Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/tinXUk407KICO2MXsH1p4TReydw.roa
File: tinXUk407KICO2MXsH1p4TReydw.roa (raw, json)
Hash identifier: linbqgFB5KTsziPayiqOokYdnyWHwGO4kAHLVkJgE3k=
Subject key identifier: B6:29:D7:52:4E:34:EC:A2:02:3B:63:17:B0:7D:69:E1:34:5E:C9:DC
Certificate issuer: /CN=621310302018a387c692146a35efd33a6ed6b1ef
Certificate serial: 019427B5999A4CCE4E4EFEBF40FEB3F075B0
Authority key identifier: 62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/tinXUk407KICO2MXsH1p4TReydw.roa
Signing time: Thu 02 Jan 2025 15:50:00 +0000
ROA not before: Thu 02 Jan 2025 15:50:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42831
IP address blocks: 185.99.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:99:9a:4c:ce:4e:4e:fe:bf:40:fe:b3:f0:75:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=621310302018a387c692146a35efd33a6ed6b1ef
Validity
Not Before: Jan 2 15:50:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b629d7524e34eca2023b6317b07d69e1345ec9dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:49:09:2e:d1:59:dd:fa:ee:57:8c:60:51:ef:
20:cf:f2:5a:65:54:d3:4c:f1:80:29:f4:6e:1a:b6:
1f:98:45:8d:cc:30:41:67:1a:3f:e3:02:71:e1:dc:
1f:37:b5:60:12:5a:fc:cd:bd:18:1e:19:68:34:e0:
58:74:fa:c5:75:9a:52:d8:6e:eb:79:8a:c2:6f:be:
97:d1:66:ee:ed:69:00:69:17:07:cb:99:4d:6b:1c:
79:96:b4:b6:a3:4c:59:fd:7b:9b:35:c4:e1:b7:87:
1a:ae:2a:22:27:08:7f:41:0c:fe:5f:70:45:45:55:
63:8a:c4:25:93:83:14:be:46:c1:49:dc:bb:b5:74:
27:fc:74:f4:8e:08:64:27:55:54:27:81:98:f0:f5:
ec:a7:17:33:78:ff:ed:ef:b4:a0:42:b0:7b:51:31:
2c:9f:fe:d8:be:d8:83:f0:6d:dd:b1:f2:46:7e:f6:
3d:df:47:7a:ac:9f:9e:0a:33:02:6d:16:4e:5b:72:
d7:14:14:46:8e:f3:50:b8:0d:d1:c9:64:40:f8:ac:
7c:f7:0a:ad:a9:f6:f6:73:a2:be:a6:f7:47:17:e4:
ca:a0:06:59:5d:fe:4e:7b:a6:9e:cb:bd:b7:6f:12:
21:c5:58:6c:9c:fc:dc:ee:ac:37:a3:99:da:1e:40:
1d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:29:D7:52:4E:34:EC:A2:02:3B:63:17:B0:7D:69:E1:34:5E:C9:DC
X509v3 Authority Key Identifier:
keyid:62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/tinXUk407KICO2MXsH1p4TReydw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.99.20.0/24
Signature Algorithm: sha256WithRSAEncryption
55:c9:32:66:f3:8a:22:e4:95:78:7b:9f:d1:2c:b1:34:30:17:
6f:3e:45:1b:5a:54:ea:76:db:fa:06:eb:67:df:65:89:56:29:
d9:0c:44:5a:e9:01:7b:50:5d:96:b1:b6:f0:58:36:10:76:36:
51:19:73:bf:58:fa:d5:f9:9f:37:73:d4:89:10:83:3a:d8:90:
a5:2d:9b:a8:71:1b:bb:eb:a3:eb:d7:13:b5:40:e4:bc:98:61:
f9:1d:68:8a:31:bf:31:ed:43:a3:7a:58:9e:73:a7:5d:61:7e:
c8:4a:15:70:69:e2:a3:c1:bc:ed:76:a9:56:8e:bc:2f:34:07:
01:c6:a6:f5:dc:01:9b:c6:26:0c:e8:d3:80:22:1d:5f:db:bc:
17:54:03:6e:b6:90:62:2f:9f:2c:54:cb:4d:54:97:12:92:00:
1f:36:7b:68:70:ea:ad:85:34:5e:d9:32:63:73:b4:89:3a:f5:
aa:af:f6:d2:2d:3d:11:10:99:3e:3b:c7:5e:57:18:c1:04:9f:
30:08:e2:93:c9:7b:46:7c:9e:c5:4e:2f:05:e4:f8:00:d3:62:
c1:cc:b9:c1:9a:0d:a0:af:85:97:af:2d:e0:0a:a8:e9:ff:1b:
78:4a:12:5a:ed:93:8f:3f:6c:2f:76:a5:24:a6:c0:0c:0b:13:
cd:87:8d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:49:42 2025 by rpki-client