Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/tBT7AhJxolPXiJzucm9LCU5J5kU.roa
File: tBT7AhJxolPXiJzucm9LCU5J5kU.roa (raw, json)
Hash identifier: D2cQGAA5bQKmVKxq46YVwmET4+7g1UaAG+vOC8lSiKw=
Subject key identifier: B4:14:FB:02:12:71:A2:53:D7:88:9C:EE:72:6F:4B:09:4E:49:E6:45
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 01942445623A11733EF8A6DCED36F1DB304A
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/tBT7AhJxolPXiJzucm9LCU5J5kU.roa
Signing time: Wed 01 Jan 2025 23:48:34 +0000
ROA not before: Wed 01 Jan 2025 23:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202444
IP address blocks: 81.8.23.0/24 maxlen: 24
193.243.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:62:3a:11:73:3e:f8:a6:dc:ed:36:f1:db:30:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 23:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b414fb021271a253d7889cee726f4b094e49e645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ee:2d:ce:d5:a2:27:0c:62:b0:69:44:61:3d:
36:5a:db:f0:1b:55:45:90:bc:af:fc:7f:69:c5:16:
eb:e4:e6:99:36:68:7c:03:00:b4:1c:3a:0a:58:8c:
7c:89:bb:b8:99:13:79:e9:b8:64:73:f5:11:db:b5:
dd:80:d2:3d:dd:95:8d:2a:f7:f0:3f:5e:3c:93:16:
4d:8a:35:87:ee:79:2a:2c:1e:12:c1:43:01:45:23:
ec:be:60:16:b9:5d:94:82:fd:d2:a6:0c:f3:17:e5:
25:b3:96:bd:29:73:2b:b8:95:0e:7b:49:4c:5e:d6:
bc:75:7b:38:26:98:79:27:40:be:34:ce:f2:b3:93:
59:46:8d:d4:b2:ee:7f:e2:32:49:0c:ba:9c:22:c6:
4a:e7:b6:5e:57:bb:f8:43:26:54:78:d4:48:52:7c:
d4:0e:73:a4:c1:99:4c:52:0f:71:36:d7:49:ff:ae:
8e:91:20:75:6d:82:8f:71:5e:1b:41:1a:91:28:03:
48:ff:8e:ee:77:91:d5:e7:c5:10:aa:a1:89:04:30:
0b:09:66:ab:0e:de:08:00:ac:12:d8:6f:50:5e:7e:
f3:d1:e4:7e:df:1e:26:2d:a6:b0:e4:cf:20:cd:65:
d4:05:93:16:ba:9e:c6:f1:01:53:9c:6b:62:80:8b:
a0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:14:FB:02:12:71:A2:53:D7:88:9C:EE:72:6F:4B:09:4E:49:E6:45
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/tBT7AhJxolPXiJzucm9LCU5J5kU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.8.23.0/24
193.243.218.0/24
Signature Algorithm: sha256WithRSAEncryption
03:cb:8f:5d:6e:f2:fc:46:35:c8:fb:09:7f:96:10:d0:8d:0f:
cb:34:5a:63:4b:1a:50:d8:43:ce:f0:a2:c2:a4:dd:82:c4:d1:
ef:1d:6c:4f:79:23:28:7f:29:90:3f:1c:18:bb:cd:6a:40:db:
63:00:e9:8c:ff:56:2d:a1:6b:f1:d4:b5:b9:83:3f:65:0f:77:
4c:f3:84:d6:3c:d2:21:bd:66:5a:35:43:b7:af:c9:30:ff:d6:
12:d1:3f:76:f2:64:57:a5:3a:7c:02:b0:f0:3c:33:7f:21:3b:
a7:b3:30:ea:5b:54:bf:69:8e:13:0d:5f:b6:b6:87:73:2c:ea:
36:0b:6d:6a:c3:76:e6:c5:92:22:63:59:14:14:bd:02:d8:bb:
4f:b1:b7:81:87:5c:e9:ec:a9:ce:6c:7e:17:50:1a:77:01:2d:
d9:7b:ca:ec:5d:9e:58:35:de:f7:fb:5f:72:6d:52:78:dc:07:
90:db:56:45:18:83:4a:4d:da:c0:2e:9c:cc:23:9e:c8:21:31:
bf:6e:02:12:8b:d0:07:b2:48:b1:54:dc:9c:eb:b2:e3:05:3b:
c7:2d:2c:08:f1:62:18:9f:8c:c6:9d:17:56:24:53:e3:40:fb:
89:74:c5:4a:61:1f:cb:22:76:d8:fb:ad:f2:72:3d:bc:d0:e9:
db:e0:92:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 14:51:57 2025 by rpki-client