Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/l06Jo4wcn9UZNl3jwjiavlx-v4M.roa
File: l06Jo4wcn9UZNl3jwjiavlx-v4M.roa (raw, json)
Hash identifier: +evzu72ciOeStTyT4XPgCsvTMWGGffJYcUeps8zXWZk=
Subject key identifier: 97:4E:89:A3:8C:1C:9F:D5:19:36:5D:E3:C2:38:9A:BE:5C:7E:BF:83
Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial: 019668D6D0523A58380C317AEF88FBC5AED5
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/l06Jo4wcn9UZNl3jwjiavlx-v4M.roa
Signing time: Thu 24 Apr 2025 17:27:10 +0000
ROA not before: Thu 24 Apr 2025 17:27:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210558
IP address blocks: 45.88.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:68:d6:d0:52:3a:58:38:0c:31:7a:ef:88:fb:c5:ae:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Validity
Not Before: Apr 24 17:27:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=974e89a38c1c9fd519365de3c2389abe5c7ebf83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:99:97:33:ef:50:4c:03:32:8d:ed:46:79:f9:
10:74:35:d2:2a:16:af:ca:52:f8:f4:f3:8d:84:f1:
f4:33:98:86:6b:55:3b:de:e0:69:0e:f8:b5:da:4b:
16:94:fd:ad:bd:79:dd:23:0d:92:e9:02:96:38:af:
85:06:f7:3f:63:5a:82:a5:e2:71:ff:34:be:1e:b8:
b1:2e:c4:d5:b3:25:14:0d:31:b5:8d:55:4f:81:de:
8d:d9:36:9b:dd:a8:bb:23:99:ab:1a:61:1c:4c:93:
1c:e2:8e:71:64:16:5f:8b:de:9f:13:f1:31:49:de:
a8:b8:ae:0a:1a:7d:93:11:83:e9:d4:a0:87:d5:24:
cd:77:34:b1:1c:98:e4:03:ee:e4:ed:9d:c2:32:ad:
e4:c3:9e:f1:7b:8f:58:4c:58:af:54:47:fd:5e:92:
8d:ec:ea:ab:b4:ca:93:64:74:b3:37:2b:02:21:1b:
2c:22:3a:4f:c5:ef:e0:c2:e1:3a:ed:90:7e:46:9c:
6f:53:8d:e0:52:63:f9:cb:aa:ca:0c:dc:71:87:2b:
3d:69:be:7c:58:68:c8:5f:f5:82:a6:3a:19:49:d6:
60:f7:a1:66:5e:4f:50:bf:17:b9:6a:1e:8d:2e:c0:
5f:9b:9f:78:63:4a:c4:26:a6:d5:9a:cf:a7:1a:0d:
82:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:4E:89:A3:8C:1C:9F:D5:19:36:5D:E3:C2:38:9A:BE:5C:7E:BF:83
X509v3 Authority Key Identifier:
keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/l06Jo4wcn9UZNl3jwjiavlx-v4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.186.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:21:ae:6a:8d:f4:d1:19:92:0e:06:6d:6b:7c:97:e4:8c:39:
30:ea:dc:c6:27:96:97:0f:fc:c3:66:20:4a:28:8d:fc:d0:ce:
9c:6b:3a:19:43:21:2f:b0:d6:1c:9f:6e:02:5b:80:5b:b7:10:
3c:1a:3e:c9:61:88:77:61:20:29:82:f3:2d:e6:1c:88:24:19:
5c:f6:61:0b:7f:61:ac:6c:58:55:4c:71:f1:1b:78:2d:2c:43:
86:6b:30:9c:b2:5a:7f:92:7f:b3:86:b1:0f:a5:32:fd:99:19:
cb:4d:73:1d:6b:2e:5e:a6:a4:6a:32:16:65:2d:b3:18:59:4e:
e1:ee:65:1a:b9:65:a5:82:c4:35:f2:8e:07:f0:a3:a0:21:4a:
e6:75:fd:7e:01:01:45:f9:34:4e:70:7e:62:d2:8e:1f:86:06:
f6:16:25:fa:35:99:4b:8b:49:c5:d8:cb:0f:38:03:49:d3:fb:
cd:24:b6:f5:86:77:71:ff:53:08:1a:d1:5b:71:08:5b:68:ef:
84:47:53:ef:96:33:29:fa:56:2d:d5:dd:59:67:ba:2c:b9:62:
3f:39:d0:af:8d:97:a2:80:6c:41:0c:43:ee:75:07:22:ca:c9:
9c:03:6f:89:18:b1:97:23:9d:20:e8:9e:87:d5:84:08:0b:5e:
4f:d7:2d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 05:17:35 2025 by rpki-client