Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/TfTonluQfmH78OzaVxkJLWOPrQc.roa
File: TfTonluQfmH78OzaVxkJLWOPrQc.roa (raw, json)
Hash identifier: o/+GwvpVj7XMHL42Lw0eZWO0sJVLD6s9aZvEqCfH3Ic=
Subject key identifier: 4D:F4:E8:9E:5B:90:7E:61:FB:F0:EC:DA:57:19:09:2D:63:8F:AD:07
Certificate issuer: /CN=a333114cbfc6bf668371c5687ee98a442fd8ea36
Certificate serial: 0194221F9BFCD76695229A43C0099D449456
Authority key identifier: A3:33:11:4C:BF:C6:BF:66:83:71:C5:68:7E:E9:8A:44:2F:D8:EA:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ozMRTL_Gv2aDccVofumKRC_Y6jY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/TfTonluQfmH78OzaVxkJLWOPrQc.roa
Signing time: Wed 01 Jan 2025 13:48:04 +0000
ROA not before: Wed 01 Jan 2025 13:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35228
IP address blocks: 87.194.0.0/16 maxlen: 24
87.194.100.0/23 maxlen: 24
87.194.102.0/23 maxlen: 24
87.194.116.0/24 maxlen: 24
87.194.117.0/24 maxlen: 24
87.194.118.0/24 maxlen: 24
87.194.202.0/24 maxlen: 24
87.194.216.0/23 maxlen: 24
93.97.0.0/16 maxlen: 24
93.97.0.0/22 maxlen: 24
93.97.8.0/22 maxlen: 24
93.97.12.0/22 maxlen: 24
93.97.44.0/22 maxlen: 24
93.97.48.0/22 maxlen: 24
93.97.60.0/22 maxlen: 24
93.97.176.0/22 maxlen: 24
93.97.180.0/22 maxlen: 24
93.97.212.0/22 maxlen: 24
93.97.216.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ozMRTL_Gv2aDccVofumKRC_Y6jY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:9b:fc:d7:66:95:22:9a:43:c0:09:9d:44:94:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a333114cbfc6bf668371c5687ee98a442fd8ea36
Validity
Not Before: Jan 1 13:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4df4e89e5b907e61fbf0ecda5719092d638fad07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:12:0d:dd:b1:17:a8:95:75:d5:78:b4:05:76:
8e:a9:13:b6:70:e4:69:04:51:56:18:cc:74:b5:36:
6c:d9:ff:2a:23:cc:8c:c9:e8:4b:8f:10:01:e6:e6:
bd:d5:8e:7c:71:22:ee:fe:75:76:3b:e2:4b:ee:63:
0d:ac:7a:8b:3a:b8:3c:70:0d:d6:c1:c3:c2:2c:a3:
17:f3:33:78:27:61:a1:a3:1e:32:92:e6:77:47:5e:
5f:24:2f:c2:62:27:e2:72:81:fe:fe:49:61:36:99:
9f:68:90:48:56:21:c5:3e:5b:43:a4:23:41:d7:66:
4f:33:bb:18:55:53:44:2f:44:fd:aa:f2:b3:73:8c:
eb:34:6c:a3:81:6c:f7:f1:06:8e:8d:bb:ce:b3:cb:
c5:eb:a6:ea:77:de:fa:42:54:40:17:e4:8e:ba:30:
48:b5:60:fe:57:fe:d0:19:ff:b4:d9:a7:dc:c2:44:
d6:da:c2:23:7d:19:ed:79:34:9b:4d:dc:fc:b1:5b:
97:d4:ce:ae:44:80:74:c2:77:26:bd:ee:0a:ed:1f:
09:cd:14:f2:bc:7d:5b:b8:07:33:e3:fb:68:21:b4:
b3:fb:ec:48:56:6d:68:7f:05:22:47:42:cc:c1:26:
46:04:a0:e2:a7:29:37:9c:2a:60:4d:91:7b:95:62:
60:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F4:E8:9E:5B:90:7E:61:FB:F0:EC:DA:57:19:09:2D:63:8F:AD:07
X509v3 Authority Key Identifier:
keyid:A3:33:11:4C:BF:C6:BF:66:83:71:C5:68:7E:E9:8A:44:2F:D8:EA:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ozMRTL_Gv2aDccVofumKRC_Y6jY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/TfTonluQfmH78OzaVxkJLWOPrQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.194.0.0/16
93.97.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5e:08:80:12:16:63:2b:db:69:fa:83:45:46:f0:52:83:dc:1b:
ba:b5:04:76:e5:2e:64:27:5b:6d:84:f5:57:6a:41:28:b3:a2:
9a:72:32:86:c1:f8:3a:d9:b2:b8:ec:7d:36:34:d6:00:38:0e:
79:9b:37:a2:97:63:2d:65:0a:89:9f:cb:21:02:92:95:4e:86:
ae:4a:d5:3d:a1:c0:75:ce:50:1b:9e:53:a2:7a:32:1b:7e:19:
d0:d9:ed:cb:38:9f:75:32:43:85:d3:d7:4f:41:68:55:54:d2:
63:21:e5:fe:7a:69:dd:7e:6d:fc:41:8a:38:1d:03:4c:7a:6e:
6f:6a:37:9f:e7:67:22:9e:34:aa:9b:89:26:a6:5a:d1:94:a3:
ff:a8:a6:84:38:1b:53:93:fb:09:65:79:01:00:ca:a6:24:fc:
cb:b8:dd:41:96:e8:8d:5f:97:c4:82:76:96:e5:1e:45:71:50:
98:7e:28:af:a2:fc:f1:ca:b8:50:ed:fc:84:c7:a9:42:91:13:
02:24:76:59:46:cd:8d:ce:b1:d3:39:0a:20:76:68:3e:45:74:
d9:4b:05:50:ff:0c:36:3a:28:12:9e:44:04:3f:5a:ab:0c:49:
0c:88:44:bf:e3:61:bd:f6:24:4b:cf:27:62:05:8b:5f:36:e6:
4a:32:5f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:53:55 2025 by rpki-client