Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/_tUXooY9b06bDKDjgo1P9zjilGI.roa
File: _tUXooY9b06bDKDjgo1P9zjilGI.roa (raw, json)
Hash identifier: eyE2Sp1NPUfSOv01mHhVH2OIahlIo+oZSctInWb+NT4=
Subject key identifier: FE:D5:17:A2:86:3D:6F:4E:9B:0C:A0:E3:82:8D:4F:F7:38:E2:94:62
Certificate issuer: /CN=27ff20440ba698a4dc0439bc179fb33a3ee1cc95
Certificate serial: 01942747E35FB90F6BBE25E4DA615CC4645E
Authority key identifier: 27:FF:20:44:0B:A6:98:A4:DC:04:39:BC:17:9F:B3:3A:3E:E1:CC:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_8gRAummKTcBDm8F5-zOj7hzJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/_tUXooY9b06bDKDjgo1P9zjilGI.roa
Signing time: Thu 02 Jan 2025 13:50:10 +0000
ROA not before: Thu 02 Jan 2025 13:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44738
IP address blocks: 195.28.4.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_8gRAummKTcBDm8F5-zOj7hzJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:e3:5f:b9:0f:6b:be:25:e4:da:61:5c:c4:64:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27ff20440ba698a4dc0439bc179fb33a3ee1cc95
Validity
Not Before: Jan 2 13:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fed517a2863d6f4e9b0ca0e3828d4ff738e29462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c8:03:71:d8:56:9a:5b:4c:57:b8:15:5d:af:
93:f9:88:e8:0e:1e:f2:4b:3b:42:06:5c:18:d8:a7:
60:ec:41:16:9f:48:c5:a9:f8:e8:12:73:0c:b7:7f:
39:83:76:c9:d7:14:7c:bd:0f:45:12:8a:d4:ce:e4:
a7:49:4a:e7:49:5c:01:78:7a:32:b9:63:4f:54:b4:
9c:3a:44:5e:98:09:c2:58:e0:bb:b1:4b:27:0b:90:
7b:58:be:c0:27:90:a6:e6:2a:79:57:98:bb:9a:f6:
36:a6:4b:fb:32:76:6b:59:7c:3c:38:6a:75:f3:7b:
6f:aa:91:3c:4a:8a:90:fb:c3:08:d6:90:2c:c9:f2:
6a:69:2d:9d:2f:65:4d:f5:ec:0d:fa:75:5a:ae:78:
0b:1f:ad:91:a4:57:c7:21:24:29:3d:61:46:31:37:
e0:4f:5a:ce:42:6f:46:40:aa:4d:69:fc:45:6d:bc:
8b:1f:bb:2a:15:3f:3d:23:4b:59:da:8e:15:c3:8d:
70:a6:b5:0e:c7:c1:1f:4d:92:de:67:33:b6:9f:61:
49:44:ce:5b:1a:67:f3:9d:38:71:82:15:9b:6f:cf:
f0:8c:03:07:91:69:0b:fc:b2:93:13:22:62:96:18:
5f:b4:24:8b:e5:42:e9:a1:34:c8:0b:bf:52:31:32:
6e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D5:17:A2:86:3D:6F:4E:9B:0C:A0:E3:82:8D:4F:F7:38:E2:94:62
X509v3 Authority Key Identifier:
keyid:27:FF:20:44:0B:A6:98:A4:DC:04:39:BC:17:9F:B3:3A:3E:E1:CC:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_8gRAummKTcBDm8F5-zOj7hzJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/_tUXooY9b06bDKDjgo1P9zjilGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.28.4.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:46:43:b4:2e:d9:2c:6b:70:d7:ec:9b:11:31:1f:12:d7:10:
79:f5:a0:62:09:9d:f2:fa:cf:eb:27:43:21:3d:a9:bb:43:65:
2e:0e:5c:37:0e:fa:04:22:ea:03:d0:ac:b4:38:a8:7d:8a:85:
da:c5:bf:40:10:bb:11:ba:e8:70:e5:0c:0a:e9:09:77:07:3a:
4e:e9:83:b8:b8:81:21:3b:70:f5:4c:1c:2a:68:d4:eb:89:af:
0c:76:a8:33:1b:0b:86:21:94:e1:0d:11:08:43:fc:2d:2b:6d:
5b:11:9f:45:9b:9c:6c:cd:6f:be:e9:2c:ed:08:3a:86:61:44:
d2:39:9f:a8:e4:28:0f:ed:c6:82:fa:a9:c2:61:9d:44:46:90:
26:95:5a:85:f9:c2:c9:e5:df:a8:36:fd:ae:5e:6e:35:7e:db:
2b:d7:cf:81:18:c1:e6:13:f6:c8:ed:e7:b0:9f:cc:3f:95:73:
75:50:c3:a9:8c:eb:29:82:9f:23:de:1b:ce:7c:e7:9c:9a:f1:
44:71:68:73:75:34:ee:a6:26:77:2d:04:e3:44:e2:77:c9:62:
bd:43:22:f5:7e:92:ef:dd:53:a0:a7:13:f9:2d:e2:9a:8d:3c:
2f:f4:41:40:ba:d7:0d:98:da:e0:9d:40:9b:96:bb:07:64:ac:
dd:a9:05:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:58:47 2025 by rpki-client