Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/TfrRwUaFRxR1FQrq_o-pK2cFrHM.roa
File: TfrRwUaFRxR1FQrq_o-pK2cFrHM.roa (raw, json)
Hash identifier: II597D7xa6PgwHa7AFUqvd8eYmaRnt2cxxVqhwKEKzU=
Subject key identifier: 4D:FA:D1:C1:46:85:47:14:75:15:0A:EA:FE:8F:A9:2B:67:05:AC:73
Certificate issuer: /CN=d32277ea304b2844a78689b3aa0d9219e3366773
Certificate serial: 019427B5A27A06F17B0AC531CA629929B877
Authority key identifier: D3:22:77:EA:30:4B:28:44:A7:86:89:B3:AA:0D:92:19:E3:36:67:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/TfrRwUaFRxR1FQrq_o-pK2cFrHM.roa
Signing time: Thu 02 Jan 2025 15:50:02 +0000
ROA not before: Thu 02 Jan 2025 15:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205103
IP address blocks: 185.230.68.0/22 maxlen: 24
2a0c:500::/30 maxlen: 31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 03:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:a2:7a:06:f1:7b:0a:c5:31:ca:62:99:29:b8:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d32277ea304b2844a78689b3aa0d9219e3366773
Validity
Not Before: Jan 2 15:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4dfad1c14685471475150aeafe8fa92b6705ac73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:61:af:f9:59:b5:a6:f5:ac:4d:6d:df:7a:7f:
bb:80:52:bf:5f:1d:e3:74:d6:fb:6e:6f:83:05:3e:
8e:57:17:ec:57:a8:3f:34:00:57:cd:20:4a:15:38:
eb:cf:14:3a:95:df:bf:23:24:13:01:9a:cb:21:e0:
48:cb:a5:32:30:9c:b1:ef:dc:5b:19:7f:18:e1:28:
56:09:cc:b8:aa:cb:ed:ee:3b:8d:0d:fa:0d:d3:3f:
c2:40:41:4a:aa:be:f9:f1:5a:45:1e:b9:2f:e7:8b:
56:d7:8a:0e:49:ee:6c:10:bf:ab:3c:03:9f:6c:59:
a8:22:1c:e6:ba:bc:f6:1c:69:9c:95:8c:93:bb:3e:
c2:7a:67:c1:e5:68:1a:01:57:42:a2:d9:ce:d0:1f:
0c:f6:0f:21:2c:7a:9c:12:d1:d4:1c:66:2f:c5:0a:
d6:6e:ca:c4:e8:07:61:a0:36:5e:3e:69:74:9a:fa:
e8:6b:1e:b7:d2:01:30:2e:a9:fa:24:e2:0b:97:ef:
92:d4:e0:60:53:b7:45:e4:01:c3:2a:57:70:76:81:
1e:57:20:9b:df:3c:c4:a6:fd:08:36:47:55:30:07:
aa:e2:ce:61:bf:06:ea:6d:80:7d:50:e2:24:80:8d:
67:8e:3b:f0:bd:b3:33:e5:af:34:07:0f:1d:2b:1a:
4f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:FA:D1:C1:46:85:47:14:75:15:0A:EA:FE:8F:A9:2B:67:05:AC:73
X509v3 Authority Key Identifier:
keyid:D3:22:77:EA:30:4B:28:44:A7:86:89:B3:AA:0D:92:19:E3:36:67:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/TfrRwUaFRxR1FQrq_o-pK2cFrHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.68.0/22
IPv6:
2a0c:500::/30
Signature Algorithm: sha256WithRSAEncryption
ad:1f:83:ac:ba:ec:60:90:88:0f:8c:50:ef:61:c3:cd:a3:c0:
21:1e:09:46:c8:b1:8e:0c:ea:f9:23:e9:a3:9c:0b:5c:41:81:
9f:16:11:7b:d2:24:dc:d4:b9:06:b2:a7:61:62:45:4b:34:66:
20:00:00:4a:b9:d6:08:07:5e:1e:03:26:3e:a3:8d:4d:b9:a8:
06:31:29:9d:8a:f8:ce:b0:ff:12:a3:07:36:af:30:9e:57:60:
a7:be:ed:1a:e5:b0:4a:88:72:f2:7c:55:29:d1:87:81:67:a4:
4e:87:4d:a5:90:47:da:0f:49:f2:bb:85:28:8c:7b:5a:1b:11:
25:3a:6f:7e:49:4e:1d:67:94:4f:be:aa:c3:c8:da:5f:b5:d9:
84:52:e4:bd:ad:73:76:b5:9a:b8:a6:98:47:18:58:5c:df:98:
77:e8:45:1c:49:2b:b2:70:36:23:c7:e4:01:9a:43:48:36:6b:
16:8b:3a:4b:5d:e5:2d:88:b8:f0:84:da:fe:81:fb:8e:c6:cc:
c7:a6:06:69:68:7e:6a:63:46:93:18:a4:1c:2d:c4:32:1e:a4:
a5:a6:fd:0f:8d:36:f7:d5:e0:ec:16:c2:a0:d3:e4:29:fe:23:
b2:6d:c6:1e:4b:33:53:94:12:bd:ab:ae:7d:f9:61:1e:68:7c:
48:0d:6e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:20:03 2025 by rpki-client