Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/tUPB9TmrvRG46ngHubaYKYvn04E.roa
File: tUPB9TmrvRG46ngHubaYKYvn04E.roa (raw, json)
Hash identifier: rsksbLJqTJnjomTHQ1GVXbsT6pXd/mYYQ2loIuCMTYg=
Subject key identifier: B5:43:C1:F5:39:AB:BD:11:B8:EA:78:07:B9:B6:98:29:8B:E7:D3:81
Certificate issuer: /CN=c9aef87167585d2898315aa3753f3fa68dad2c6d
Certificate serial: 01950F08B0BA9E2E30AAC9086B9CA3AB16A6
Authority key identifier: C9:AE:F8:71:67:58:5D:28:98:31:5A:A3:75:3F:3F:A6:8D:AD:2C:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ya74cWdYXSiYMVqjdT8_po2tLG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/tUPB9TmrvRG46ngHubaYKYvn04E.roa
Signing time: Sun 16 Feb 2025 13:53:02 +0000
ROA not before: Sun 16 Feb 2025 13:53:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 22773
IP address blocks: 185.151.236.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ya74cWdYXSiYMVqjdT8_po2tLG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:0f:08:b0:ba:9e:2e:30:aa:c9:08:6b:9c:a3:ab:16:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9aef87167585d2898315aa3753f3fa68dad2c6d
Validity
Not Before: Feb 16 13:53:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b543c1f539abbd11b8ea7807b9b698298be7d381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7a:b4:25:a3:db:4c:84:31:5f:c3:cb:41:f9:
2b:1d:17:49:63:ac:83:9e:ad:e8:c3:ca:52:f3:c8:
af:66:a7:7d:3e:76:29:e3:19:43:b2:d1:93:43:fa:
04:c0:5b:75:e7:71:b9:89:90:3b:13:2c:0a:88:5d:
30:49:aa:7b:7b:c7:50:de:a8:f6:f4:d7:88:78:08:
15:e3:bc:0a:d1:ca:05:24:09:6f:02:2a:32:58:85:
ae:40:1f:a9:3e:5f:8f:4e:d7:d0:fb:02:97:14:da:
3f:aa:3c:47:1a:23:e8:f4:b1:7c:b6:07:d6:af:57:
04:be:72:66:27:0c:01:86:12:c8:38:a8:84:25:82:
f4:44:71:44:3b:77:f0:1e:c5:4b:ac:a1:a4:72:c5:
39:8a:7f:09:d0:e4:97:29:fd:fb:06:01:28:ec:82:
7e:27:2f:be:5b:15:22:2c:c5:da:10:ac:71:6c:cb:
c8:83:1f:21:ac:09:ad:aa:b0:9d:c4:d5:c6:e0:b2:
ab:dd:1a:f6:81:63:ec:6a:49:fb:4e:06:d8:5d:e2:
0c:d1:17:08:3b:25:43:0b:2e:ed:ca:be:49:67:4c:
ec:1b:84:60:36:5f:4b:5f:bd:cd:d1:2a:4e:7a:e0:
9f:7c:97:b1:10:33:b3:a8:67:02:eb:02:c4:85:d8:
b3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:43:C1:F5:39:AB:BD:11:B8:EA:78:07:B9:B6:98:29:8B:E7:D3:81
X509v3 Authority Key Identifier:
keyid:C9:AE:F8:71:67:58:5D:28:98:31:5A:A3:75:3F:3F:A6:8D:AD:2C:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ya74cWdYXSiYMVqjdT8_po2tLG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/tUPB9TmrvRG46ngHubaYKYvn04E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.151.236.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:30:29:72:30:33:ce:32:2c:d9:e8:7a:f2:8c:33:4f:88:6b:
bd:c5:90:c3:3e:93:02:cd:0f:37:91:c6:01:2d:fc:d2:4b:40:
54:49:b1:7d:8d:24:aa:63:26:04:70:45:1f:d9:6a:47:4a:96:
e8:19:c4:cb:be:13:e4:f3:70:96:6a:8d:50:6b:81:d2:0a:2f:
d6:e5:e6:e5:20:2d:f6:89:1d:12:01:22:b0:83:a7:cb:a6:be:
fa:f0:68:96:0c:18:19:62:6e:1f:24:43:b5:7a:8c:ba:69:64:
c8:4c:34:fd:9a:b1:a2:06:92:07:f2:54:b0:eb:7f:7b:c2:8b:
bc:a9:81:bc:fb:6e:cf:06:cd:59:2a:1b:1a:be:a2:45:e6:5a:
6c:d1:66:37:af:2e:34:6c:90:c0:37:c8:19:68:e6:d1:e9:39:
26:aa:88:d5:69:c7:33:01:92:f3:c6:d3:e3:70:99:17:fd:23:
c4:1c:66:85:f5:45:d5:02:57:0a:0c:d2:5d:df:05:90:6c:bb:
58:6d:f5:17:81:14:94:b8:60:84:15:08:23:83:18:c9:fa:3d:
6f:40:02:f6:af:e6:1a:0d:92:62:a2:60:d1:82:63:85:18:44:
fc:ec:c8:82:a5:7a:8f:aa:4c:e3:71:57:72:fc:39:d4:66:57:
f7:34:69:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:18:09 2025 by rpki-client