Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/tTBKVFQWZufXMYyq5fxW8fRNH90.roa
File: tTBKVFQWZufXMYyq5fxW8fRNH90.roa (raw, json)
Hash identifier: YC4oYFYBwZQuGV+b+L7LVxd1pwxsZMobv4J4wury7gU=
Subject key identifier: B5:30:4A:54:54:16:66:E7:D7:31:8C:AA:E5:FC:56:F1:F4:4D:1F:DD
Certificate issuer: /CN=4018f55a6b033b244f86145bd9f0a6f1400c1bff
Certificate serial: 01958F2F800CBCE43CF443BFF89995FCEF9D
Authority key identifier: 40:18:F5:5A:6B:03:3B:24:4F:86:14:5B:D9:F0:A6:F1:40:0C:1B:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QBj1WmsDOyRPhhRb2fCm8UAMG_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/tTBKVFQWZufXMYyq5fxW8fRNH90.roa
Signing time: Thu 13 Mar 2025 11:06:49 +0000
ROA not before: Thu 13 Mar 2025 11:06:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214112
IP address blocks: 62.169.138.0/24 maxlen: 24
62.169.156.0/24 maxlen: 24
178.16.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QBj1WmsDOyRPhhRb2fCm8UAMG_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:2f:80:0c:bc:e4:3c:f4:43:bf:f8:99:95:fc:ef:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4018f55a6b033b244f86145bd9f0a6f1400c1bff
Validity
Not Before: Mar 13 11:06:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5304a54541666e7d7318caae5fc56f1f44d1fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c4:25:37:2e:8e:2b:9f:4d:cb:bd:07:2c:98:
2d:6a:a0:c8:5d:5b:00:1d:a2:35:29:dd:09:a8:0f:
9e:4a:49:f9:65:35:c0:f3:13:ec:39:dc:5a:6c:87:
c4:05:57:c7:fd:ea:7c:ec:3b:19:17:1a:f2:14:cd:
79:ce:e7:4d:1b:96:3e:87:60:0e:b5:55:9b:15:dc:
a2:66:43:fd:fb:c7:24:b0:a5:66:11:11:92:2f:ee:
83:ea:b9:cc:fc:71:ad:6b:86:ca:11:24:f6:c5:cb:
e0:d5:61:db:e5:a3:97:7f:14:76:05:17:94:92:3c:
c9:5e:13:f6:8d:4b:01:f1:cd:8c:2d:19:41:75:30:
fb:a7:e3:63:dd:bd:45:5f:c8:fd:4f:e6:47:f9:87:
da:79:b2:aa:dc:66:5b:b2:56:d1:c0:34:a7:a3:07:
d3:2e:1c:1e:7b:7f:ab:3b:64:aa:fe:d1:b8:6a:e7:
cb:d9:13:a7:bd:b2:eb:c9:65:37:89:ba:95:52:85:
36:e8:87:b1:18:85:04:de:99:f4:0a:ef:ca:37:d7:
90:ed:18:8c:e0:1d:6a:20:17:3a:ed:d7:59:99:56:
d1:e7:8d:96:eb:81:63:cf:7b:df:5c:c9:aa:ad:5b:
f6:bf:29:1f:81:45:a1:a3:db:7a:a2:e5:bd:56:0f:
4b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:30:4A:54:54:16:66:E7:D7:31:8C:AA:E5:FC:56:F1:F4:4D:1F:DD
X509v3 Authority Key Identifier:
keyid:40:18:F5:5A:6B:03:3B:24:4F:86:14:5B:D9:F0:A6:F1:40:0C:1B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QBj1WmsDOyRPhhRb2fCm8UAMG_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/tTBKVFQWZufXMYyq5fxW8fRNH90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.169.138.0/24
62.169.156.0/24
178.16.229.0/24
Signature Algorithm: sha256WithRSAEncryption
85:17:22:b5:41:1e:d8:75:29:bb:59:02:30:a5:08:20:aa:de:
97:df:f6:2f:62:c5:4e:89:d3:6c:25:ab:6c:93:dc:17:a3:ff:
3b:05:fb:5d:6e:a1:17:9d:1f:b6:6c:b4:be:aa:52:0b:9f:10:
9c:0b:25:c3:d7:1a:e0:eb:a4:e5:0f:64:99:ba:8e:b1:f4:9d:
35:50:0e:17:54:03:35:86:e9:29:53:14:77:46:12:2a:ec:99:
0a:6a:a1:79:9f:2c:25:a4:3a:58:81:a4:d8:a0:77:e4:1c:fd:
8d:eb:51:6d:c9:88:3f:bf:25:0e:27:81:50:b4:61:81:a6:89:
e2:73:c8:30:b1:ee:58:2e:88:55:ad:d6:f5:d7:c4:98:a6:3b:
94:3b:a7:5a:47:b5:af:4d:99:58:f4:c6:63:e7:02:c2:86:9c:
56:fb:ed:a6:96:f7:e3:d7:ed:2d:d4:51:0c:7b:f3:75:64:2a:
81:c9:02:71:d4:59:78:a5:c8:98:42:6f:57:c0:6e:8c:ec:34:
e1:77:ce:bc:55:91:28:5c:be:8e:84:3a:53:92:ba:df:20:20:
1f:ca:9c:f9:9e:5a:81:8b:b2:bf:e8:09:9a:96:cb:2d:9d:81:
39:0a:2a:23:17:9d:8a:19:f0:29:b9:4b:5d:c4:c8:59:9e:68:
f3:5a:d6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:03:43 2025 by rpki-client