Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ino2qXelksylikINUUJCWhgcewY.roa
File: ino2qXelksylikINUUJCWhgcewY.roa (raw, json)
Hash identifier: sIsBuw2OEQQqAWDNG3DpG0cPMZ8oVb5IoH3bqeQCwpA=
Subject key identifier: 8A:7A:36:A9:77:A5:92:CC:A5:8A:42:0D:51:42:42:5A:18:1C:7B:06
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0195F620F5982CBE78DAAE515A522A58B4BC
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ino2qXelksylikINUUJCWhgcewY.roa
Signing time: Wed 02 Apr 2025 10:51:49 +0000
ROA not before: Wed 02 Apr 2025 10:51:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 83.137.154.0/24 maxlen: 24
88.151.56.0/23 maxlen: 24
88.151.56.0/24 maxlen: 24
88.209.224.0/24 maxlen: 24
88.209.225.0/24 maxlen: 24
88.209.232.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f6:20:f5:98:2c:be:78:da:ae:51:5a:52:2a:58:b4:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Apr 2 10:51:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a7a36a977a592cca58a420d5142425a181c7b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:65:d4:73:d2:fe:0e:07:08:db:a8:84:db:07:
39:b5:53:95:ee:d1:dc:f1:ed:f3:20:b8:c1:12:11:
bb:3b:6e:d0:40:16:76:a5:fc:cc:33:f4:1d:7d:1a:
3c:40:c5:ba:a1:48:b1:ea:ce:c9:76:cd:e9:2e:6d:
c8:ae:6a:be:35:ab:ab:3a:06:fb:a3:e8:12:d9:a3:
ce:9b:d1:85:a3:43:2a:d6:d2:5b:81:bb:85:ff:aa:
7b:0c:4c:0f:c4:8a:8d:a2:97:73:2a:69:a8:e0:b6:
4a:b5:01:c8:f8:5b:e9:c0:6a:56:fd:9f:ca:b0:99:
c0:a8:28:cb:b2:51:7a:f3:0d:49:11:3d:31:e6:ae:
28:7f:0a:a1:48:ef:4e:d7:b3:03:f6:54:e1:01:50:
04:05:43:76:f4:6c:8a:0c:05:88:9d:68:5e:72:34:
ea:17:85:7d:2c:47:d0:0c:5a:04:7b:49:b9:a0:81:
f3:3b:f2:12:69:d3:76:22:ca:d8:ee:04:97:fb:ae:
f7:e7:58:27:4f:36:d1:12:a7:f8:5f:64:b0:88:8e:
92:06:9a:9d:b0:c3:31:2e:23:d7:a5:49:90:d6:69:
68:45:71:ac:f4:10:dc:72:e9:9d:30:47:90:09:86:
8f:02:8c:77:84:9e:1f:69:37:d4:6a:e7:26:8e:56:
ef:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:7A:36:A9:77:A5:92:CC:A5:8A:42:0D:51:42:42:5A:18:1C:7B:06
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ino2qXelksylikINUUJCWhgcewY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.154.0/24
88.151.56.0/23
88.209.224.0/23
88.209.232.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:bc:06:cd:1e:d7:75:cc:8b:98:d7:de:24:46:76:1f:8f:10:
1b:f2:c8:30:32:a8:00:db:eb:fd:ef:68:7f:43:71:30:80:6b:
d4:0b:b9:ab:3d:a5:83:68:e0:83:3a:6d:5b:3d:38:2f:11:ff:
ea:e7:91:be:60:a7:77:65:60:02:9c:86:17:ba:a9:ec:3b:3c:
83:63:9d:20:d4:96:75:51:99:96:df:b7:3a:76:ef:59:c8:ff:
2d:b3:1f:74:a8:46:da:8c:63:03:8d:1f:c1:46:c2:ef:86:a2:
c8:99:3a:ff:c1:24:fd:17:0a:76:e7:27:d8:eb:b7:b9:1c:d8:
b1:cd:bf:8e:d3:62:e3:28:31:d3:27:ac:d7:2f:0c:01:c1:b4:
36:90:3f:ce:b1:93:29:9e:0f:5f:55:5c:6b:a1:58:7a:46:17:
b3:9c:ec:5e:77:6c:ca:3e:ab:c2:64:7f:14:12:40:9f:44:d3:
f3:a0:88:b4:bb:31:49:b5:43:6e:98:f8:ea:0c:fb:79:99:0f:
6d:15:28:58:09:3b:3e:91:db:f1:da:cf:21:36:26:cf:6d:01:
22:85:e7:e5:e1:70:fb:71:fd:4e:ba:a9:d3:02:69:02:a4:0a:
f7:f2:38:7e:ab:f4:41:5b:e0:3a:4b:1a:58:16:9c:b9:70:07:
61:53:25:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:12:51 2025 by rpki-client