Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/6lxIW7DOsuapgRe4TkqSuAXjoOs.roa
File: 6lxIW7DOsuapgRe4TkqSuAXjoOs.roa (raw, json)
Hash identifier: AJ9PIBCPlG0gbaqeqnRofWtKoSg8Ai8VYC5DZAVADvU=
Subject key identifier: EA:5C:48:5B:B0:CE:B2:E6:A9:81:17:B8:4E:4A:92:B8:05:E3:A0:EB
Certificate issuer: /CN=92933e013644db9c9ee9b91df72e1338db8e2097
Certificate serial: 0196690A147BCFEEF63C38B91F975ACC95DD
Authority key identifier: 92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/6lxIW7DOsuapgRe4TkqSuAXjoOs.roa
Signing time: Thu 24 Apr 2025 18:23:10 +0000
ROA not before: Thu 24 Apr 2025 18:23:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210319
IP address blocks: 88.135.76.0/24 maxlen: 24
88.135.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:69:0a:14:7b:cf:ee:f6:3c:38:b9:1f:97:5a:cc:95:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92933e013644db9c9ee9b91df72e1338db8e2097
Validity
Not Before: Apr 24 18:23:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea5c485bb0ceb2e6a98117b84e4a92b805e3a0eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ae:50:77:ba:8f:cc:92:5f:22:3f:e0:59:c7:
53:ff:b0:80:31:17:65:64:24:4b:29:aa:76:c7:f8:
1d:b4:a4:d2:f0:e4:f3:07:4e:3f:d3:13:59:1e:c7:
fd:0f:95:5e:df:ce:10:3c:6c:66:6f:d8:e8:e1:75:
16:a4:4d:2b:7b:13:34:e9:71:89:e7:a7:d3:92:38:
78:52:43:4f:64:39:a9:cf:af:cd:13:48:4e:c7:b6:
80:e8:da:5b:11:a3:59:c3:dc:37:af:05:14:9d:8a:
0d:c7:fb:43:44:c2:34:0e:6f:93:12:fc:4a:1d:98:
b2:ba:de:80:3b:99:34:ed:cd:83:a8:21:a6:d2:14:
d8:b0:42:19:1a:d0:99:52:32:cb:35:67:19:cf:13:
23:79:55:ff:e1:a1:fd:86:66:de:e8:a0:2a:99:20:
fd:6a:d0:f1:17:84:d2:31:04:18:77:0b:9e:e3:c6:
eb:19:bd:fa:62:ff:b0:7c:47:75:a3:21:6d:1e:90:
53:39:15:24:a8:47:58:a3:bf:51:25:e4:03:a8:32:
ed:12:bd:af:11:5c:14:1d:50:ed:f6:e7:2f:5a:5f:
2d:3b:ad:5a:b9:ec:f4:bf:63:07:5f:9e:07:ea:86:
84:ad:bc:0d:fa:d6:97:6b:28:5a:92:36:5b:fc:cd:
80:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:5C:48:5B:B0:CE:B2:E6:A9:81:17:B8:4E:4A:92:B8:05:E3:A0:EB
X509v3 Authority Key Identifier:
keyid:92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/6lxIW7DOsuapgRe4TkqSuAXjoOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.76.0/23
Signature Algorithm: sha256WithRSAEncryption
78:c9:60:51:19:01:d4:55:5c:31:47:bf:1f:da:38:3d:74:d1:
40:87:eb:23:18:49:48:19:62:32:e2:da:81:43:1c:5f:6e:30:
3d:8a:c4:05:27:16:c9:cb:ac:4e:10:74:32:c9:0c:4b:d6:39:
20:ca:08:41:27:bb:de:62:72:61:d5:50:44:ad:82:81:34:a0:
8f:a9:4d:b8:12:47:65:89:19:cd:a6:77:3e:dd:d7:eb:37:a5:
d2:07:89:4e:43:53:77:e5:ff:58:6b:a0:ec:96:f2:77:1b:0c:
de:e1:8b:39:63:44:f5:1a:b8:83:61:df:c1:83:93:60:89:9f:
ad:b0:82:5b:c0:2e:9a:0d:66:79:c6:0d:9b:01:68:f0:10:80:
74:71:5b:6b:b2:f1:18:bb:c6:91:80:a5:29:b8:2d:6c:bb:f2:
4d:2b:c4:98:d6:61:41:02:d6:b5:31:a1:d4:a6:32:d3:96:1f:
ae:f9:87:3e:06:ea:b8:4c:93:c2:20:8e:78:62:7c:cb:05:61:
5f:cc:58:87:5e:2b:1d:5c:91:b3:a5:98:00:d7:e6:8f:78:b3:
9a:ed:02:c0:4b:e5:9e:52:7a:a9:35:ab:71:16:ae:ce:84:16:
f6:00:50:e7:58:15:55:8c:7c:ba:b1:27:90:47:6d:62:20:0c:
ca:9c:91:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:01:46 2025 by rpki-client