Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/lWXks5FkDDaOwomCV5jUsqC39iE.roa
File: lWXks5FkDDaOwomCV5jUsqC39iE.roa (raw, json)
Hash identifier: 7c5aed/USPTVD7Jn2S3TNT1Y7kEI29T69H689FU1qmI=
Subject key identifier: 95:65:E4:B3:91:64:0C:36:8E:C2:89:82:57:98:D4:B2:A0:B7:F6:21
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01966682CEF789770FF5C79BCE022C98776B
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/lWXks5FkDDaOwomCV5jUsqC39iE.roa
Signing time: Thu 24 Apr 2025 06:36:10 +0000
ROA not before: Thu 24 Apr 2025 06:36:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212609
IP address blocks: 84.32.78.0/24 maxlen: 24
88.216.34.0/24 maxlen: 24
88.216.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:66:82:ce:f7:89:77:0f:f5:c7:9b:ce:02:2c:98:77:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Apr 24 06:36:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9565e4b391640c368ec289825798d4b2a0b7f621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0d:a5:86:f2:25:16:04:03:c8:11:6a:c9:06:
60:a3:7d:f2:09:f6:81:a7:8b:7c:5c:81:3e:61:80:
5d:93:c9:36:32:f3:eb:00:2c:fa:18:33:10:f8:22:
72:38:cf:9b:38:c2:49:e1:b5:8b:21:7d:12:62:d2:
1c:e3:48:b6:93:63:51:a0:f8:37:88:bc:e9:8d:d6:
58:49:e0:d2:55:a1:64:ce:c4:56:76:62:9b:cb:b9:
9e:17:50:17:19:b0:75:31:0a:ad:52:96:80:d0:ed:
19:03:dc:8f:c2:9b:c3:6a:83:c3:b1:13:f6:22:b1:
96:e0:04:ec:e1:32:35:2f:ad:4d:ba:99:d7:c0:4a:
9a:27:b9:14:49:14:ab:3a:4f:c0:dc:ee:5d:50:eb:
83:c7:4d:11:53:5a:2d:23:4d:51:56:89:c8:36:3f:
df:8e:bb:70:fb:f4:02:a5:50:94:1e:3a:07:11:08:
62:f4:9f:ef:c5:19:30:4b:85:b5:b7:0c:bc:d8:c2:
ff:67:e4:03:ba:4e:72:67:76:5c:94:70:6b:d9:a1:
c6:02:1a:8c:6d:17:ce:0c:e9:6d:8f:67:9a:82:4b:
30:eb:2f:ee:f5:62:0f:96:b6:3e:47:de:ea:54:94:
a6:bd:3d:6a:0e:d9:03:8f:33:78:7b:a5:0c:6a:54:
76:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:65:E4:B3:91:64:0C:36:8E:C2:89:82:57:98:D4:B2:A0:B7:F6:21
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/lWXks5FkDDaOwomCV5jUsqC39iE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.78.0/24
88.216.34.0/24
88.216.180.0/24
Signature Algorithm: sha256WithRSAEncryption
26:6c:f9:33:f9:0e:7b:70:87:1f:ac:58:51:71:d0:d8:b0:5e:
6d:08:09:32:43:f9:0d:a9:6e:fe:20:9b:20:00:f9:99:9c:c9:
b1:8c:b0:44:46:8d:b5:a8:56:3c:84:a6:0c:d5:97:8b:20:82:
a1:5c:79:b3:d3:dc:b2:2f:13:af:9b:a4:96:9a:23:35:0f:8e:
77:4b:4f:bf:ef:3f:5c:1c:6a:27:22:ce:60:04:d2:9c:01:f8:
84:c1:fd:5a:f6:06:8c:d7:f5:7c:c0:3a:6b:15:bc:6d:93:af:
7b:1f:3f:8c:6b:44:83:c9:5f:18:94:c1:cc:09:da:d1:46:7e:
fc:e5:a8:36:4f:10:b3:49:44:5f:c9:1a:3a:14:8e:d1:86:13:
e0:25:63:bc:0f:1f:48:a7:c6:8a:22:1d:5e:4a:c4:38:16:57:
93:2d:14:a0:fd:79:cb:26:ed:ef:20:e1:48:3b:e4:a9:76:62:
7c:f4:fa:a1:76:71:2a:e3:8a:a1:70:f9:1f:b3:3d:1c:d5:d9:
b6:9c:ec:a4:7f:3a:fc:75:9d:b9:82:6c:89:da:36:1d:90:9e:
c7:af:e3:aa:0c:f3:9a:b5:c3:1b:6b:8f:1f:0b:68:a9:7a:a9:
fe:17:d5:5e:fb:bc:c4:36:a4:15:94:63:c2:63:f5:47:3a:05:
30:fa:b9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:08:10 2025 by rpki-client