Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/TgV1xu8ntnem5zfBufPUC7kUDYk.roa
File: TgV1xu8ntnem5zfBufPUC7kUDYk.roa (raw, json)
Hash identifier: viX/DxmV4FfM1xJLQLNfoeWsVndpgszxqhUN0jk4LmI=
Subject key identifier: 4E:05:75:C6:EF:27:B6:77:A6:E7:37:C1:B9:F3:D4:0B:B9:14:0D:89
Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial: 019420D636B9A94A053E65B6EB7B02C3EFC0
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/TgV1xu8ntnem5zfBufPUC7kUDYk.roa
Signing time: Wed 01 Jan 2025 07:48:17 +0000
ROA not before: Wed 01 Jan 2025 07:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39855
IP address blocks: 5.253.226.0/24 maxlen: 24
194.99.112.0/24 maxlen: 24
194.104.1.0/24 maxlen: 24
194.104.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 12:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:36:b9:a9:4a:05:3e:65:b6:eb:7b:02:c3:ef:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Validity
Not Before: Jan 1 07:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e0575c6ef27b677a6e737c1b9f3d40bb9140d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:66:68:04:2e:32:cf:0b:41:a2:80:fb:ef:58:
7b:2f:81:01:87:b9:b3:83:67:9b:35:32:b0:32:98:
13:d9:3e:eb:94:77:24:bf:a5:75:21:44:3f:4a:ec:
80:3c:44:6a:38:76:81:4b:eb:76:76:65:43:45:21:
34:61:7f:4f:f7:53:87:56:c4:e3:96:56:75:d3:d6:
78:34:c8:5f:f2:c6:fb:3d:4b:07:91:c8:88:64:21:
cf:d7:a9:6b:e2:66:93:df:80:f9:5c:3f:27:1d:01:
9f:47:a9:da:ee:d0:5e:c6:aa:76:cd:4e:b7:77:a3:
e3:9e:d1:4b:2a:85:85:96:47:fe:1e:55:01:f6:18:
30:54:ab:c8:f6:7c:09:11:97:f4:e6:19:bb:78:8b:
fd:38:de:8c:48:64:e5:9e:2b:00:6a:cb:bd:8e:73:
41:72:cb:7d:05:9e:b0:25:55:d6:ec:2b:ce:3c:e0:
2b:69:c6:4c:82:86:53:df:31:74:56:31:a1:24:7b:
25:e7:4a:37:7d:15:70:ee:9c:86:aa:a2:57:35:78:
a3:de:6f:60:96:39:7c:e5:d2:cc:c2:d0:eb:93:7c:
9e:3a:6c:ca:cf:ad:50:db:54:87:04:29:28:69:af:
15:d6:4e:49:c7:20:20:9e:6e:5d:23:72:34:31:70:
af:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:05:75:C6:EF:27:B6:77:A6:E7:37:C1:B9:F3:D4:0B:B9:14:0D:89
X509v3 Authority Key Identifier:
keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/TgV1xu8ntnem5zfBufPUC7kUDYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.226.0/24
194.99.112.0/24
194.104.1.0/24
194.104.85.0/24
Signature Algorithm: sha256WithRSAEncryption
04:7a:ab:e6:0e:ee:0b:6e:38:4e:e5:27:96:0c:a4:81:7c:bc:
1b:cc:87:88:8a:d2:1f:c8:f0:34:a4:b8:68:c7:16:f8:d3:6c:
bc:fe:b1:77:ce:94:1f:d2:b4:11:21:01:4d:4b:4f:11:ff:0b:
8a:7d:f7:ea:6a:85:ba:f0:dd:a7:6e:5c:fd:97:60:66:df:b3:
1b:e9:23:5a:28:03:6e:f9:a6:79:2f:c2:2a:79:a3:a6:cb:c2:
66:2e:99:98:30:38:14:1e:e0:5b:f1:f5:d7:ed:13:c9:a6:0f:
02:c1:bd:b6:da:1b:21:43:1e:19:04:d0:4d:87:46:54:91:74:
dd:db:84:ff:f3:a8:77:35:52:5e:28:6b:4f:57:e4:ff:b4:8e:
75:45:1e:e2:92:07:ef:8a:8b:79:af:5b:de:14:5c:f2:4a:7f:
b8:ea:ab:6e:13:08:99:e9:58:fb:dc:3b:5c:b9:20:a5:55:fd:
58:85:83:ac:85:19:99:a7:7e:e7:7c:e1:9b:81:b1:32:e9:be:
3d:ab:d9:bd:54:46:9e:90:76:f2:0c:49:32:eb:cf:ae:e8:24:
ac:da:c1:f1:5f:bc:40:9e:e1:e1:49:fe:87:f7:d2:91:13:7b:
6f:dd:1b:fa:30:6b:ef:22:26:0b:16:35:32:95:fa:96:3e:2b:
ce:e7:16:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:17:33 2025 by rpki-client