Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1-TgqQN5j_0Ih4LzzMFwDhEb_RtE.roa
File: 1-TgqQN5j_0Ih4LzzMFwDhEb_RtE.roa (raw, json)
Hash identifier: VTTjtQM3kf6wW3Ny+UZy9D1+lwNrgr4IELiifTXKNew=
Subject key identifier: F9:38:2A:40:DE:63:FF:42:21:E0:BC:F3:30:5C:03:84:46:FF:46:D1
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01953C0C6FAC407FA5A73B6EAF892EA204AF
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1-TgqQN5j_0Ih4LzzMFwDhEb_RtE.roa
Signing time: Tue 25 Feb 2025 07:40:02 +0000
ROA not before: Tue 25 Feb 2025 07:40:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200239
IP address blocks: 193.124.90.0/24 maxlen: 24
194.87.59.0/24 maxlen: 24
194.87.64.0/24 maxlen: 24
194.87.75.0/24 maxlen: 24
194.87.91.0/24 maxlen: 24
194.87.188.0/24 maxlen: 24
195.58.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3c:0c:6f:ac:40:7f:a5:a7:3b:6e:af:89:2e:a2:04:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 25 07:40:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9382a40de63ff4221e0bcf3305c038446ff46d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:3c:56:7b:f3:98:b9:5a:98:84:c7:61:f7:fa:
78:ab:be:6e:6c:b6:ea:35:6e:2a:82:40:17:17:fa:
31:0d:c2:dd:dc:80:35:4b:3d:0e:51:5a:d8:07:36:
4a:f9:0d:3b:3f:49:fe:b1:3a:4f:42:52:b7:c9:f2:
1d:85:80:5f:49:c3:7d:6d:2b:4e:e7:85:77:47:b8:
d2:79:17:5a:38:5a:80:09:36:a3:28:0e:19:e2:9e:
69:e7:6e:90:8f:4c:fd:19:c0:88:18:8e:d3:2d:fb:
d9:8e:f1:91:b2:1b:e4:fc:e2:0f:83:73:54:26:ed:
87:a3:be:17:86:b6:7c:ba:37:bb:53:cd:7d:9e:7e:
ad:17:34:1a:a6:6d:97:fb:bc:9c:ad:ef:1a:dd:3e:
e0:a9:87:d9:0e:a0:a6:bd:d0:8a:8f:85:87:ea:6e:
4f:6c:dc:12:f3:ab:62:26:e1:9c:68:7e:2e:f6:54:
43:48:a0:99:5f:7e:f2:28:e8:2c:01:09:18:d5:20:
10:bb:30:c2:3e:c0:0e:2a:d4:e1:db:ca:0a:6c:8f:
3d:93:fa:d0:93:ad:99:1e:b0:e8:d3:eb:80:bc:f9:
f8:3c:e7:a2:2f:a1:c9:a9:05:4d:9d:67:55:0b:f5:
48:a2:17:02:cd:e6:d2:6c:1d:1c:f5:e1:0e:ae:09:
41:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:38:2A:40:DE:63:FF:42:21:E0:BC:F3:30:5C:03:84:46:FF:46:D1
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1-TgqQN5j_0Ih4LzzMFwDhEb_RtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.90.0/24
194.87.59.0/24
194.87.64.0/24
194.87.75.0/24
194.87.91.0/24
194.87.188.0/24
195.58.63.0/24
Signature Algorithm: sha256WithRSAEncryption
58:5a:9e:93:28:83:de:cc:5b:ba:70:86:a9:50:e5:fd:59:a9:
7c:48:e3:df:8c:3d:7c:4a:7e:30:1c:a5:97:01:5b:d6:ee:fc:
1a:87:63:3b:88:6f:e3:93:eb:16:90:1e:af:da:20:b1:d2:2d:
27:3c:aa:fd:14:7a:ed:ac:d6:9e:44:db:86:f2:3c:63:73:d4:
ee:cb:e0:fa:84:fb:8a:28:3b:07:8b:28:d1:b8:c1:d5:58:73:
9b:44:8e:83:32:93:5d:44:a3:96:47:ec:0c:d9:be:ef:df:fd:
e7:31:f8:2a:41:ab:f1:6b:e1:3c:9c:64:10:31:cd:3e:23:cc:
64:ef:51:5c:ad:81:ff:ec:bf:db:1d:ad:97:06:17:79:57:13:
bc:93:44:46:f8:99:36:01:b0:44:fe:92:f9:c9:47:5c:59:99:
65:73:b0:01:b0:f1:5c:f3:f8:a8:88:d2:38:ed:fb:ec:0b:f5:
c6:08:45:e3:9d:23:ac:b5:39:18:b9:2a:3c:de:d7:51:62:ae:
f4:e2:85:85:db:f2:1d:ac:6e:c6:8b:bc:71:db:ee:62:e9:b7:
8a:8e:b1:20:ac:f3:4a:cf:0f:c1:1d:7d:c4:59:1e:ec:34:de:
16:7b:5f:f4:41:a8:fa:4a:08:dd:54:00:b8:dc:d7:54:cd:bd:
48:9c:cc:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:33:21 2025 by rpki-client