Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/qDo3TPWSAflGinbz6cHuC3nUpKc.roa
File: qDo3TPWSAflGinbz6cHuC3nUpKc.roa (raw, json)
Hash identifier: namWwO7xfyJQeGBYRk+OVSKMxdRhMqt19Fo5eex/BNE=
Subject key identifier: A8:3A:37:4C:F5:92:01:F9:46:8A:76:F3:E9:C1:EE:0B:79:D4:A4:A7
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01963ED41E8C429BE1EA4186D30B22CF77DC
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/qDo3TPWSAflGinbz6cHuC3nUpKc.roa
Signing time: Wed 16 Apr 2025 13:40:10 +0000
ROA not before: Wed 16 Apr 2025 13:40:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 88.151.56.0/24 maxlen: 24
88.209.244.0/24 maxlen: 24
88.209.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:d4:1e:8c:42:9b:e1:ea:41:86:d3:0b:22:cf:77:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Apr 16 13:40:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a83a374cf59201f9468a76f3e9c1ee0b79d4a4a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8e:1a:bd:25:62:e1:15:28:20:b5:4e:d1:67:
b1:e5:43:7f:c6:c4:9a:ba:a1:25:30:d6:f9:d7:5f:
af:46:f7:19:7e:aa:fe:d1:d3:9b:72:69:63:91:96:
5e:1c:b6:28:26:33:4c:bc:1a:0b:76:cd:66:1c:c6:
85:b0:51:c0:46:83:b3:e3:57:72:5a:fd:f2:46:03:
86:0d:d9:31:f9:0f:d0:59:20:2d:58:40:ec:f8:7b:
c4:26:b7:da:51:a3:0c:f2:ad:19:49:18:9b:ea:6d:
7d:32:3a:3b:10:6c:1f:70:99:a4:7c:7c:6c:25:3e:
a8:64:b4:dc:37:44:28:da:8e:41:86:77:8a:3d:7c:
39:72:43:30:1c:cc:44:4a:ee:8b:c2:b0:a3:d1:ca:
4b:fe:7f:27:a7:16:ed:0e:46:b5:73:e6:0a:78:59:
19:a3:72:ff:ba:02:f7:8e:67:5d:3b:d0:d5:77:9b:
8c:25:8d:be:a1:4d:8c:01:a8:6c:6a:2e:89:47:ef:
3b:f2:6d:bb:7d:ac:74:25:dd:7e:49:2e:d4:c1:15:
7f:72:c4:16:bd:a1:4c:5f:73:36:02:b5:0c:28:b6:
51:24:82:8f:fb:84:2f:96:1e:01:1b:52:c7:88:09:
80:32:f1:ad:47:67:04:af:f3:b9:c1:3a:38:0f:3c:
79:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:3A:37:4C:F5:92:01:F9:46:8A:76:F3:E9:C1:EE:0B:79:D4:A4:A7
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/qDo3TPWSAflGinbz6cHuC3nUpKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.56.0/24
88.209.244.0/24
88.209.246.0/24
Signature Algorithm: sha256WithRSAEncryption
61:5a:84:7d:ca:9e:c4:b6:93:12:2f:6e:a7:80:c1:95:e1:a0:
2b:57:ab:86:63:79:4d:74:df:a4:f3:8a:bd:b1:07:cd:0e:d2:
d5:e6:05:fd:da:49:b9:e7:92:7e:d3:51:7a:a8:fa:b1:34:f8:
e8:d0:ba:b8:f4:f9:9d:53:20:4d:4c:89:fc:95:eb:b6:fa:fe:
c8:69:56:88:01:85:52:4f:5c:20:42:b4:77:cc:44:1c:97:c5:
be:3e:d5:99:ab:66:4f:f7:ee:1d:69:0f:eb:64:ea:be:77:e2:
5e:23:29:e3:12:90:bc:96:f2:62:12:bd:b5:d2:db:49:13:cb:
1c:2e:93:2c:d8:b2:f2:9b:4a:b7:4d:22:9d:c9:d0:39:05:e7:
b3:d9:07:18:96:16:29:ae:b2:8d:32:b8:16:a4:3a:67:bc:8f:
3d:c1:9b:35:0d:ec:37:ab:a4:f6:33:f7:71:e3:83:31:ed:25:
3a:a0:aa:f3:5c:3e:01:f0:24:45:12:30:91:65:f2:54:63:d5:
ac:dd:ec:79:b5:b5:d6:ec:b5:9d:b1:02:a6:c5:73:d2:b1:01:
3b:23:d2:a5:ec:91:d1:f4:d0:98:b5:81:df:a4:06:ec:de:a7:
9d:b2:3c:a6:44:06:d0:ab:65:25:31:0d:cd:1b:66:62:45:8d:
f5:ed:b2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:50 2025 by rpki-client