Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/IYBRXn79Js2ifgceqABCuVVdSPA.roa
File: IYBRXn79Js2ifgceqABCuVVdSPA.roa (raw, json)
Hash identifier: vjNtj1dR1wGpas58jjDkfO8I1dX2j5XknqfwVASJV8k=
Subject key identifier: 21:80:51:5E:7E:FD:26:CD:A2:7E:07:1E:A8:00:42:B9:55:5D:48:F0
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01963AC23DD945E8431AC95A3448D810A299
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/IYBRXn79Js2ifgceqABCuVVdSPA.roa
Signing time: Tue 15 Apr 2025 18:42:10 +0000
ROA not before: Tue 15 Apr 2025 18:42:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9232
IP address blocks: 88.216.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3a:c2:3d:d9:45:e8:43:1a:c9:5a:34:48:d8:10:a2:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Apr 15 18:42:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2180515e7efd26cda27e071ea80042b9555d48f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ea:53:57:92:83:fd:4a:36:01:78:cf:32:d7:
5f:7b:20:5f:32:c0:8a:b0:b5:dd:37:34:ca:2e:b0:
98:b6:63:02:69:20:eb:c5:7b:0b:a6:76:17:d5:0d:
87:84:ef:96:7e:5d:47:41:10:32:a8:8d:40:4e:04:
ba:75:2f:17:bd:9c:a1:10:e6:10:ca:1c:29:40:79:
8e:f3:c3:56:90:c0:c9:5e:a9:43:f7:0a:16:c8:40:
4c:dd:a4:f7:23:e7:1d:56:5e:c9:03:20:09:87:e7:
73:74:67:70:9f:68:c5:a1:9a:01:e2:bd:d4:5a:91:
63:51:15:36:53:b4:db:f9:cf:4a:8e:de:40:32:30:
7a:da:fc:37:4c:b9:90:9f:df:2d:df:b8:8d:91:ab:
c9:0b:23:81:22:81:a3:6a:30:ee:e5:f1:66:bc:8d:
c0:60:49:83:77:46:72:18:3a:4c:db:8b:bb:92:9e:
ef:88:00:48:7f:8e:cb:7c:b3:78:9b:b7:91:dd:7f:
66:48:dd:a1:13:93:f3:15:1f:bb:70:a2:3d:55:c6:
9b:6b:84:33:8e:2f:ed:fb:6f:2e:b6:bb:c9:9d:86:
be:f0:b7:13:71:bf:c6:f5:6d:29:b9:d3:06:b8:6e:
93:83:7e:cd:83:97:b9:fe:c2:c9:c2:a1:11:3a:77:
dc:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:80:51:5E:7E:FD:26:CD:A2:7E:07:1E:A8:00:42:B9:55:5D:48:F0
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/IYBRXn79Js2ifgceqABCuVVdSPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.70.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:3a:c4:83:e1:7d:2e:df:e5:ae:01:49:18:84:60:47:72:b4:
c4:04:a6:2f:61:26:bd:20:48:f5:af:65:96:09:a2:44:db:cc:
49:67:f7:8f:2d:c0:5b:c1:82:e3:1b:3a:2c:9e:db:ee:f0:a8:
5a:39:64:b4:e8:be:bb:c4:31:25:f3:0f:bf:2e:9c:24:62:ee:
79:d8:a3:f6:10:2b:16:11:5c:95:cb:9f:a1:90:19:6a:3f:3f:
b0:ed:af:03:0c:d7:79:55:fc:0c:e4:9a:85:7d:ee:b4:3c:69:
19:5d:d7:8f:c1:f2:aa:5f:47:65:0a:b3:fa:a2:89:d3:ed:98:
dc:0d:70:df:7d:5c:1c:22:dc:f1:3b:b4:5c:3a:5e:ac:5e:6e:
b5:d3:57:4d:49:10:93:92:f8:a2:e5:8e:4c:be:85:72:60:8a:
91:27:53:8c:44:67:74:ab:1f:d0:ce:f9:28:20:49:e3:62:5a:
b6:24:8c:03:f2:03:da:7e:10:60:e9:9b:10:61:e7:0e:fe:bb:
5c:cb:80:dc:b2:d7:66:78:91:58:39:2b:c0:2e:30:32:b0:0b:
c7:e1:ac:61:61:58:26:70:04:e6:8d:04:2a:4d:19:0f:05:32:
39:b6:2a:cc:ff:b6:9c:06:aa:0a:4e:2f:76:57:ce:53:ef:f5:
01:3e:95:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 13:48:45 2025 by rpki-client