60:85:f5:38:81:71:3e:4a:d2:
88:3e:9e:8b:e8:52:7e:e7:9d:67:bd:a7:8c:9e:dc:
2d:96:7a:6b:d4:cb:ff:41:39:03:cf:54:37:07:1d:
4c:0c:e5:ca:64:d0:d1:40:e1:b4:bf:89:13:f3:88:
a6:45:c4:18:2a:82:14:19:cb:32:6e:4c:b4:76:6a:
a4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:EB:62:22:C2:05:6E:F8:92:4D:1C:9A:A0:C7:39:50:CB:9B:FB:01
X509v3 Authority Key Identifier:
keyid:56:C8:A1:71:3C:74:76:E0:0E:D2:B7:7F:D9:8F:D8:93:30:36:5D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/petiIsIFbviSTRyaoMc5UMub-wE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.150.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:8d:8e:04:68:ea:59:56:8c:e5:14:42:f1:1e:87:9a:5f:cf:
80:34:50:3b:32:e0:81:1d:3f:5c:f0:a3:d3:be:19:83:7f:5a:
e1:db:a2:d4:c7:ff:14:a2:fc:cd:7c:dd:51:24:72:cf:2a:85:
5b:d7:c0:da:0c:c3:7c:58:77:24:eb:8b:f0:88:7f:1a:7c:14:
7d:f1:03:c9:88:87:31:ad:3e:1d:a6:10:13:5a:cb:dc:a6:85:
bc:4f:b9:d9:38:e0:b7:10:14:ae:b6:a5:32:f9:86:46:bd:24:
bf:11:d0:97:f6:20:f4:f5:7a:90:e2:86:a6:85:44:06:ce:32:
e6:c0:6b:13:50:d1:a5:e1:a9:ee:93:c2:22:90:3c:21:49:88:
a0:32:36:9e:dc:04:b2:ad:92:40:b0:c8:0c:63:1d:36:b1:e0:
62:e9:df:c8:2f:db:4b:25:2f:b2:7d:23:d7:6c:85:9d:aa:99:
57:bd:42:a7:da:1f:16:b1:26:0f:61:57:f7:e8:5a:0d:12:35:
e6:92:6b:d0:bc:5a:42:62:20:c2:ef:7d:ce:3b:80:ed:ee:13:
4b:cf:05:f1:2b:3c:6b:01:29:03:a9:bc:9d:e3:36:ae:8f:4e:
42:c4:c1:59:2a:b9:a7:11:2c:17:82:ac:07:42:4d:fa:e4:0a:
f1:4f:4c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:40:56 2025 by rpki-client