Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Ib2hhYG2nUdEscebvksfl1aiTI0.roa
File: Ib2hhYG2nUdEscebvksfl1aiTI0.roa (raw, json)
Hash identifier: O/JyCkL3w1q8mp/+DgNgJGHvzzuk9VXiIMCNR+QLoOY=
Subject key identifier: 21:BD:A1:85:81:B6:9D:47:44:B1:C7:9B:BE:4B:1F:97:56:A2:4C:8D
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0195C1DE5C5A1F623731AC5DACB09CF9D15A
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Ib2hhYG2nUdEscebvksfl1aiTI0.roa
Signing time: Sun 23 Mar 2025 07:18:49 +0000
ROA not before: Sun 23 Mar 2025 07:18:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5650
IP address blocks: 88.209.221.0/24 maxlen: 24
88.209.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c1:de:5c:5a:1f:62:37:31:ac:5d:ac:b0:9c:f9:d1:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Mar 23 07:18:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21bda18581b69d4744b1c79bbe4b1f9756a24c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6c:84:56:b9:80:b7:64:5e:37:c9:79:51:eb:
4c:c3:d6:66:9b:1d:aa:08:d7:5d:19:96:a1:aa:41:
aa:a8:d8:16:5f:a2:8d:3c:69:af:ce:d6:d7:dc:b5:
df:77:e4:09:c7:6c:f2:25:45:9e:5c:ee:7a:b1:14:
79:6d:0f:b2:5b:35:86:02:34:c2:5b:31:c3:45:cf:
74:ac:1b:0c:7c:c8:f1:f4:f5:49:b4:93:4c:29:2c:
bd:3e:6d:b9:a0:c1:09:a1:5b:19:82:e9:6f:c6:c5:
d8:6e:23:df:8d:2e:05:7d:84:76:8b:b8:51:12:ba:
a0:c3:c5:85:89:61:23:66:fc:52:0d:5e:6a:8b:19:
15:0b:75:38:a2:bb:be:48:0a:47:cb:26:99:d3:af:
8e:67:b2:d1:0e:ba:76:67:3a:dd:6d:03:89:e6:77:
bf:53:25:19:67:8d:71:f7:62:66:4d:31:70:26:45:
85:ff:c4:af:75:c3:c0:65:2c:da:c4:32:fd:49:9c:
91:a6:0e:7b:f2:1f:02:9f:66:2b:78:15:48:80:8a:
59:05:ef:59:b3:39:10:9b:9f:d2:81:0f:80:44:8a:
73:e0:74:d9:b8:cf:f2:4c:cd:64:e5:e4:d9:ef:8e:
88:5c:ef:cf:64:1d:e7:fb:88:a3:08:af:0f:7c:6c:
c7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BD:A1:85:81:B6:9D:47:44:B1:C7:9B:BE:4B:1F:97:56:A2:4C:8D
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Ib2hhYG2nUdEscebvksfl1aiTI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.221.0/24
88.209.240.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:5f:43:d4:0a:ad:b2:b9:52:7f:8e:7b:51:29:a4:07:8e:3b:
0d:37:08:6a:3a:c4:62:2e:fe:c4:a6:ce:1f:be:0c:20:e4:23:
ac:df:c7:a6:53:b7:3f:bf:29:e1:18:69:e6:ed:e9:34:24:64:
39:81:df:dc:ee:ca:7b:84:b5:4a:bc:42:11:a7:1a:d2:e7:4c:
e7:b9:8c:d0:ea:2a:1e:82:a5:61:f9:cc:93:a3:5c:08:f4:a0:
4c:d8:7a:d3:2d:32:d6:9d:b2:de:13:c9:4e:ff:a6:a3:df:9e:
25:f1:eb:9a:bf:d4:f4:3f:db:3f:df:b9:b4:3e:a7:5c:ed:54:
0c:50:28:97:a3:ba:1b:2f:d1:1d:fa:35:73:7d:23:2b:eb:1d:
e5:13:99:2b:d5:fd:0c:7e:51:b6:1f:f7:b8:8e:68:ab:c6:bd:
f3:52:7f:26:df:59:73:71:42:43:f9:0a:ee:34:11:f0:4d:d3:
dc:ab:bf:cd:61:9e:73:89:52:95:7c:8c:b5:8f:fe:a3:a2:47:
9f:20:30:79:bb:14:fe:5c:f8:86:51:c6:02:f2:20:87:fa:b8:
b7:96:2e:64:bc:d6:93:aa:9a:ef:9e:50:4c:b4:b5:33:a9:71:
49:38:f6:b5:d3:7d:f9:c3:27:5a:bd:a5:eb:92:54:6a:db:98:
ec:85:d7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:56:22 2025 by rpki-client