Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/kifcFFzy1eYRKwuYpCo92QJ6IGI.roa
File: kifcFFzy1eYRKwuYpCo92QJ6IGI.roa (raw, json)
Hash identifier: IVllLP+KI3brk5ugDmZEnk+PKEwtZLmV6BUz6KuCqPg=
Subject key identifier: 92:27:DC:14:5C:F2:D5:E6:11:2B:0B:98:A4:2A:3D:D9:02:7A:20:62
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0196237FFC49E5EB0F50C83D4B6FF9A77C49
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/kifcFFzy1eYRKwuYpCo92QJ6IGI.roa
Signing time: Fri 11 Apr 2025 06:18:32 +0000
ROA not before: Fri 11 Apr 2025 06:18:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400909
IP address blocks: 88.216.182.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:23:7f:fc:49:e5:eb:0f:50:c8:3d:4b:6f:f9:a7:7c:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Apr 11 06:18:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9227dc145cf2d5e6112b0b98a42a3dd9027a2062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:39:38:a2:52:f2:99:91:7e:b2:51:a3:18:ad:
4a:7b:36:cd:65:2b:a5:8b:39:b2:47:0d:1e:a2:a2:
23:85:dd:20:32:9e:08:42:ab:ea:4e:2e:39:2a:3b:
39:88:ac:c8:aa:87:61:11:7d:3d:fd:84:04:48:43:
be:7f:f7:f8:d2:b8:e4:29:2b:ac:c8:c2:c1:05:23:
53:ff:48:22:d0:3d:6c:3d:d0:99:39:90:72:c6:ae:
97:05:0f:a2:dc:9a:a0:83:27:2b:50:fe:1a:fe:36:
91:98:b7:bb:4e:8b:ae:08:93:d1:4d:82:ac:40:12:
a1:34:d1:5a:c8:26:d6:e0:4d:a1:0e:e2:e1:60:10:
9f:6b:06:76:8a:02:50:ca:d0:11:7a:24:a7:bc:e0:
6e:e0:37:d2:f7:9b:02:f8:b1:ae:3e:46:ce:9e:20:
ec:a7:24:7d:71:e7:20:ac:16:71:80:29:57:c0:ca:
89:ce:ad:f7:03:8a:4e:89:fd:25:ad:25:ea:71:82:
dc:fb:ca:a8:bf:f4:b8:8c:34:42:75:7e:40:34:20:
5b:46:4e:30:f3:b6:9c:7b:7a:c8:d3:4f:50:17:4c:
c3:66:67:78:c9:16:9e:3a:5e:5e:c4:c7:80:b5:2f:
a5:b9:8c:cf:40:f1:49:44:4b:73:09:43:83:7c:6d:
40:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:27:DC:14:5C:F2:D5:E6:11:2B:0B:98:A4:2A:3D:D9:02:7A:20:62
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/kifcFFzy1eYRKwuYpCo92QJ6IGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.182.0/23
Signature Algorithm: sha256WithRSAEncryption
22:3d:dd:51:6e:f2:8f:7d:38:b5:c7:85:2b:8e:30:9e:6e:2a:
c2:f9:6f:70:9a:3c:ee:bb:54:a9:74:16:32:76:76:10:18:27:
ee:59:36:ae:10:e6:8c:01:54:c1:12:0c:b7:dd:5e:39:06:af:
fb:d8:ff:31:7b:2e:d4:0a:1e:89:14:9c:2f:d5:b8:b1:f4:6a:
a2:9d:77:aa:b9:e3:f5:74:57:7d:ac:37:46:eb:32:88:16:9d:
3a:15:0e:65:67:9c:15:3b:c2:ca:6a:ff:bf:ea:cf:79:ec:d8:
54:c4:03:e0:1c:da:f7:cb:c7:d1:96:0c:fd:38:b3:bb:d2:7c:
2b:27:02:6e:e5:34:67:de:0e:a7:0e:ca:09:d2:1a:fd:2c:20:
c7:4e:c6:ac:f7:a3:6f:a6:90:ad:d8:27:74:58:e7:bf:eb:79:
0e:e8:18:f2:86:98:5b:61:1e:1b:70:f6:0c:7c:f5:fb:05:6c:
1e:2f:a2:c0:e8:b5:17:73:59:de:a5:7b:a8:5f:9d:5a:14:e6:
60:f4:30:79:bd:37:48:ff:f6:9f:ed:67:1a:fc:d7:df:e7:a6:
e1:49:a7:75:b3:17:55:3a:b9:30:ac:d7:98:13:24:16:65:d5:
ac:e4:31:92:b0:7e:17:ea:46:f4:af:de:56:56:58:c2:be:6a:
9c:6e:17:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:42:18 2025 by rpki-client