Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/TCJElgSSWTdNPCx4HtGVjoR5OHE.roa
File: TCJElgSSWTdNPCx4HtGVjoR5OHE.roa (raw, json)
Hash identifier: qYI1zk90mfrJGyeYZUA0ZHtzOK7fZWd1alNZdeo0gHI=
Subject key identifier: 4C:22:44:96:04:92:59:37:4D:3C:2C:78:1E:D1:95:8E:84:79:38:71
Certificate issuer: /CN=a2074339bb216b85bdc83d61778821adf9149d56
Certificate serial: 01941FFA99A519753C0EAB57F3EE0516F273
Authority key identifier: A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/TCJElgSSWTdNPCx4HtGVjoR5OHE.roa
Signing time: Wed 01 Jan 2025 03:48:24 +0000
ROA not before: Wed 01 Jan 2025 03:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200548
IP address blocks: 84.39.96.0/21 maxlen: 24
2a01:b1c1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:99:a5:19:75:3c:0e:ab:57:f3:ee:05:16:f2:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2074339bb216b85bdc83d61778821adf9149d56
Validity
Not Before: Jan 1 03:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c224496049259374d3c2c781ed1958e84793871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e9:36:81:6a:74:cc:19:8e:59:ac:d9:96:3f:
54:fc:d5:02:14:ac:29:31:d2:6a:71:3e:34:77:8f:
df:dd:3f:d5:8c:9c:08:ae:db:d0:9e:ce:d2:65:c5:
36:3f:0f:66:ac:14:1d:ab:cc:bd:1c:47:5c:bc:17:
92:d0:86:bb:4a:bc:b5:b0:1b:ff:fa:d1:7d:98:a3:
f8:d5:24:14:dd:a6:9e:11:13:0d:3c:39:4f:47:5b:
03:ea:84:de:2d:12:b9:61:1d:3c:39:2e:60:a5:27:
dc:5d:d4:8f:3d:77:9f:da:d1:47:ef:3e:05:03:72:
7f:36:7d:e8:5c:cd:51:8b:8b:6e:8f:c9:53:b3:d0:
7d:dd:b7:b4:db:8f:93:1e:dd:6c:c2:7e:de:e0:ce:
4f:03:63:74:fb:09:d6:a4:92:8b:24:3a:8c:1b:19:
67:9b:cd:98:c3:31:d3:2b:58:d3:74:60:91:7f:8c:
78:50:72:1e:52:34:10:cd:35:1c:ea:93:4b:11:5f:
ff:c1:0f:ef:91:89:0f:e8:0b:10:f3:b9:f9:ff:a7:
4a:10:c7:e4:fb:c3:85:db:6b:cf:1a:b5:ed:d6:83:
fb:dc:4d:62:91:5f:18:41:11:57:bd:87:b9:61:3e:
6d:0a:cb:c6:8d:3d:ce:e2:38:58:e5:da:b9:fd:36:
c2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:22:44:96:04:92:59:37:4D:3C:2C:78:1E:D1:95:8E:84:79:38:71
X509v3 Authority Key Identifier:
keyid:A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/TCJElgSSWTdNPCx4HtGVjoR5OHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.39.96.0/21
IPv6:
2a01:b1c1::/32
Signature Algorithm: sha256WithRSAEncryption
6b:17:a6:b8:0a:8c:3e:6d:07:9e:29:04:81:d0:e8:3b:23:3b:
24:3a:ef:80:26:63:fe:b8:05:e7:8a:f1:c8:cd:53:7c:93:60:
e9:51:f3:fe:04:3f:60:11:ad:73:f3:62:f1:39:a5:20:f2:0c:
