Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/doEo4Ht0sa1vtVeAkjpvUpCnHHs.roa
File: doEo4Ht0sa1vtVeAkjpvUpCnHHs.roa (raw, json)
Hash identifier: +MKv/V0IfbD2z8rIVhSAM4id+TCFCy9eVNZqs6dovHs=
Subject key identifier: 76:81:28:E0:7B:74:B1:AD:6F:B5:57:80:92:3A:6F:52:90:A7:1C:7B
Certificate issuer: /CN=617252ebbb33484adcec7405adea4de08a0afb04
Certificate serial: 01942144258861A16AB64FF261CF4665471B
Authority key identifier: 61:72:52:EB:BB:33:48:4A:DC:EC:74:05:AD:EA:4D:E0:8A:0A:FB:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXJS67szSErc7HQFrepN4IoK-wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/doEo4Ht0sa1vtVeAkjpvUpCnHHs.roa
Signing time: Wed 01 Jan 2025 09:48:21 +0000
ROA not before: Wed 01 Jan 2025 09:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41608
IP address blocks: 88.151.32.0/22 maxlen: 24
185.213.172.0/23 maxlen: 23
185.213.172.0/24 maxlen: 24
185.213.174.0/24 maxlen: 24
185.213.175.0/24 maxlen: 24
195.170.165.0/24 maxlen: 24
195.170.172.0/24 maxlen: 24
2a0b:8bc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXJS67szSErc7HQFrepN4IoK-wQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:25:88:61:a1:6a:b6:4f:f2:61:cf:46:65:47:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617252ebbb33484adcec7405adea4de08a0afb04
Validity
Not Before: Jan 1 09:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=768128e07b74b1ad6fb55780923a6f5290a71c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9e:88:4e:fa:24:c7:3e:55:e0:61:fa:07:35:
43:33:b5:c3:d7:9f:7b:b5:b5:a4:41:d0:9b:b8:8a:
e1:dc:b9:10:c5:d1:39:67:7f:64:5f:6f:34:93:9c:
3d:8f:ff:35:ff:7b:ac:26:30:a3:da:4b:6a:35:3e:
20:c6:ec:40:77:2e:ba:1c:a9:f9:cd:42:4c:67:a4:
61:3b:ab:4b:f2:ca:69:5c:4b:60:40:6f:3a:58:2c:
af:e5:66:ff:46:f9:67:2b:83:26:f3:5c:15:27:56:
65:9a:cf:c9:5f:be:f6:91:ea:b1:67:1d:e2:11:9e:
ef:52:be:6d:61:75:b8:2e:6b:d6:f0:b1:40:c5:fe:
47:aa:25:f1:96:da:c0:96:55:ce:9b:0a:b3:2c:ba:
c5:e6:fa:f2:56:2b:4e:5e:5b:7f:c6:e3:7f:16:c3:
2c:42:f0:e6:8d:c5:94:39:1a:9a:d5:d7:5d:3b:c9:
46:7c:26:aa:d9:64:a5:c6:e0:8e:65:c2:cd:87:94:
b7:b0:44:db:33:5b:cc:f9:e9:79:32:7b:de:ff:e8:
24:4c:27:a4:df:a0:6b:b1:1c:6f:e0:b2:45:80:d7:
bb:f8:7c:e2:b7:7a:67:79:31:39:49:35:05:36:25:
eb:c5:25:bd:96:df:57:c1:1a:80:44:51:fe:cf:15:
51:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:81:28:E0:7B:74:B1:AD:6F:B5:57:80:92:3A:6F:52:90:A7:1C:7B
X509v3 Authority Key Identifier:
keyid:61:72:52:EB:BB:33:48:4A:DC:EC:74:05:AD:EA:4D:E0:8A:0A:FB:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXJS67szSErc7HQFrepN4IoK-wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/doEo4Ht0sa1vtVeAkjpvUpCnHHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.32.0/22
185.213.172.0/22
195.170.165.0/24
195.170.172.0/24
IPv6:
2a0b:8bc0::/29
Signature Algorithm: sha256WithRSAEncryption
8d:a6:57:cd:c3:b8:93:4a:d8:12:c0:1e:8d:f9:b5:0b:9a:e3:
ec:d4:f7:b6:6c:8c:41:76:6b:6e:44:32:d1:7b:9e:45:43:24:
ea:57:9a:4d:86:57:3a:91:18:8c:9e:a3:9b:2e:84:78:9f:68:
e0:63:47:7e:fa:d1:3f:21:eb:ed:36:b3:35:66:5b:14:25:75:
a1:6c:59:aa:63:5a:b3:dd:b2:e7:a5:6f:a4:3f:ae:e9:c1:51:
e1:6b:fb:0d:9c:15:01:19:e6:61:bb:36:42:eb:49:2b:99:8c:
9d:8c:9d:76:37:2a:7b:12:ab:70:4d:9c:4e:fd:00:bf:7c:b1:
c0:59:44:32:5c:db:69:51:46:81:ad:0e:e2:9e:f0:5c:49:20:
c5:ec:4d:9a:93:78:4c:ef:c8:0d:e8:14:8e:39:d1:13:2a:fd:
a4:56:8a:3f:a8:c2:94:c2:bf:fd:7b:23:3e:f6:ee:e4:dd:7a:
b0:21:24:88:30:b7:b4:a7:63:2a:87:08:79:ae:ff:0a:bb:0f:
28:39:c6:fa:d7:8e:f0:31:e0:e9:82:64:6d:e0:ae:09:64:77:
db:7f:e1:48:b9:23:c4:e6:91:d5:fb:70:48:f5:c6:9a:26:d1:
e4:81:73:5f:16:95:f7:9b:1b:39:62:80:a1:3f:aa:32:f5:52:
be:2f:3a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:23:52 2025 by rpki-client