Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/TP6kkH0vZwohnuu8LaNGGzK2bx4.roa
File: TP6kkH0vZwohnuu8LaNGGzK2bx4.roa (raw, json)
Hash identifier: 5TOk/KFa4qvBJB1w3rUK12jUjLhZzxVEKo+9hT469YM=
Subject key identifier: 4C:FE:A4:90:7D:2F:67:0A:21:9E:EB:BC:2D:A3:46:1B:32:B6:6F:1E
Certificate issuer: /CN=744e133ca0cad9f1fd161580590b296db22308ce
Certificate serial: 01942747877BC4A3D691CFCF242A895BD4CF
Authority key identifier: 74:4E:13:3C:A0:CA:D9:F1:FD:16:15:80:59:0B:29:6D:B2:23:08:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/TP6kkH0vZwohnuu8LaNGGzK2bx4.roa
Signing time: Thu 02 Jan 2025 13:49:46 +0000
ROA not before: Thu 02 Jan 2025 13:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204858
IP address blocks: 185.227.184.0/22 maxlen: 22
194.13.110.0/24 maxlen: 24
194.13.134.0/24 maxlen: 24
194.15.125.0/24 maxlen: 24
194.15.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:87:7b:c4:a3:d6:91:cf:cf:24:2a:89:5b:d4:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744e133ca0cad9f1fd161580590b296db22308ce
Validity
Not Before: Jan 2 13:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4cfea4907d2f670a219eebbc2da3461b32b66f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:de:07:e7:60:df:c6:d1:e4:d5:2e:fb:77:cd:
38:86:03:7e:5a:ce:bb:09:3d:7b:62:a6:3f:96:34:
bd:53:f2:fe:62:f5:73:d5:77:a1:7b:e7:7f:11:76:
74:17:45:2c:76:fe:41:dc:cf:60:31:34:d9:63:51:
86:41:5b:30:fa:36:ad:1b:6e:9a:5a:e6:dc:b0:86:
84:30:36:f8:c2:87:28:d7:c3:f5:a5:54:ee:18:ec:
90:26:61:f3:76:19:f7:24:66:f0:58:f3:15:f1:b1:
dd:29:90:0b:63:8a:bb:45:12:20:e3:38:2a:a5:2d:
6a:68:87:c1:48:25:00:72:2b:46:48:24:f3:df:02:
9f:2a:7a:7b:71:15:3c:12:06:11:c7:b1:57:dc:94:
2e:a9:42:0a:5c:3f:28:d0:38:02:7c:81:c1:39:93:
3d:5c:93:39:e5:43:9c:0d:2f:d8:38:cd:50:0f:05:
6d:43:d5:44:17:cf:c5:a7:f1:ae:3f:a0:5e:06:f7:
eb:67:be:32:5a:1e:b0:85:8d:2d:6c:c4:dc:ed:fc:
22:7e:07:0b:36:43:29:64:b1:90:53:bb:be:bb:87:
c3:5b:ea:01:fa:bd:cd:c8:25:0f:01:46:da:da:f1:
f6:e2:f3:5c:4e:c4:e3:e3:cf:c5:ff:9c:6f:3d:e3:
e9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:FE:A4:90:7D:2F:67:0A:21:9E:EB:BC:2D:A3:46:1B:32:B6:6F:1E
X509v3 Authority Key Identifier:
keyid:74:4E:13:3C:A0:CA:D9:F1:FD:16:15:80:59:0B:29:6D:B2:23:08:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/TP6kkH0vZwohnuu8LaNGGzK2bx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.184.0/22
194.13.110.0/24
194.13.134.0/24
194.15.125.0/24
194.15.136.0/24
Signature Algorithm: sha256WithRSAEncryption
73:f0:13:fd:a0:24:bc:7e:ec:b9:62:d2:e2:71:d7:27:6f:aa:
38:dd:fe:1c:05:d6:33:97:36:36:75:87:36:d9:a2:d3:6a:47:
da:f0:b6:a5:ca:da:aa:11:2f:32:f9:54:64:5f:5f:cb:39:c6:
b2:e4:38:95:14:fe:35:d8:af:4d:33:d8:07:cd:bc:65:37:fc:
ac:5f:c0:51:62:23:01:57:51:90:c4:9b:f7:40:30:c3:4e:2f:
d5:ea:1a:a6:98:62:c8:6e:e2:2d:d2:d3:d8:d1:e0:f9:fe:a7:
3a:3a:46:e6:e2:df:8d:84:b6:76:55:63:ff:85:ae:e9:59:d1:
b5:55:e7:9a:64:0e:33:8b:d4:46:da:7e:3a:5a:ca:28:7b:d6:
fa:7c:50:e0:69:61:0c:60:51:b6:70:bb:0f:ab:d3:60:87:23:
b0:db:d3:68:88:1d:28:fc:d5:02:18:f0:d4:3c:5e:a5:e2:18:
4f:f1:67:c4:03:08:1d:b4:28:ab:ef:f9:27:c1:e6:bc:64:45:
8e:c1:aa:6b:a7:98:1f:58:d3:64:f9:6b:56:5e:8a:2f:37:df:
ef:77:3c:be:b4:e5:92:60:47:f5:73:37:58:e4:da:9b:ea:2d:
3f:b4:5b:4c:e3:6a:01:46:6e:fa:a9:ae:99:7d:1d:24:47:5f:
85:b0:b2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:53:01 2025 by rpki-client