Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ml9vCja4mgcdfAYhpAav4-QETWg.roa
File: ml9vCja4mgcdfAYhpAav4-QETWg.roa (raw, json)
Hash identifier: SLf7cBw88J8YVYvHBLi3COobS3EgJxVzQ38+pYMKZa4=
Subject key identifier: 9A:5F:6F:0A:36:B8:9A:07:1D:7C:06:21:A4:06:AF:E3:E4:04:4D:68
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019422FB9935B3B3E7E3AAC8D438B9A5B47B
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ml9vCja4mgcdfAYhpAav4-QETWg.roa
Signing time: Wed 01 Jan 2025 17:48:21 +0000
ROA not before: Wed 01 Jan 2025 17:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58061
IP address blocks: 88.151.62.0/24 maxlen: 24
88.209.198.0/24 maxlen: 24
88.209.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:99:35:b3:b3:e7:e3:aa:c8:d4:38:b9:a5:b4:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 1 17:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a5f6f0a36b89a071d7c0621a406afe3e4044d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:65:44:46:5c:f4:56:4d:f8:43:78:b8:08:00:
fd:38:c6:26:c8:8d:08:9f:42:0e:2d:38:86:bb:df:
e7:2a:23:e0:c4:a0:9d:1c:1a:0d:0d:58:3c:98:5e:
9f:ac:ff:8f:dc:fd:eb:6c:22:a5:e3:05:3b:55:23:
92:25:d2:7f:b9:49:a9:d4:c4:3d:6b:0d:3a:f5:0b:
ee:c1:df:80:ee:b1:df:ee:51:1d:8e:98:49:12:d4:
71:eb:1c:71:7a:9b:47:ea:9f:73:d5:3a:83:7d:fc:
82:66:ee:13:cb:77:8d:46:d3:3e:2c:8a:57:61:c1:
75:ee:00:74:86:68:27:d6:ee:30:11:9b:35:24:f9:
96:b9:84:bf:56:e0:bd:95:d7:e7:18:5e:75:64:0d:
80:90:19:75:25:f0:cb:d7:cb:2d:c6:a4:97:93:b3:
a0:e5:49:49:32:b8:f9:c2:70:eb:8e:37:20:95:61:
de:b6:37:62:95:34:c7:3f:c2:fd:34:10:fe:21:90:
39:38:20:82:52:4b:98:54:35:6a:cb:f8:6d:82:8e:
eb:e3:69:52:bf:c1:15:8d:85:17:e4:1d:aa:ac:b8:
7b:6e:c7:bd:33:22:18:6c:42:f6:86:35:56:0e:96:
dd:ae:af:2f:bd:ed:a6:e0:28:0a:c9:99:0b:25:34:
2e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5F:6F:0A:36:B8:9A:07:1D:7C:06:21:A4:06:AF:E3:E4:04:4D:68
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ml9vCja4mgcdfAYhpAav4-QETWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.62.0/24
88.209.198.0/23
Signature Algorithm: sha256WithRSAEncryption
35:9f:8f:94:ec:50:53:a7:d4:d0:10:b9:1b:11:17:6d:11:f7:
b1:4a:8c:71:96:13:10:14:55:2e:0b:2f:2f:09:cb:3a:0d:82:
2c:98:23:f0:55:99:f3:d5:27:26:e9:73:f2:9c:22:97:b4:66:
b9:c2:eb:25:f4:f5:4e:de:f2:a4:3f:7f:74:36:53:87:19:02:
51:af:bf:07:ec:b5:9c:be:a4:02:b2:dd:96:4b:44:ee:0a:41:
81:67:6c:a4:10:ee:71:2a:12:cd:69:08:a0:63:0c:fb:e5:d0:
37:fa:9a:ce:28:83:a4:d9:c0:61:86:c9:4f:57:7b:61:07:41:
f6:55:6d:94:ab:51:fe:9c:2b:b2:86:ee:8e:f4:08:c0:ae:6f:
01:07:62:db:48:51:e6:93:eb:3a:2b:8f:6d:a5:33:77:c6:19:
be:16:52:a7:41:59:df:63:f1:32:b4:e8:20:1f:56:81:7a:87:
02:99:63:5e:69:b0:24:01:81:95:84:59:83:17:cf:69:6d:45:
57:4e:e0:d0:b0:cb:7c:ca:c1:f5:92:28:2d:7a:b0:09:be:5e:
07:2a:a5:33:cc:81:7d:83:39:9c:b5:b7:2b:ce:d4:77:10:bd:
36:55:2f:9b:fc:cf:b2:09:0b:06:56:06:9d:ac:3c:ba:c1:dd:
a2:ca:97:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 08:27:44 2025 by rpki-client