Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/tgyZkzPX7bihftRh5146EqjAV6A.roa
File: tgyZkzPX7bihftRh5146EqjAV6A.roa (raw, json)
Hash identifier: L1eC4dA0U4fTfxsmRjGD9jUtXUFmiIJqlEhkJQO47Ck=
Subject key identifier: B6:0C:99:93:33:D7:ED:B8:A1:7E:D4:61:E7:5E:3A:12:A8:C0:57:A0
Certificate issuer: /CN=1ec0434a5c3cf2374ca360331926ae7d24ac345b
Certificate serial: 019426D952071F85AF4BBBA8E13D3F24F925
Authority key identifier: 1E:C0:43:4A:5C:3C:F2:37:4C:A3:60:33:19:26:AE:7D:24:AC:34:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/tgyZkzPX7bihftRh5146EqjAV6A.roa
Signing time: Thu 02 Jan 2025 11:49:23 +0000
ROA not before: Thu 02 Jan 2025 11:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 185.201.20.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:52:07:1f:85:af:4b:bb:a8:e1:3d:3f:24:f9:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ec0434a5c3cf2374ca360331926ae7d24ac345b
Validity
Not Before: Jan 2 11:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b60c999333d7edb8a17ed461e75e3a12a8c057a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:25:80:90:64:18:14:39:7f:94:c3:90:dd:61:
ed:04:6e:50:b5:af:6f:27:e5:e9:e8:9e:cb:7f:17:
f6:22:df:07:2e:52:6a:af:78:17:14:40:0d:56:a2:
06:7c:ff:c2:34:c3:3e:77:4b:42:97:6e:09:1a:0a:
8d:dc:80:bb:a1:9c:72:c9:e6:e9:cf:51:3b:16:71:
96:48:c1:f4:f1:60:f6:26:5c:75:8c:5c:83:36:2b:
e7:21:4e:2e:52:56:35:cc:8d:29:f2:83:29:38:55:
d5:71:d7:af:34:e3:6f:89:51:80:e7:b0:bb:0e:7c:
37:23:b0:1e:48:0e:37:fa:e8:79:c4:b7:1a:f6:1f:
1f:5f:13:9c:98:3f:f3:22:71:04:38:b7:4d:26:8e:
5c:cf:48:f0:4f:4a:c4:26:1f:3d:62:ab:48:a3:02:
67:b2:a3:b8:f3:4a:d7:57:6f:22:f8:e6:bd:82:4d:
36:89:92:0a:85:95:5d:9e:0e:72:50:ba:43:0b:cf:
6e:ab:1f:13:d8:49:62:87:a0:3f:c1:79:94:c9:e9:
d6:61:c8:a1:1a:ad:73:2f:29:c8:d9:b7:9e:67:71:
c1:76:ed:81:1e:bf:3b:ee:da:df:cc:3d:99:7b:0b:
49:01:78:3c:42:bd:23:6d:09:87:c6:fc:c8:03:b3:
54:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:0C:99:93:33:D7:ED:B8:A1:7E:D4:61:E7:5E:3A:12:A8:C0:57:A0
X509v3 Authority Key Identifier:
keyid:1E:C0:43:4A:5C:3C:F2:37:4C:A3:60:33:19:26:AE:7D:24:AC:34:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/tgyZkzPX7bihftRh5146EqjAV6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.20.0/22
Signature Algorithm: sha256WithRSAEncryption
00:ea:42:52:b3:46:22:81:70:18:44:20:f3:8a:5f:2d:72:38:
de:0e:65:d0:ab:7f:aa:2c:d4:a4:5b:c7:8c:02:96:c6:9b:d3:
0a:2e:15:5c:85:f6:e6:fa:ca:e1:5c:85:8d:68:01:b1:96:06:
ab:f3:dd:a7:fc:72:98:23:b7:9d:c1:b8:ef:0a:de:31:f6:a9:
70:e1:3e:65:98:29:4d:b4:ac:61:77:b7:a3:45:20:89:2f:f9:
1e:4a:31:01:42:d5:77:3a:3c:43:f4:f4:dd:ef:6b:5f:56:38:
79:71:f3:d2:39:dc:0e:60:ae:13:1b:45:6e:ed:c5:2b:a0:1a:
64:7f:07:31:af:59:60:bf:f6:41:7e:7c:c4:6e:26:51:c0:ee:
f6:3a:49:73:fa:76:c4:ed:fa:3b:31:7f:92:30:e6:fb:1d:cc:
c1:21:90:1d:b9:ce:71:04:88:a3:29:01:10:ab:6c:b6:1a:ab:
1e:68:42:71:f5:9f:3a:ea:1d:eb:d3:5a:51:6a:85:66:30:07:
b3:ec:e1:15:73:24:3a:f5:ad:cd:af:ae:5c:4e:71:03:aa:28:
f9:c2:dd:50:5b:9a:95:d1:f2:1d:ab:21:65:2a:ed:a2:70:02:
b4:86:10:a2:47:f9:10:75:82:d9:51:09:dd:e8:b5:63:08:48:
a7:b3:a7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:01 2025 by rpki-client