Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/TLgddA3CgmtAKo-fV94OuzSavi4.roa
File: TLgddA3CgmtAKo-fV94OuzSavi4.roa (raw, json)
Hash identifier: tQo/EK/pm7RsFTI12Ej+RxeB7S+rUphRTa4aWGCPu7s=
Subject key identifier: 4C:B8:1D:74:0D:C2:82:6B:40:2A:8F:9F:57:DE:0E:BB:34:9A:BE:2E
Certificate issuer: /CN=d1065f4fb6b679e7f1cbdd8035f967467010ea99
Certificate serial: 019426D9684CFB90D37997B9F917AF176E5C
Authority key identifier: D1:06:5F:4F:B6:B6:79:E7:F1:CB:DD:80:35:F9:67:46:70:10:EA:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QZfT7a2eefxy92ANflnRnAQ6pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/TLgddA3CgmtAKo-fV94OuzSavi4.roa
Signing time: Thu 02 Jan 2025 11:49:29 +0000
ROA not before: Thu 02 Jan 2025 11:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212398
IP address blocks: 91.194.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0QZfT7a2eefxy92ANflnRnAQ6pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:68:4c:fb:90:d3:79:97:b9:f9:17:af:17:6e:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1065f4fb6b679e7f1cbdd8035f967467010ea99
Validity
Not Before: Jan 2 11:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4cb81d740dc2826b402a8f9f57de0ebb349abe2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:10:9b:e6:2b:84:1b:1d:58:0d:2f:fa:cc:bc:
ab:72:fe:9a:d8:0d:96:0f:e1:2c:74:c3:81:89:0b:
ae:45:f9:0a:b9:21:b1:8f:f7:02:a0:e0:10:96:bf:
e2:9e:c9:ec:87:7d:80:ac:4d:11:34:04:52:0d:19:
79:1d:6f:0d:4b:ad:3a:2d:9a:42:64:17:f8:62:48:
b0:7d:78:79:c1:7f:f8:5d:54:f8:5a:1d:12:4b:f7:
57:2c:a5:e5:e8:be:40:e0:9c:7d:e7:e4:06:7b:80:
6e:76:b4:95:51:79:82:18:02:3b:22:d0:25:8b:46:
81:40:ea:7d:08:e7:27:a4:f4:e8:d2:e5:a6:f9:f5:
de:c8:c2:fc:ac:e2:43:87:50:05:de:2d:2d:08:89:
65:29:26:d0:91:0d:7f:b7:e1:7e:29:4a:b4:13:00:
48:1f:8a:48:c1:62:31:bf:ae:1c:66:a0:84:55:e2:
31:2b:90:43:d7:6a:15:0b:d6:a1:62:86:98:9c:f4:
da:03:72:0f:1c:1a:d4:88:22:59:5e:b4:b9:82:d7:
91:43:4a:15:2c:2f:43:42:f7:95:7e:af:d2:27:db:
c0:cb:dc:92:83:c3:77:e3:c2:9f:24:9b:dc:d0:45:
81:0e:82:4a:34:aa:e0:92:42:66:45:c3:69:24:d7:
79:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B8:1D:74:0D:C2:82:6B:40:2A:8F:9F:57:DE:0E:BB:34:9A:BE:2E
X509v3 Authority Key Identifier:
keyid:D1:06:5F:4F:B6:B6:79:E7:F1:CB:DD:80:35:F9:67:46:70:10:EA:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QZfT7a2eefxy92ANflnRnAQ6pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/TLgddA3CgmtAKo-fV94OuzSavi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.7.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:84:40:a6:e2:84:38:87:f6:f1:09:80:a7:54:54:a6:ae:08:
36:13:96:e0:06:50:73:fc:c3:d3:48:b5:cb:05:f3:98:61:43:
b9:55:3f:cc:b8:4b:50:09:9f:47:9e:3c:33:96:b9:bc:8a:05:
6b:76:6d:16:ce:83:2b:d8:ec:eb:97:cb:83:b5:f8:f5:0a:a2:
e2:97:cd:fa:d0:3d:7e:0a:b3:6e:04:59:e5:d2:42:06:ba:66:
88:e3:94:01:4b:b2:55:3a:40:8b:18:bb:0e:29:c2:36:87:d8:
6e:46:92:0e:5d:99:89:5a:62:3b:2e:38:85:29:0d:69:6f:84:
c5:28:d5:46:90:7a:b5:08:10:4b:c1:ac:f7:c4:22:82:fb:6f:
14:96:38:35:8d:10:ce:08:57:06:0f:85:fa:a1:f9:9f:b9:64:
5a:4f:62:35:c8:0a:91:8e:ad:e2:55:ee:76:f7:68:d1:b3:69:
0f:54:c8:8b:34:15:b2:26:a4:76:1e:f6:15:f7:30:8e:66:0c:
3e:73:7f:4a:c5:24:1a:76:02:da:75:e6:47:59:63:78:01:98:
f1:f1:3a:5b:32:02:45:60:ed:a4:b0:83:58:9f:04:54:e8:1c:
cc:38:99:11:8c:6b:71:ae:ee:ef:84:76:1f:08:1e:dd:04:7f:
6c:2b:9b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:39:44 2025 by rpki-client