a8:17:fe:9d:d7:8d:d2:97:00:c6:6e:50:5e:d3:2c:fd:90:d2:
bc:39:bb:21:b5:e4:74:68:a5:39:80:7e:76:58:e1:86:be:79:
ac:de:e5:3a:03:6f:0f:dc:a8:fd:aa:b1:23:06:64:fd:50:02:
65:ed:34:3e:0d:51:a4:d6:52:3d:fb:70:6b:c6:35:57:fe:90:
13:6e:2f:49:5c:8d:cf:f9:67:94:6c:31:b2:b5:87:2c:fd:b1:
84:10:8c:75:51:22:e2:5d:57:05:af:84:e3:dc:7b:3a:35:4f:
82:9f:7f:ab:66:30:b4:8c:88:dc:f8:2b:21:fa:ba:66:ad:2d:
13:2a:8a:ba:98:76:24:0e:30:ac:cc:b2:07:48:1f:44:cb:7d:
65:7f:22:09:61:b1:0c:e2:2c:fb:1d:6d:17:24:0f:57:5e:76:
49:bd:22:b7:4d:51:c9:44:9b:fd:a0:d2:93:38:17:17:63:08:
05:ef:33:5e:de:af:cc:55:87:92:c7:62:95:b9:ae:0b:31:d9:
c4:64:34:30
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQf+pmlGXU8DqtX8+4FFvJzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMDc0MzM5YmIyMTZiODViZGM4M2Q2MTc3ODgyMWFkZjkx
NDlkNTYwHhcNMjUwMTAxMDM0ODI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzIyNDQ5NjA0OTI1OTM3NGQzYzJjNzgxZWQxOTU4ZTg0NzkzODcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuek2gWp0zBmOWazZlj9U/NUCFKwp
MdJqcT40d4/f3T/VjJwIrtvQns7SZcU2Pw9mrBQdq8y9HEdcvBeS0Ia7Sry1sBv/
+tF9mKP41SQU3aaeERMNPDlPR1sD6oTeLRK5YR08OS5gpSfcXdSPPXef2tFH7z4F
A3J/Nn3oXM1Ri4tuj8lTs9B93be024+THt1swn7e4M5PA2N0+wnWpJKLJDqMGxln
m82YwzHTK1jTdGCRf4x4UHIeUjQQzTUc6pNLEV//wQ/vkYkP6AsQ87n5/6dKEMfk
+8OF22vPGrXt1oP73E1ikV8YQRFXvYe5YT5tCsvGjT3O4jhY5dq5/TbCpQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFEwiRJYEklk3TTwseB7RlY6EeThxMB8GA1UdIwQY
MBaAFKIHQzm7IWuFvcg9YXeIIa35FJ1WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2dkRE9ic2hhNFc5eUQxaGQ0Z2hyZmtVblZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81NzFiMzQtYWNmOS00ZWJmLTk4OGIt
MGZlYjY2ZTdmMjhhLzEvVENKRWxnU1NXVGROUEN4NEh0R1Zqb1I1T0hFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy81NzFiMzQtYWNmOS00ZWJmLTk4OGItMGZlYjY2ZTdmMjhh
LzEvb2dkRE9ic2hhNFc5eUQxaGQ0Z2hyZmtVblZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDVCdgMA0E
AgACMAcDBQAqAbHBMA0GCSqGSIb3DQEBCwUAA4IBAQBrF6a4Cow+bQeeKQSB0Og7
IzskOu+AJmP+uAXnivHIzVN8k2DpUfP+BD9gEa1z82LxOaUg8gyoF/6d143SlwDG
blBe0yz9kNK8ObshteR0aKU5gH52WOGGvnms3uU6A28P3Kj9qrEjBmT9UAJl7TQ+
DVGk1lI9+3BrxjVX/pATbi9JXI3P+WeUbDGytYcs/bGEEIx1USLiXVcFr4Tj3Hs6
NU+Cn3+rZjC0jIjc+Csh+rpmrS0TKoq6mHYkDjCszLIHSB9Ey31lfyIJYbEM4iz7
HW0XJA9XXnZJvSK3TVHJRJv9oNKTOBcXYwgF7zNe3q/MVYeSx2KVua4LMdnEZDQw
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:20 2025 by rpki-client