Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/OfFCEKE7y2G6xu45x0onbMCbDaw.roa
File: OfFCEKE7y2G6xu45x0onbMCbDaw.roa (raw, json)
Hash identifier: e/8sENTA8NJv+5P6ivLRFth819D0j4syG1Q5lKqx3Rw=
Subject key identifier: 39:F1:42:10:A1:3B:CB:61:BA:C6:EE:39:C7:4A:27:6C:C0:9B:0D:AC
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 0197019952CF9921FBB004C1FC4FB9B86B3E
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/OfFCEKE7y2G6xu45x0onbMCbDaw.roa
Signing time: Sat 24 May 2025 09:21:54 +0000
ROA not before: Sat 24 May 2025 09:21:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47553
IP address blocks: 93.88.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:01:99:52:cf:99:21:fb:b0:04:c1:fc:4f:b9:b8:6b:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: May 24 09:21:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39f14210a13bcb61bac6ee39c74a276cc09b0dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:64:a5:ce:a2:64:0e:9c:63:63:a3:2c:32:bc:
09:68:da:54:31:33:95:3e:23:e1:ec:37:e4:5b:fc:
24:8e:f5:a0:e1:83:c7:d8:45:59:c6:f5:cd:7b:9f:
e5:fb:33:a6:71:1b:d3:0a:34:2c:e1:c8:6c:17:4f:
a1:aa:be:78:6c:55:3c:c9:ac:62:b9:bf:0d:17:3e:
cb:e7:70:6a:e4:e6:b3:69:5a:e8:3b:11:f9:c4:e6:
8f:13:e1:c8:2c:f6:92:36:74:14:aa:15:ba:0e:0c:
cf:4c:05:6d:16:ed:d1:eb:16:c6:4c:2c:ac:ff:b6:
0a:ba:5a:10:8d:5d:c8:ca:8b:f2:96:95:d2:c6:3f:
d4:92:f9:5e:26:db:86:d6:f2:2a:46:df:31:36:34:
f1:45:2e:c3:96:06:c0:f7:ae:f4:eb:2e:48:5f:1a:
b2:0b:b1:2f:3b:69:88:d2:c7:8e:be:26:14:7f:7d:
63:df:7e:72:3f:0f:cd:c9:35:35:c5:f0:32:b8:42:
8b:d8:0f:f2:d9:b2:d1:5d:8a:c2:1d:f6:2e:f0:bc:
af:96:e3:db:9e:fc:0d:ab:ad:dc:1b:93:d5:26:fe:
cd:70:e5:c8:7e:09:14:70:b1:b5:ae:a0:1d:c0:18:
70:17:88:78:48:ca:a5:88:f2:d4:48:2d:a1:c9:4c:
5a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F1:42:10:A1:3B:CB:61:BA:C6:EE:39:C7:4A:27:6C:C0:9B:0D:AC
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/OfFCEKE7y2G6xu45x0onbMCbDaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.88.158.0/24
Signature Algorithm: sha256WithRSAEncryption
04:06:01:83:74:6b:d8:6a:89:ab:32:2b:51:43:32:38:d5:84:
ec:1c:89:3a:0f:18:49:c8:9f:e5:06:d7:25:a8:4e:36:4d:51:
50:ab:be:7b:24:d8:79:c6:4b:33:21:5d:f4:fd:60:31:7b:fc:
d4:b2:ac:e7:89:85:a2:1e:99:24:fb:d4:5b:66:fd:ac:74:03:
f4:eb:3a:dc:79:46:d4:b4:59:7a:6f:a3:f5:28:51:18:33:1f:
e9:42:ed:f4:3b:30:37:f0:5f:af:fa:d8:b8:c1:b2:78:3e:55:
5a:18:7e:2d:b9:e3:1b:92:b0:e1:17:f1:fe:af:5d:2a:c4:36:
01:59:89:1d:38:5b:a0:08:57:91:de:fb:fd:1b:9f:ea:6d:f1:
82:27:d5:cf:14:70:2f:2b:48:d3:bf:e0:92:ab:10:df:16:01:
2d:f5:76:42:d5:7b:23:a9:b0:33:1e:3f:38:2a:5e:75:02:80:
cf:f7:b3:2a:1e:be:ee:99:c3:34:16:e2:9c:06:99:88:01:54:
af:a9:18:08:fa:3a:bd:06:09:1d:9b:a1:7d:19:a5:c9:95:d6:
e5:5e:42:36:ce:ee:58:a4:1a:2f:2a:80:65:7b:43:ef:5a:42:
b8:97:0f:b0:28:2c:df:34:b0:2f:70:67:12:09:8d:5d:4a:19:
d5:9d:b4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:55:37 2025 by rpki-client