Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/rlNK_Q8k2eJC_qmSCeZxHZ_MfQE.roa
File: rlNK_Q8k2eJC_qmSCeZxHZ_MfQE.roa (raw, json)
Hash identifier: IZQQ/6oS+G6OcQEcpL/b2sbx8obxVdk1R2/eXjMJinM=
Subject key identifier: AE:53:4A:FD:0F:24:D9:E2:42:FE:A9:92:09:E6:71:1D:9F:CC:7D:01
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01966B8CC8AA138BB36B8F66A3220DA2EFF4
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/rlNK_Q8k2eJC_qmSCeZxHZ_MfQE.roa
Signing time: Fri 25 Apr 2025 06:05:10 +0000
ROA not before: Fri 25 Apr 2025 06:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 88.151.56.0/23 maxlen: 24
88.209.201.0/24 maxlen: 24
88.209.232.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6b:8c:c8:aa:13:8b:b3:6b:8f:66:a3:22:0d:a2:ef:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Apr 25 06:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae534afd0f24d9e242fea99209e6711d9fcc7d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:82:84:8a:cb:05:24:a6:20:06:1e:75:3b:b4:
02:76:b1:6a:3b:78:4c:50:ab:5f:58:de:39:81:0c:
62:34:e8:11:a2:3e:9c:c6:4b:49:91:10:86:6e:54:
01:0a:8e:bd:a5:e8:c6:a0:bb:a7:1f:17:10:4b:f8:
66:f9:01:9b:b2:39:78:bb:f9:d9:30:d5:f6:7e:cf:
8d:02:94:bb:b2:66:31:95:33:1b:38:36:e8:56:4d:
1f:4b:1b:34:0f:40:07:4e:30:3d:4f:67:10:54:40:
59:c3:e9:20:a4:81:21:81:88:e4:bf:38:4c:70:3e:
f2:78:c7:56:71:54:43:1d:79:16:38:ac:f8:18:f6:
9b:5b:67:f2:9f:61:3f:82:22:59:4e:65:c3:ce:17:
32:37:11:22:0c:eb:f8:50:8c:00:3b:80:ea:58:c7:
49:db:aa:e8:e0:db:3f:3f:60:87:6a:ce:9e:ee:9d:
2a:cd:12:42:31:ae:41:c0:02:ae:33:56:a9:b9:84:
69:28:c9:15:7c:c6:b9:f6:c8:c1:27:35:43:9b:b6:
99:2e:45:c3:1e:b3:36:62:ea:27:28:5f:d3:b5:f9:
42:81:af:46:42:45:bb:1a:35:e4:34:84:65:58:25:
ba:e1:1f:f5:a8:0b:26:2b:19:15:61:70:83:07:8f:
f6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:53:4A:FD:0F:24:D9:E2:42:FE:A9:92:09:E6:71:1D:9F:CC:7D:01
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/rlNK_Q8k2eJC_qmSCeZxHZ_MfQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.56.0/23
88.209.201.0/24
88.209.232.0/22
Signature Algorithm: sha256WithRSAEncryption
50:21:c6:f3:4e:ed:5f:fa:3c:2e:bd:d0:86:6d:40:b2:1c:05:
a3:e4:03:70:17:7e:a6:eb:94:ad:06:36:c1:91:68:f2:d5:24:
6c:ee:86:ad:24:f3:5e:8e:2e:b7:4e:7d:08:72:14:31:d3:77:
88:c7:25:6f:0d:5a:6d:9e:33:83:12:28:79:e5:62:17:b1:71:
c5:6f:d9:7e:11:54:12:53:33:5e:d6:35:ad:d8:1a:04:1e:31:
37:e7:86:e7:5c:8c:1c:84:fe:56:2b:9d:0a:d5:ac:53:d2:ac:
25:35:d0:40:02:e5:07:ec:22:43:ef:9c:0c:a6:ab:e3:9d:b7:
b4:bc:38:6a:cd:9b:fa:6a:33:7d:66:23:ed:06:57:bb:e0:ce:
2c:da:9a:1d:be:48:d1:f2:fd:92:80:12:eb:0b:37:dd:ae:2b:
29:6a:66:5e:59:69:3b:69:a0:3a:07:2d:d1:fd:73:17:28:8a:
49:15:3c:fb:35:07:47:1a:a4:59:08:70:4b:82:7c:3a:56:15:
90:f1:a5:e4:19:fa:b9:be:84:fe:12:f3:e3:b3:25:87:16:ed:
3a:6f:c9:eb:28:12:cc:ce:04:8c:03:29:a3:17:60:2c:1b:44:
e2:3d:5a:21:e0:b9:f5:c2:97:bd:49:3a:90:28:27:38:36:a0:
f4:be:85:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:18:30 2025 by rpki-client