Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/iLGOuIa5LTWfHaRQktifnLEleds.roa
File: iLGOuIa5LTWfHaRQktifnLEleds.roa (raw, json)
Hash identifier: WFLzKfY4scg2dasqIPFQJzTEVJn2EiF44u+x9rnQ8UI=
Subject key identifier: 88:B1:8E:B8:86:B9:2D:35:9F:1D:A4:50:92:D8:9F:9C:B1:25:79:DB
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0196B018024AE7C68C32CD91FA5C978ABDA7
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/iLGOuIa5LTWfHaRQktifnLEleds.roa
Signing time: Thu 08 May 2025 13:31:25 +0000
ROA not before: Thu 08 May 2025 13:31:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209693
IP address blocks: 45.88.88.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
87.121.86.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
176.125.254.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
194.48.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:18:02:4a:e7:c6:8c:32:cd:91:fa:5c:97:8a:bd:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 8 13:31:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=88b18eb886b92d359f1da45092d89f9cb12579db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a1:cd:cc:14:5c:7b:c0:c5:57:30:c7:bd:12:
38:3a:83:9e:19:4c:8d:ab:a0:f4:2e:84:30:06:b1:
2f:a4:94:cf:97:7c:a2:3f:29:7c:ed:f8:d1:31:b1:
ca:60:e6:43:2c:c0:e5:2f:7f:cc:3b:eb:75:a3:cf:
64:40:89:d5:43:38:39:5f:99:9f:70:3d:85:28:46:
4e:bc:7d:e5:89:de:2d:00:c8:e4:c8:5f:bd:85:99:
de:11:94:98:f4:bb:ea:c4:91:51:63:9f:56:d9:f1:
4d:77:b0:17:eb:e6:12:45:b2:a5:47:16:63:b6:fe:
21:3d:4a:3e:8b:e9:09:84:c6:fe:94:5a:0c:bf:04:
fb:42:08:88:18:8b:c2:9e:0f:5b:b8:79:ec:1d:95:
9d:0a:31:f9:83:6c:93:40:36:15:8c:2e:ee:57:4c:
5d:1e:53:56:8d:c5:76:a9:95:75:c6:dd:28:f4:79:
0e:ac:53:f0:fd:50:c8:60:2b:80:e3:81:9b:e3:da:
f9:28:33:e5:80:3a:c7:83:b9:8a:b0:a9:2c:5b:b5:
9e:e9:3f:cb:4d:db:14:73:86:d1:3e:9d:68:2c:41:
43:5b:ef:fa:8a:1b:76:cd:4c:cd:d9:37:45:16:52:
e7:1a:6e:9f:66:c1:3b:c3:75:51:bf:e2:7e:ed:e5:
62:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B1:8E:B8:86:B9:2D:35:9F:1D:A4:50:92:D8:9F:9C:B1:25:79:DB
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/iLGOuIa5LTWfHaRQktifnLEleds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.88.0/24
83.219.97.0/24
87.121.86.0/24
87.121.221.0/24
176.125.254.0/24
185.252.177.0/24
194.48.250.0/24
Signature Algorithm: sha256WithRSAEncryption
92:ef:30:7d:cf:70:c2:6c:95:83:17:b1:0d:23:ee:9f:10:64:
ea:b7:88:05:73:6b:a8:0d:8f:53:74:0d:fe:77:fd:f3:5e:cb:
93:56:d6:11:7a:09:64:42:3a:f7:de:26:9a:74:19:42:b8:8d:
e5:83:06:00:64:a4:62:df:fe:58:03:71:fc:bd:76:7d:68:2e:
95:d2:7a:08:35:85:a1:8a:07:f7:59:03:99:e7:41:cd:ce:8d:
0d:c3:77:8f:13:fe:af:e2:55:aa:d2:43:9c:a4:c3:74:f5:25:
64:8b:19:e2:5a:63:f5:3b:6b:ff:09:73:6c:90:16:ef:11:3d:
8c:cf:ed:d2:4b:9e:77:59:3b:dc:e6:5e:22:fe:62:be:ec:93:
63:82:ab:89:dd:c6:2e:19:0e:6a:d1:bc:c3:f9:33:cb:26:4d:
7b:f8:1a:10:41:ae:ab:47:87:ba:57:71:80:57:6c:8a:3c:9c:
23:2f:1b:42:7d:43:d2:b8:fd:75:46:62:b8:63:75:ac:0b:60:
97:76:0a:1d:34:42:ee:c0:18:63:b2:a6:07:51:b2:0f:4c:1e:
30:3b:7b:13:c0:89:53:86:40:be:ca:38:6d:88:84:10:b6:0a:
b0:c3:1e:e2:26:a4:88:ae:44:e8:c2:e8:ae:8f:30:6e:30:c7:
fe:8b:1b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:25:36 2025 by rpki-client