Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/TqPc2jRE7QtyFSDZIoz1O4MgPJA.roa
File: TqPc2jRE7QtyFSDZIoz1O4MgPJA.roa (raw, json)
Hash identifier: KvsyNCbnY5XKFg+R6Z3kjYr4HcA8cSuPfGasIaZKjys=
Subject key identifier: 4E:A3:DC:DA:34:44:ED:0B:72:15:20:D9:22:8C:F5:3B:83:20:3C:90
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 019422FBC92B0AB96428728BE718CFB8C3AB
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/TqPc2jRE7QtyFSDZIoz1O4MgPJA.roa
Signing time: Wed 01 Jan 2025 17:48:33 +0000
ROA not before: Wed 01 Jan 2025 17:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 267784
IP address blocks: 193.57.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:c9:2b:0a:b9:64:28:72:8b:e7:18:cf:b8:c3:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 1 17:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ea3dcda3444ed0b721520d9228cf53b83203c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:53:21:46:24:6b:65:ee:1a:f8:a8:f5:fa:d0:
e1:4a:7b:a1:7d:5f:53:90:67:31:26:24:01:26:89:
b4:ae:8c:89:14:95:1c:c5:01:b5:a3:cf:c6:1d:6b:
4a:75:cd:19:5e:fe:b1:68:3f:9f:cf:f6:28:b3:38:
af:a8:d1:b3:e4:c8:b7:52:23:18:cc:7d:58:75:d8:
83:40:1a:b0:b1:df:d4:22:c1:35:57:e4:71:f1:e1:
e5:3f:9f:ac:6b:6e:2c:50:40:68:11:56:dc:7e:eb:
65:5e:ff:e8:a1:d1:71:ee:ca:76:0f:f2:e6:eb:32:
31:ca:f9:a6:d5:d0:96:f7:58:0f:dd:8b:95:e3:ff:
73:5b:b1:9f:54:29:dd:6d:d3:fc:76:94:74:39:89:
41:3b:47:1f:91:f4:70:46:41:d9:41:58:b2:25:a0:
9e:fa:46:a7:be:d9:b9:c1:d7:14:b7:e6:a1:52:3f:
1b:d7:28:07:d8:5e:2a:e8:4f:5e:c6:70:ef:2a:6a:
b6:60:c8:d7:a8:dc:b2:bb:ac:86:5d:c4:ea:b1:6c:
49:cb:08:d1:2c:62:fe:85:80:78:10:bb:2d:81:9e:
20:4a:5b:7b:92:fc:18:d0:2e:74:66:33:7b:a4:dc:
9c:b0:e0:c4:fe:43:42:a9:f3:40:e6:c7:f6:a3:d4:
eb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A3:DC:DA:34:44:ED:0B:72:15:20:D9:22:8C:F5:3B:83:20:3C:90
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/TqPc2jRE7QtyFSDZIoz1O4MgPJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.40.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:49:ac:e3:78:0f:f4:15:e5:3e:28:dd:df:c9:77:0e:0e:35:
bd:9d:02:33:c5:83:ba:ae:c0:42:3d:ce:35:4c:8c:15:9a:a2:
9a:eb:7d:aa:90:96:cd:ea:de:fa:84:bc:47:b6:0b:76:32:f7:
21:90:0c:3b:a8:29:cf:b5:b0:59:9a:f2:73:f6:2a:27:9a:00:
82:e1:82:a9:28:6f:88:ba:b3:69:16:05:5a:be:84:b7:51:31:
ac:f9:94:f7:3b:eb:88:e0:9c:a3:f6:b1:63:23:d7:d1:1c:de:
08:45:91:18:a9:93:79:52:24:9d:48:0b:b2:c0:c7:50:61:b1:
2d:77:4e:38:a2:d2:7d:ee:93:f5:af:74:fe:69:15:d3:ea:f8:
fe:a0:f8:c8:40:18:99:a2:6e:6b:0e:19:3e:5c:97:64:86:0d:
99:87:bf:c3:4c:4a:9c:ec:f4:3a:4f:d5:7f:4f:28:25:80:0f:
65:0e:9a:5c:74:ca:49:ed:9f:e6:71:ab:93:45:60:38:e2:05:
8b:65:58:a4:53:ec:03:8e:cb:be:73:2f:a4:83:06:28:65:11:
82:a8:2f:12:8d:1d:e7:9b:41:88:f9:75:0d:e6:13:65:4a:d7:
71:ec:a9:d9:94:1e:05:37:c2:c4:8c:07:19:45:7b:ec:79:20:
27:2e:63:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:27:00 2025 by rpki-client