Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/tLilW5BDEJTEzIEDh8KmIyaiPZU.roa
File: tLilW5BDEJTEzIEDh8KmIyaiPZU.roa (raw, json)
Hash identifier: vFC4JGd2bQPNjS7TqFQa5G/kgv43UH1kGodWdHda2yA=
Subject key identifier: B4:B8:A5:5B:90:43:10:94:C4:CC:81:03:87:C2:A6:23:26:A2:3D:95
Certificate issuer: /CN=9bdba95290a985a697763d30ab42f9c3784078b2
Certificate serial: 019427B5866A52D203B677E493B1432AD46D
Authority key identifier: 9B:DB:A9:52:90:A9:85:A6:97:76:3D:30:AB:42:F9:C3:78:40:78:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/tLilW5BDEJTEzIEDh8KmIyaiPZU.roa
Signing time: Thu 02 Jan 2025 15:49:55 +0000
ROA not before: Thu 02 Jan 2025 15:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203485
IP address blocks: 185.133.92.0/22 maxlen: 24
2a05:40::/29 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:86:6a:52:d2:03:b6:77:e4:93:b1:43:2a:d4:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bdba95290a985a697763d30ab42f9c3784078b2
Validity
Not Before: Jan 2 15:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4b8a55b90431094c4cc810387c2a62326a23d95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:62:5b:cb:17:f5:c6:af:c6:b1:05:9e:15:1e:
45:11:28:18:92:25:f4:e5:e0:7f:23:d3:26:9a:06:
bd:e9:dc:a9:e1:23:33:0f:fd:75:8e:6a:78:58:24:
87:b4:e7:fe:82:2e:c3:9e:55:f0:da:47:80:d7:92:
cc:cf:5c:01:7c:7e:55:c3:51:23:73:f1:ed:c9:dc:
87:20:8c:14:d1:26:6c:95:5e:2a:5b:59:5a:11:03:
6e:16:ac:7b:31:51:2a:3f:96:29:7a:71:8b:a6:2f:
ec:01:d9:f6:ab:bd:24:e9:e4:d9:47:85:00:19:62:
57:e4:c7:a2:13:78:30:18:f7:94:3c:6b:20:59:cc:
bd:7b:e1:33:b6:0f:35:5c:ad:af:0b:24:48:09:91:
b8:a9:dc:e6:22:2c:b7:77:52:9e:6a:ba:b9:38:94:
0e:60:a5:d2:ce:b9:93:c0:5b:fa:84:e2:9a:50:a5:
27:b8:76:cf:48:81:0b:da:05:52:91:d4:ed:83:a9:
a4:f5:bc:54:7f:97:78:32:eb:bd:11:23:ed:14:dd:
60:08:2c:dc:3b:93:e1:99:9f:89:e3:48:25:c5:f2:
03:db:04:40:b0:ef:0e:0c:15:f0:0d:b2:06:dd:2e:
72:ff:b9:b1:6a:76:13:c4:a0:a5:ca:c0:11:bf:04:
aa:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B8:A5:5B:90:43:10:94:C4:CC:81:03:87:C2:A6:23:26:A2:3D:95
X509v3 Authority Key Identifier:
keyid:9B:DB:A9:52:90:A9:85:A6:97:76:3D:30:AB:42:F9:C3:78:40:78:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/tLilW5BDEJTEzIEDh8KmIyaiPZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.92.0/22
IPv6:
2a05:40::/29
Signature Algorithm: sha256WithRSAEncryption
b2:20:5d:81:97:5c:73:fd:1d:a6:84:0c:0e:d4:f9:8a:6a:dd:
76:e6:82:3a:76:b2:42:b0:81:f2:68:c0:6b:ee:29:a8:02:23:
bc:29:da:cb:17:85:38:8c:04:1a:93:79:a2:72:2f:10:b9:08:
d3:11:09:d4:e5:3c:cb:ca:8d:d7:bb:6e:79:3a:ee:ff:17:43:
8c:1e:ed:e1:89:7b:3a:54:4f:d5:c7:a2:0e:af:ad:a5:3e:72:
d7:7b:e0:dd:00:f7:18:66:83:45:41:80:91:a4:09:ac:79:0a:
1a:b7:ce:1f:d6:62:8c:6b:df:4e:2c:8e:e4:04:56:af:45:b0:
b5:52:9f:05:b7:90:49:d6:c2:86:7a:e3:12:56:90:f3:60:d6:
da:cf:d1:a7:60:a3:63:46:b7:7a:76:d9:9d:a9:ae:c9:05:39:
04:61:ac:4d:00:a2:4a:bf:a3:d7:c4:4e:11:d7:8c:16:71:54:
93:18:00:85:61:26:ad:41:bf:aa:67:cf:49:6a:0e:47:33:b8:
dc:bf:88:8b:11:84:e5:a8:7a:62:b7:8a:43:c3:01:d7:69:8a:
2b:f9:84:b4:43:35:5e:ec:01:7f:b5:4d:b2:a7:aa:42:23:02:
af:c8:e6:22:21:ae:a4:3a:0b:52:71:c7:fb:3d:85:35:f7:19:
1a:df:c6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:28:55 2025 by rpki-client