Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/TFiXnA69SUIjZxShh655vlYs5os.roa
File: TFiXnA69SUIjZxShh655vlYs5os.roa (raw, json)
Hash identifier: iue8xNO+FBfmf0WBI+KQBXMK4ZDijvqm8QzG1kL5NP4=
Subject key identifier: 4C:58:97:9C:0E:BD:49:42:23:67:14:A1:87:AE:79:BE:56:2C:E6:8B
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 0194221FF65AC992AE6E39D3F0289A47B6E6
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/TFiXnA69SUIjZxShh655vlYs5os.roa
Signing time: Wed 01 Jan 2025 13:48:27 +0000
ROA not before: Wed 01 Jan 2025 13:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215703
IP address blocks: 207.244.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 21:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:f6:5a:c9:92:ae:6e:39:d3:f0:28:9a:47:b6:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Jan 1 13:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c58979c0ebd4942236714a187ae79be562ce68b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5a:f6:94:46:65:6b:28:c1:56:d6:ee:47:24:
5c:f4:29:29:21:ec:fd:ea:ea:2f:ca:e9:2c:5c:e9:
42:aa:c1:24:c2:40:66:37:74:e2:6b:c6:1a:cb:bd:
07:8d:bb:6a:7b:9a:4a:e3:75:95:3e:35:ac:05:de:
5d:2e:42:5a:2e:db:86:a5:2c:b8:68:b4:8c:1b:45:
20:f6:04:90:df:a1:19:ba:21:1e:55:d0:14:83:d2:
3c:cd:16:64:38:d4:4c:21:6d:af:c8:25:c4:ea:ee:
a0:7a:01:4a:88:ae:33:65:7d:78:77:1c:10:1b:9d:
a7:ef:9c:7e:a9:30:db:db:ef:76:d4:b5:8f:9d:7b:
d8:b0:c6:17:69:4f:b8:b1:7a:09:80:ec:55:ab:c2:
84:86:e4:57:fc:63:23:79:50:b0:6f:c3:83:e8:c6:
1f:58:20:c5:00:58:6b:e4:c3:56:c5:61:28:1c:51:
a8:1c:96:b6:32:2f:21:e7:c2:10:c1:7b:e2:ad:4d:
c3:0d:1a:e2:c2:db:7a:4d:9f:c3:04:37:ca:32:d8:
2d:06:9b:c3:3d:25:7d:10:f7:b7:fa:3c:8a:46:e6:
24:82:7d:32:61:09:30:b5:9b:5c:54:1a:7f:f3:7f:
08:be:dc:75:b1:d2:f4:3d:b3:02:c7:ae:47:ea:1a:
8e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:58:97:9C:0E:BD:49:42:23:67:14:A1:87:AE:79:BE:56:2C:E6:8B
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/TFiXnA69SUIjZxShh655vlYs5os.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
207.244.199.0/24
Signature Algorithm: sha256WithRSAEncryption
08:b9:95:31:88:aa:9c:e7:4b:bc:bf:a1:28:6b:55:cc:ae:7b:
c1:b1:af:cc:1c:4d:62:c4:76:be:95:54:51:4d:ed:f9:6e:25:
0d:d7:de:f9:21:55:11:c4:88:3d:d8:0f:51:a9:ae:b1:3f:d7:
f9:48:15:ac:9e:3c:59:bf:fc:21:00:7b:c4:bb:78:ea:6e:22:
9b:0b:71:f1:93:12:d3:b6:19:72:6d:6c:f9:47:24:32:24:3e:
cf:df:83:f0:62:39:93:6a:c9:09:b0:d0:58:d3:64:71:74:21:
ed:76:b8:1d:cf:62:8d:58:cf:29:f6:b1:4f:1d:08:32:3b:e3:
47:60:72:00:92:32:fc:ea:2e:c7:fe:27:d4:f3:1d:1f:04:ec:
8d:26:0c:d1:84:3e:38:d2:eb:5d:f6:f2:be:72:b1:86:f1:ef:
88:52:95:61:bd:e5:ab:2e:24:9f:72:e9:d8:0f:70:2c:25:6a:
9f:32:13:f4:2c:d5:f7:d3:f2:df:12:80:91:20:e4:66:23:da:
f8:71:b7:b0:fa:3d:17:8d:63:0b:21:7e:f5:7c:f0:1c:7b:8f:
68:78:70:80:7c:4f:df:6b:59:0c:da:76:ac:30:03:39:b8:c5:
38:a2:aa:64:d9:07:c1:78:80:8a:4b:ca:48:e8:a5:66:d9:5e:
34:0c:a4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:53:18 2025 by rpki-client