Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/CTtxM-1YJnI7s2CeXEI8bJGchw8.roa
File: CTtxM-1YJnI7s2CeXEI8bJGchw8.roa (raw, json)
Hash identifier: m3vS1eOhVy8HVysz20rw/64QS2NyFhJNMyCoI4Eqes4=
Subject key identifier: 09:3B:71:33:ED:58:26:72:3B:B3:60:9E:5C:42:3C:6C:91:9C:87:0F
Certificate issuer: /CN=b74f63fd0dc197e52ad272276c40d3ee4bb1d799
Certificate serial: 01942748713B091711CAC52D85DFB77E2804
Authority key identifier: B7:4F:63:FD:0D:C1:97:E5:2A:D2:72:27:6C:40:D3:EE:4B:B1:D7:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t09j_Q3Bl-Uq0nInbEDT7kux15k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/CTtxM-1YJnI7s2CeXEI8bJGchw8.roa
Signing time: Thu 02 Jan 2025 13:50:46 +0000
ROA not before: Thu 02 Jan 2025 13:50:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204108
IP address blocks: 185.114.136.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft
rsync://rpki.ripe.net/repository/DEFAULT/t09j_Q3Bl-Uq0nInbEDT7kux15k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:71:3b:09:17:11:ca:c5:2d:85:df:b7:7e:28:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b74f63fd0dc197e52ad272276c40d3ee4bb1d799
Validity
Not Before: Jan 2 13:50:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=093b7133ed5826723bb3609e5c423c6c919c870f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d9:c4:03:73:03:09:85:88:45:91:f6:fb:ac:
d2:07:7f:a2:ff:30:36:8a:48:34:99:02:c2:8c:f5:
78:a2:1e:28:a3:79:39:b6:65:1c:55:f2:da:4f:c4:
08:58:3f:52:a1:5a:16:b0:42:49:a8:74:d1:cd:fa:
ef:1f:27:11:ef:ab:4f:d8:36:f2:07:0e:18:fd:69:
2f:4d:2b:8a:82:cb:e8:7c:23:96:8d:b3:13:42:dc:
a0:99:6f:94:2d:2c:30:e0:ad:f8:45:5e:46:c1:21:
23:31:62:6d:56:36:5f:0e:47:ef:41:20:25:69:80:
dc:6b:56:66:7d:29:df:9a:06:ae:a9:44:8d:f3:ac:
1c:15:59:4c:ab:47:64:4e:0d:aa:c9:69:5f:1f:52:
46:75:99:71:3b:0c:8c:19:ed:a2:9f:5c:21:47:ed:
44:7d:e5:60:0a:ca:01:e4:d7:5c:80:f7:12:09:24:
2a:71:21:64:cd:82:00:1c:16:39:04:c1:4f:c4:b4:
6c:3d:b0:f8:33:4e:78:f7:84:52:be:f7:90:23:77:
e4:f3:ab:35:5e:08:e4:46:b8:7e:f0:55:63:35:cf:
73:d3:2a:a2:17:a3:39:e7:24:91:36:3a:2e:f8:e4:
fe:83:76:4c:31:04:15:1d:00:27:60:06:58:e6:f0:
84:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:3B:71:33:ED:58:26:72:3B:B3:60:9E:5C:42:3C:6C:91:9C:87:0F
X509v3 Authority Key Identifier:
keyid:B7:4F:63:FD:0D:C1:97:E5:2A:D2:72:27:6C:40:D3:EE:4B:B1:D7:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t09j_Q3Bl-Uq0nInbEDT7kux15k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/CTtxM-1YJnI7s2CeXEI8bJGchw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.136.0/22
Signature Algorithm: sha256WithRSAEncryption
69:42:14:3c:01:31:d3:e2:a0:33:1f:97:a5:f4:ad:43:f8:08:
c4:06:81:cd:54:d9:09:89:68:a1:e7:d0:27:73:f2:02:f7:64:
f3:3e:ba:8a:d9:e6:ab:29:b3:6f:e3:be:73:a9:83:a1:f1:61:
9a:45:ae:43:64:99:84:3c:9b:b6:ec:b7:a6:35:77:59:44:7f:
ff:85:d9:b3:0a:50:6a:87:8c:4e:92:6c:1a:71:77:05:67:8d:
65:0a:01:94:6e:e4:9c:a7:8b:2d:d6:56:14:d0:eb:d8:20:ce:
36:21:24:6e:4f:c4:17:38:fc:b5:00:52:e0:04:f7:a8:ed:db:
f0:0a:c9:6c:6f:34:05:86:5f:f7:54:d1:a8:6c:14:9e:bf:3d:
2e:34:de:de:5c:b6:e5:c1:2d:63:68:21:f6:96:e4:77:51:41:
da:bf:32:a3:0c:4f:41:f0:38:56:11:6d:0c:fe:47:e2:49:06:
57:40:ff:fb:0e:f2:d5:4e:3a:ac:ad:95:1e:e6:eb:fd:d4:34:
3b:53:70:85:0c:c1:69:a6:e9:67:32:b4:a1:6c:51:86:92:6c:
52:6d:d6:c5:a4:0c:f3:91:20:18:0e:39:14:73:b6:26:ff:63:
44:06:4f:9d:91:16:f1:be:8f:99:7d:9a:9d:bb:24:0a:9e:10:
53:42:77:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:47:10 2025 by rpki-client