Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/AP_6Goo6fEz7oQb-achec-XNy_8.roa
File: AP_6Goo6fEz7oQb-achec-XNy_8.roa (raw, json)
Hash identifier: W7s4reaaA4EkIYrdv3BL+KbYCgasAyomE4TDjgFPn9w=
Subject key identifier: 00:FF:FA:1A:8A:3A:7C:4C:FB:A1:06:FE:69:C8:5E:73:E5:CD:CB:FF
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019422FBA17AED7F9C262E89ADB2E291506F
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/AP_6Goo6fEz7oQb-achec-XNy_8.roa
Signing time: Wed 01 Jan 2025 17:48:23 +0000
ROA not before: Wed 01 Jan 2025 17:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207236
IP address blocks: 88.151.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:a1:7a:ed:7f:9c:26:2e:89:ad:b2:e2:91:50:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 1 17:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=00fffa1a8a3a7c4cfba106fe69c85e73e5cdcbff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2d:af:11:35:1b:be:10:55:5b:13:71:ad:18:
22:44:78:55:01:c5:76:59:2b:bd:6b:5b:6d:b2:d8:
c1:60:d5:20:82:f0:11:f8:0a:47:15:85:be:0f:41:
e8:90:32:ea:7d:3a:66:0f:1e:cc:d0:25:94:fb:64:
53:bc:94:bd:98:7a:39:31:e5:08:3b:8c:63:54:7c:
a4:c5:d3:bb:7b:26:2f:f7:05:0e:84:b4:3d:59:a2:
7f:9a:7f:cc:94:7e:13:37:0d:d4:79:73:77:52:df:
b7:43:a1:31:2a:a2:b5:45:d7:ff:f6:f7:c0:45:a5:
85:a4:65:03:c0:7b:6d:aa:d5:62:4d:cd:31:71:53:
cc:f4:4e:bd:a6:14:bd:ec:6a:c1:1c:bc:c7:e7:a3:
bb:44:61:4a:82:83:6d:19:a9:ae:1b:36:29:2d:4b:
fa:ce:e2:14:63:7c:d1:05:c1:f4:61:cd:57:4d:67:
4a:d7:13:09:ee:42:c9:75:a0:c9:bb:05:28:6e:58:
08:08:2d:0f:cf:63:5e:09:97:e2:bf:37:f2:a0:2c:
2c:7d:22:ec:2c:89:82:9b:b1:e7:49:12:89:a4:19:
54:65:09:48:08:fc:f6:1a:90:06:81:c8:d6:bb:e0:
87:f7:e1:c9:43:f5:80:9b:f3:4e:0c:d3:79:2a:1a:
fe:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:FF:FA:1A:8A:3A:7C:4C:FB:A1:06:FE:69:C8:5E:73:E5:CD:CB:FF
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/AP_6Goo6fEz7oQb-achec-XNy_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.60.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:a9:82:9a:97:87:d7:4f:e5:d0:e3:85:1f:ff:a5:21:95:41:
97:eb:4e:78:db:59:e0:19:56:09:f9:5e:33:b9:30:14:bf:2b:
61:24:ff:cc:00:45:7e:82:b3:55:fa:cf:9a:ca:9f:8f:5b:03:
69:6d:b4:e6:ee:61:74:a7:86:f1:5f:65:cd:fe:69:fb:d5:65:
93:0e:11:9d:20:3c:c0:dd:e3:9e:13:18:2c:6a:b5:c0:5a:54:
52:48:75:df:d5:a4:d4:50:ef:58:94:e3:76:c4:d0:dc:b9:28:
c6:75:4c:51:7d:92:87:5e:92:6c:45:a1:55:a9:38:59:98:0c:
32:58:c1:2f:8b:d5:84:f1:9e:6c:25:ef:7d:21:9f:95:5a:76:
27:58:bd:e6:63:20:25:7b:58:db:a1:40:6c:6f:b8:69:f8:54:
33:6f:5b:00:c4:0f:54:ce:ee:e8:b0:35:37:16:b9:42:30:cb:
65:62:13:a1:e8:ad:f2:8c:0d:84:07:c2:15:c0:5d:7c:21:28:
19:76:7d:9c:be:e8:52:da:cf:30:76:4e:ed:12:1a:1e:71:09:
74:7c:85:24:fa:97:92:bc:1c:28:ee:dc:41:9e:f2:43:cc:4b:
8f:d7:a5:fa:db:12:50:d5:d7:b6:fa:5b:21:3c:44:df:0b:99:
3d:58:e8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:27:34 2025 by rpki-client