Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/TpmLWFSbZb2dQ8K2GqBwrSHlhMw.roa
File: TpmLWFSbZb2dQ8K2GqBwrSHlhMw.roa (raw, json)
Hash identifier: xdJre5WYs0QeN/1xP/iEZblWiapiREglW6GQPHWgPiI=
Subject key identifier: 4E:99:8B:58:54:9B:65:BD:9D:43:C2:B6:1A:A0:70:AD:21:E5:84:CC
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 0194221FD4BB5F3D2191126EC4EE1CD8F7E1
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/TpmLWFSbZb2dQ8K2GqBwrSHlhMw.roa
Signing time: Wed 01 Jan 2025 13:48:18 +0000
ROA not before: Wed 01 Jan 2025 13:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 55154
IP address blocks: 109.104.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:d4:bb:5f:3d:21:91:12:6e:c4:ee:1c:d8:f7:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Jan 1 13:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e998b58549b65bd9d43c2b61aa070ad21e584cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:33:39:a5:8e:1d:f1:9e:4b:bc:4f:c8:5b:c8:
57:30:f7:8c:52:1c:ef:24:70:d5:50:5a:b1:08:0a:
8e:26:4b:e3:95:95:92:b4:d5:82:72:72:e9:f6:42:
a1:33:c1:11:02:59:13:16:a4:2a:3a:a7:2b:34:37:
f3:0e:4e:39:c8:75:3c:14:43:89:9a:8f:11:42:29:
76:57:3c:6e:02:43:39:5f:e4:8f:85:f9:b8:88:f9:
7b:67:7e:69:a1:d3:51:9e:b1:ba:8d:e2:45:3d:b2:
06:f0:a1:22:45:1d:89:7d:1d:01:46:69:4f:3e:34:
9d:fc:8a:65:28:c0:ce:4e:1d:ca:a5:e2:36:44:46:
e2:e8:a1:5e:a4:03:1c:0f:2f:7e:ff:47:f2:59:d5:
81:b4:75:4c:f1:5e:71:87:c5:09:80:b6:52:8f:e9:
be:54:cd:d5:36:c9:47:92:ca:00:39:9e:7e:a5:6f:
37:2c:a9:48:91:ad:3c:c8:f8:49:9a:37:41:4c:10:
c8:bb:60:7d:df:55:08:ce:32:af:7d:88:c9:1a:0f:
4c:c9:e4:bc:15:9d:cd:91:15:73:d7:83:0d:88:e1:
94:2b:6a:29:04:41:5a:7a:d0:16:cc:62:1a:52:49:
f3:21:b5:a9:9a:a3:cd:30:e2:c8:59:47:0c:92:3f:
46:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:99:8B:58:54:9B:65:BD:9D:43:C2:B6:1A:A0:70:AD:21:E5:84:CC
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/TpmLWFSbZb2dQ8K2GqBwrSHlhMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.104.134.0/24
Signature Algorithm: sha256WithRSAEncryption
81:22:75:08:1f:88:9c:21:b7:55:ca:55:7f:2c:0c:1e:2e:ba:
33:30:9c:4f:a4:ab:0f:2b:6e:cf:0d:69:6f:9c:16:26:15:5f:
11:ff:d6:2e:e5:de:c2:a9:73:c9:6c:dd:4e:5d:7f:56:d4:ad:
14:f5:65:2c:52:9c:20:51:c0:7b:e7:c0:64:96:96:af:08:4c:
bd:c4:a2:cf:7a:20:be:ed:74:87:ff:7f:fa:e8:9c:0b:3d:31:
82:cf:1f:7a:12:09:df:a6:7c:3f:a7:16:8c:7b:60:57:7e:ad:
ce:8e:ec:fb:f5:6b:a9:24:14:8a:c7:90:99:6e:ec:12:7b:d7:
b4:9a:91:d8:4c:27:3a:76:1b:59:8b:97:d8:d2:7c:d9:7c:2f:
6d:66:a8:c6:76:22:4c:f7:b1:61:12:5f:0a:cb:85:fd:7b:3d:
a4:3f:44:05:c3:80:d6:b7:b9:ab:e6:59:43:ad:38:60:7f:38:
52:0a:3f:e3:27:b4:20:20:e8:85:e6:ca:43:f1:24:29:61:16:
49:1d:73:19:d3:58:8a:1f:e7:8c:22:41:68:83:37:76:47:53:
5f:b7:29:89:a1:16:f4:25:0a:07:a3:3b:09:9b:85:d1:a7:9a:
5c:43:f6:67:41:ea:65:2e:53:8f:4b:2e:cb:2e:76:bc:1c:3c:
4b:16:a6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:05 2025 by rpki-client