Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/Dtmeeo2Ahqu20IUfCd65FxwTl2k.roa
File: Dtmeeo2Ahqu20IUfCd65FxwTl2k.roa (raw, json)
Hash identifier: I+vjjlJcdrLb3KMRUhvwUitmKXx1JxbgC5EfsL3L6hI=
Subject key identifier: 0E:D9:9E:7A:8D:80:86:AB:B6:D0:85:1F:09:DE:B9:17:1C:13:97:69
Certificate issuer: /CN=77347e168d69658545374e6a0b68d24b97fcd006
Certificate serial: 01968B507E84682A96C2495EC426A2B54D2A
Authority key identifier: 77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/Dtmeeo2Ahqu20IUfCd65FxwTl2k.roa
Signing time: Thu 01 May 2025 10:07:10 +0000
ROA not before: Thu 01 May 2025 10:07:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60908
IP address blocks: 88.84.48.0/20 maxlen: 24
88.84.48.0/21 maxlen: 21
88.84.56.0/21 maxlen: 21
185.9.90.0/23 maxlen: 24
185.9.90.0/24 maxlen: 24
185.9.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 16:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:50:7e:84:68:2a:96:c2:49:5e:c4:26:a2:b5:4d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77347e168d69658545374e6a0b68d24b97fcd006
Validity
Not Before: May 1 10:07:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ed99e7a8d8086abb6d0851f09deb9171c139769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ae:a3:16:9a:97:70:42:1f:c5:33:f7:56:0d:
fe:c4:f2:f8:94:e9:41:f8:9f:c9:cd:3e:f6:82:38:
96:88:12:1f:7e:9b:bc:da:a2:ed:dc:d7:44:9b:ad:
a7:34:fb:cb:7e:48:60:70:c0:67:f0:b1:12:e3:3a:
52:c1:b5:53:d8:77:58:59:94:6d:b3:77:d5:c2:4c:
be:1f:54:b7:a6:4f:93:ce:4b:74:7f:54:69:ac:bd:
3f:33:4d:ff:6c:89:56:22:85:ec:7f:66:79:7f:66:
36:83:ce:3d:96:f9:c5:00:68:15:4c:90:09:07:32:
65:eb:48:b5:42:e9:70:ee:25:5e:a8:83:e9:cd:91:
40:63:6b:83:fb:3a:06:5d:a1:1e:96:82:0c:aa:67:
05:5a:10:a5:da:2d:ad:8a:c0:cf:33:37:72:82:b0:
3a:68:e0:4f:6d:c6:9f:d2:1a:13:d0:cd:e9:e3:33:
46:a9:05:e8:82:57:91:20:5a:bd:76:ad:ce:f7:24:
d0:95:9f:89:f5:30:38:4f:9a:0a:1e:c1:6a:1e:22:
79:07:19:32:3f:04:6a:10:d4:7f:9d:36:97:9f:c5:
06:f5:8e:5f:fa:a6:a0:86:fd:e2:07:a8:52:09:6f:
dc:fd:d5:c7:65:eb:ca:bb:91:d7:22:ff:d1:ee:af:
1f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D9:9E:7A:8D:80:86:AB:B6:D0:85:1F:09:DE:B9:17:1C:13:97:69
X509v3 Authority Key Identifier:
keyid:77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/Dtmeeo2Ahqu20IUfCd65FxwTl2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.84.48.0/20
185.9.90.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:b8:30:37:91:c6:bb:1a:78:69:c5:f6:d6:a8:06:02:3a:36:
08:07:79:ab:30:ab:ac:91:ca:3a:5a:a0:c5:17:95:c1:9d:e5:
e0:a2:21:6c:ca:d0:21:ce:98:89:fc:83:ee:25:67:69:64:3e:
09:f5:31:80:03:79:b5:0c:33:0c:78:a5:57:f5:11:ef:09:68:
61:99:05:89:0c:6f:ea:54:9a:b2:ac:f0:31:38:f3:47:be:55:
eb:a6:d2:01:ed:f1:3e:32:e8:4d:b6:b3:dc:09:28:61:8b:4a:
27:96:f8:2c:72:3d:21:87:0b:7d:d9:4c:e0:e9:d8:96:f3:3f:
d4:3c:43:bb:21:dc:5a:8e:53:43:17:7c:78:86:63:72:f9:e7:
37:2a:d9:bc:c0:39:63:57:7f:20:52:36:b4:b3:87:dc:be:10:
6c:3b:85:10:b2:ab:e0:71:76:25:bf:8d:f9:93:31:86:ec:6f:
df:63:32:19:d0:71:1f:1d:02:23:5a:72:67:a5:e4:a4:45:2b:
f4:8c:c4:53:9d:84:5a:01:2c:44:3b:a5:fa:64:44:ea:7d:38:
6c:a5:d1:20:30:4d:14:91:80:55:ea:99:c9:27:3a:f1:d2:8a:
4c:2a:31:af:a9:d2:9d:53:cc:bd:44:e6:b2:5c:f5:97:d7:6b:
2b:9c:f0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 02:45:55 2025 by rpki-client