Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/TZhxMcASTkf4kjnLJpZRyriOQMY.roa
File: TZhxMcASTkf4kjnLJpZRyriOQMY.roa (raw, json)
Hash identifier: rM+w6iyuW39CkrWnFAV/Ez17IJEm9YbhaH/77lovuBA=
Subject key identifier: 4D:98:71:31:C0:12:4E:47:F8:92:39:CB:26:96:51:CA:B8:8E:40:C6
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C3522D290599E0DD658F2587D48C9
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/TZhxMcASTkf4kjnLJpZRyriOQMY.roa
Signing time: Wed 01 Jan 2025 01:47:49 +0000
ROA not before: Wed 01 Jan 2025 01:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62448
IP address blocks: 81.181.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:35:22:d2:90:59:9e:0d:d6:58:f2:58:7d:48:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d987131c0124e47f89239cb269651cab88e40c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ab:c7:f9:34:bf:25:3d:52:e7:79:ea:f6:19:
ed:e2:ac:c3:ae:af:20:c2:47:00:21:a5:a7:58:58:
02:d4:43:dd:fb:d2:41:1a:80:6b:89:53:18:e8:ed:
dd:01:4b:67:b4:a1:eb:7c:26:b3:39:52:04:1f:73:
31:39:98:c5:ca:f7:fe:10:d3:2f:cd:d0:d3:84:ae:
f6:ea:50:0f:e7:84:b9:42:76:fe:a0:17:02:6f:74:
ab:56:db:ac:4c:d4:25:c8:77:79:fb:f6:80:2d:00:
05:ae:3b:50:29:b2:03:65:f8:6f:1f:00:9e:e6:eb:
37:d1:21:4c:59:78:2b:61:b9:f5:57:18:54:c2:83:
ab:44:f9:1b:7f:ec:6e:f7:6a:2b:de:12:e2:1c:ea:
d0:d5:a9:6c:f9:bd:a6:9b:7e:4a:a5:88:f8:90:3c:
57:6c:3b:18:eb:5c:fc:b7:02:1d:f6:8a:fe:ee:04:
38:0a:f6:b8:4d:53:8a:04:43:f2:70:53:c0:c2:ca:
ff:1e:67:ad:65:6a:d2:68:7c:3a:61:fa:95:3f:f5:
3b:94:a7:1e:4a:e1:df:71:1e:d4:aa:17:30:b1:52:
4b:ad:4b:e1:97:26:dd:fa:ab:2c:44:da:3d:eb:16:
cc:42:e6:3b:82:e0:05:26:3a:46:ae:be:64:eb:2d:
83:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:98:71:31:C0:12:4E:47:F8:92:39:CB:26:96:51:CA:B8:8E:40:C6
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/TZhxMcASTkf4kjnLJpZRyriOQMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.181.242.0/24
Signature Algorithm: sha256WithRSAEncryption
38:be:1a:42:fc:15:3b:dd:a1:77:23:e8:39:0a:7f:3b:a4:ea:
d6:95:a5:ac:cc:6a:ec:ce:86:44:84:6a:2c:da:7f:e5:b4:30:
2a:e2:cd:23:fb:c5:c7:4a:dd:51:01:71:bd:55:11:2e:09:47:
6a:27:54:ad:bb:f9:3c:9a:b6:11:f9:31:e6:59:d4:1a:88:85:
b4:72:eb:5c:7c:eb:f4:a3:f5:00:b4:ff:43:7d:01:1f:2a:32:
aa:02:60:05:6c:71:1a:aa:14:f6:6e:77:d4:c9:ed:2c:9e:ac:
4b:bb:ea:ad:25:3f:29:d7:a1:8a:ea:65:d9:df:2f:33:e7:69:
a5:41:34:3a:57:6b:f7:fa:fb:51:34:77:d7:0e:38:6e:bf:49:
bb:14:11:cb:ac:49:97:b2:c1:f2:af:b6:45:08:d4:48:1b:bf:
fa:2d:c8:b3:4f:02:1b:10:28:d4:1f:0d:25:89:fe:6d:48:8d:
57:cc:f8:0a:98:29:ac:e5:36:eb:c2:ad:cb:00:7f:46:32:c6:
75:09:66:d1:2b:8d:35:00:70:9c:35:1c:ae:d3:8d:ca:57:38:
62:34:d2:2a:50:94:a9:9c:81:17:f6:6b:92:b1:49:7d:6f:fd:
8c:ae:b1:19:35:b6:a7:1d:a7:de:21:be:ca:53:25:db:a0:bd:
48:77:c7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:26:54 2025 by rpki-client