Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/TaMd7DA-6NrsYwAIJaSvClB4fpo.roa
File: TaMd7DA-6NrsYwAIJaSvClB4fpo.roa (raw, json)
Hash identifier: dkRPf4s5CoCdHNuMtPMADul0c0mdFRvVK8/5OUkpYlI=
Subject key identifier: 4D:A3:1D:EC:30:3E:E8:DA:EC:63:00:08:25:A4:AF:0A:50:78:7E:9A
Certificate issuer: /CN=229fb0fb3d278e1b280a777de200efbd08baac30
Certificate serial: 0194266B26FD0D447E062066399C67A20F99
Authority key identifier: 22:9F:B0:FB:3D:27:8E:1B:28:0A:77:7D:E2:00:EF:BD:08:BA:AC:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/TaMd7DA-6NrsYwAIJaSvClB4fpo.roa
Signing time: Thu 02 Jan 2025 09:49:04 +0000
ROA not before: Thu 02 Jan 2025 09:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 719
IP address blocks: 185.171.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:26:fd:0d:44:7e:06:20:66:39:9c:67:a2:0f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=229fb0fb3d278e1b280a777de200efbd08baac30
Validity
Not Before: Jan 2 09:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4da31dec303ee8daec63000825a4af0a50787e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1d:d5:8a:c9:89:70:26:26:78:44:f7:a1:2f:
4d:e6:f6:00:a2:29:5c:91:87:8e:33:f8:e5:b8:d7:
57:e6:ee:46:61:bd:dc:50:cc:06:4b:09:70:ec:e7:
b2:e9:8b:83:f9:0f:89:e8:14:98:9e:0e:07:5f:b6:
e7:bf:a7:a0:1a:e4:7f:d2:a7:48:92:87:74:94:d7:
81:ab:e9:ac:e5:f6:89:46:2a:b7:28:3a:dd:29:1a:
bf:f4:d1:ed:1a:4e:06:67:af:5e:68:f2:5a:ce:9f:
21:5e:fa:48:18:29:0a:e1:f8:a3:f3:5c:a5:da:fd:
93:cc:76:8b:ce:18:59:68:df:d4:be:0c:4a:f7:0d:
2e:cf:30:43:71:1e:76:88:ca:69:15:c6:f3:ca:95:
bd:c6:73:01:04:6b:6d:80:64:d1:25:2f:6b:89:e6:
05:45:96:08:07:4b:f9:88:dd:6d:fa:b6:c4:29:03:
35:cc:88:61:29:00:9f:56:99:94:e4:bb:5c:7a:a9:
52:58:98:0f:16:e9:ad:eb:4e:73:4b:7d:8a:a8:e2:
32:45:8a:25:b2:1d:ad:29:82:1a:6f:1d:3d:dc:d4:
0c:2c:c0:cd:4a:37:7f:8a:3c:52:a8:2c:8b:02:32:
8e:ab:b8:80:82:15:b2:4a:38:ea:97:54:59:b3:a7:
67:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A3:1D:EC:30:3E:E8:DA:EC:63:00:08:25:A4:AF:0A:50:78:7E:9A
X509v3 Authority Key Identifier:
keyid:22:9F:B0:FB:3D:27:8E:1B:28:0A:77:7D:E2:00:EF:BD:08:BA:AC:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/TaMd7DA-6NrsYwAIJaSvClB4fpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.179.0/24
Signature Algorithm: sha256WithRSAEncryption
55:42:e7:53:2a:10:ac:a3:38:33:0f:12:4d:7d:40:cf:f1:35:
44:76:8c:43:99:9b:09:e3:b6:46:6a:00:cc:0d:13:bd:3a:f5:
1e:dc:46:6a:14:97:e2:3f:bf:b2:60:bb:d0:17:32:1b:50:0d:
72:1a:12:23:05:d9:a3:0b:29:96:49:c4:38:30:e2:aa:0f:82:
16:37:34:38:4e:7a:41:4c:51:0f:ea:43:d4:94:54:c7:70:5a:
ea:d5:8d:4e:51:92:f7:19:2e:55:27:a0:ef:18:65:34:02:b2:
0a:e3:68:6d:5e:97:1d:ae:d8:91:83:91:d5:1f:a1:4a:c7:13:
6c:cb:98:1d:67:fe:18:cf:eb:a6:34:14:ff:0e:55:fa:78:74:
cb:5d:21:07:ca:5a:2d:3f:97:da:e3:31:94:4c:b2:19:9d:36:
11:a5:11:ea:ad:91:80:8e:01:77:55:5d:e3:88:68:11:72:90:
f5:93:54:d0:c9:99:31:98:25:26:f2:c2:ac:92:4e:9a:6d:ee:
15:b3:b4:82:67:ed:bc:ea:c5:fc:18:83:6d:e9:90:73:90:83:
6f:84:51:da:c0:d9:98:6d:ac:b6:e7:e3:02:0b:48:ac:37:79:
0d:0f:8a:a4:a1:24:73:ac:c0:4a:21:04:11:6b:2f:61:90:85:
dc:2e:90:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:01:28 2025 by rpki-client