Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/ZqMG8mpe5nSXKW1FrNNGNQPtlac.roa
File: ZqMG8mpe5nSXKW1FrNNGNQPtlac.roa (raw, json)
Hash identifier: KO75sPS4/XP/JBEid5X4pt0EZyoaOZvo180Eq+iiPnQ=
Subject key identifier: 66:A3:06:F2:6A:5E:E6:74:97:29:6D:45:AC:D3:46:35:03:ED:95:A7
Certificate issuer: /CN=8686ae8e49374bac84caa3de0d26070b6b190054
Certificate serial: 019425FDA8A48FFCD9F91EA04524A039E2FF
Authority key identifier: 86:86:AE:8E:49:37:4B:AC:84:CA:A3:DE:0D:26:07:0B:6B:19:00:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/ZqMG8mpe5nSXKW1FrNNGNQPtlac.roa
Signing time: Thu 02 Jan 2025 07:49:28 +0000
ROA not before: Thu 02 Jan 2025 07:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200023
IP address blocks: 88.218.4.0/22 maxlen: 22
88.218.6.0/24 maxlen: 24
94.177.105.0/24 maxlen: 24
176.103.219.0/24 maxlen: 24
185.39.44.0/22 maxlen: 22
2a04:7c00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:a8:a4:8f:fc:d9:f9:1e:a0:45:24:a0:39:e2:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8686ae8e49374bac84caa3de0d26070b6b190054
Validity
Not Before: Jan 2 07:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66a306f26a5ee67497296d45acd3463503ed95a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b3:47:c5:5e:42:9a:b6:21:9b:d4:b6:5a:66:
a6:eb:06:96:f9:de:56:39:81:e6:3d:6b:91:3b:2c:
69:49:57:08:f2:d5:30:bd:39:f7:37:0f:e8:85:65:
9b:60:1b:ae:d7:c0:9b:7f:4e:38:ee:0b:3d:0b:11:
da:f5:2a:db:58:3e:6c:ac:66:ac:9a:f6:68:b7:dd:
6a:05:7c:d3:15:3d:68:e8:8f:57:87:28:7d:f3:be:
a5:eb:ab:fd:98:25:8a:29:34:da:fd:3a:e8:6f:94:
9a:62:56:5f:e0:a8:18:e9:57:60:50:2d:22:0a:c3:
73:1e:55:f5:5b:57:35:72:10:1d:28:68:54:42:c2:
3b:1a:46:8d:68:01:e4:eb:90:a1:51:c4:19:7c:2f:
0f:4c:6d:33:3d:ff:9f:1e:0d:87:a6:c3:13:34:c7:
6c:d2:8d:11:79:9b:92:c5:63:b3:4e:fe:dd:f5:c1:
e7:33:ea:96:f0:85:41:75:cd:ca:84:75:89:ea:54:
e3:be:50:ca:82:de:93:19:7b:f7:0d:03:87:60:e3:
bf:b7:ac:44:d0:81:a5:0c:d0:5a:24:f7:e2:e1:4f:
f2:87:75:f3:d8:62:44:11:5b:c0:ac:25:82:6b:61:
bd:ce:e8:8c:db:4d:14:55:6e:f6:7f:a5:24:74:7a:
b8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A3:06:F2:6A:5E:E6:74:97:29:6D:45:AC:D3:46:35:03:ED:95:A7
X509v3 Authority Key Identifier:
keyid:86:86:AE:8E:49:37:4B:AC:84:CA:A3:DE:0D:26:07:0B:6B:19:00:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/ZqMG8mpe5nSXKW1FrNNGNQPtlac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.4.0/22
94.177.105.0/24
176.103.219.0/24
185.39.44.0/22
IPv6:
2a04:7c00::/29
Signature Algorithm: sha256WithRSAEncryption
62:17:4b:81:f4:a1:15:26:d2:22:cf:51:17:1e:21:d2:7a:7c:
a0:71:7c:23:47:9f:5e:fa:58:e3:43:c9:23:10:8c:11:38:06:
61:8c:5c:de:dc:eb:89:fd:75:19:da:53:9f:c2:4d:04:77:cb:
8d:ac:ea:45:aa:96:c3:5d:35:e4:f5:45:99:98:ec:56:d3:42:
00:34:0d:08:ef:9b:32:30:16:87:c8:25:80:60:38:4d:a2:a3:
13:e3:f0:2d:f5:6e:99:52:8b:80:7b:6d:e2:46:45:02:ce:bf:
3a:a9:14:a6:a2:34:77:e0:3c:90:70:44:90:2a:f2:10:41:10:
b5:eb:4e:b5:ef:c5:dc:fa:37:3a:66:c7:1f:25:5d:8a:d6:57:
d0:ad:e0:4e:af:c0:7d:d8:6d:8d:b4:3e:24:b1:08:4f:f4:d6:
df:df:17:4a:2a:42:3c:48:e3:46:f9:76:ff:5e:4d:d6:0a:98:
94:17:9f:e4:61:c4:a3:2b:0a:f4:e4:44:d9:c7:c7:e6:67:2e:
4a:b4:cd:4e:c8:05:d8:66:58:c1:92:a6:d1:42:c2:37:2d:2b:
9f:7e:72:70:c3:2e:29:e4:76:29:c3:f6:00:d0:9b:b9:31:57:
d2:04:fb:1c:ad:1e:cb:8b:f6:13:92:c1:6f:a9:f3:7b:35:47:
8a:1c:63:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:09:05 2025 by rpki-client