Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/Tkqht9ZvM7aeuWPx5RB29sIJQsY.roa
File: Tkqht9ZvM7aeuWPx5RB29sIJQsY.roa (raw, json)
Hash identifier: GjW60rpkATBwTZcA2wdYPAVMSlJOCTBR0jsl1OrgYgE=
Subject key identifier: 4E:4A:A1:B7:D6:6F:33:B6:9E:B9:63:F1:E5:10:76:F6:C2:09:42:C6
Certificate issuer: /CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd
Certificate serial: 019427B691EF0EF6EA5ED8016D09548D11E5
Authority key identifier: 91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/Tkqht9ZvM7aeuWPx5RB29sIJQsY.roa
Signing time: Thu 02 Jan 2025 15:51:03 +0000
ROA not before: Thu 02 Jan 2025 15:51:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57551
IP address blocks: 82.112.174.0/24 maxlen: 24
82.112.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:91:ef:0e:f6:ea:5e:d8:01:6d:09:54:8d:11:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd
Validity
Not Before: Jan 2 15:51:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e4aa1b7d66f33b69eb963f1e51076f6c20942c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:06:4c:79:a9:4c:d3:9d:e9:5e:2c:9d:c6:df:
9f:42:44:2a:52:ed:e7:8c:c4:95:e5:11:17:61:18:
2f:df:f1:59:c9:29:3e:a1:4e:5f:da:2c:7d:77:1e:
f9:16:c1:94:3e:2a:cb:74:c2:e4:cc:4f:c6:07:f3:
3c:9c:4b:ff:55:15:97:a9:f1:34:5f:77:9c:4a:f7:
14:04:1d:51:da:7a:1c:2f:62:67:f5:b6:ea:a8:ea:
cf:3a:b0:24:e2:b0:8b:50:a3:0f:ab:62:1f:74:47:
57:3a:3f:f8:4d:e7:5a:b1:fe:87:da:de:2c:94:93:
ac:1c:47:fc:d0:c3:d6:53:97:49:fd:d2:dc:c5:e1:
c1:98:a7:67:55:9b:8e:85:c8:41:da:8e:ca:27:7c:
69:c9:d8:ea:5b:dc:f1:3e:7f:d0:af:01:ce:93:d1:
f7:71:ec:0f:0d:bd:6c:c0:f2:46:71:a6:0b:d0:c0:
7b:9f:89:5d:54:29:96:d6:b0:4f:4a:8a:2f:89:b6:
4f:c8:5a:ff:0c:b0:09:68:a5:11:1a:73:b4:be:54:
c3:a0:3e:09:99:8f:22:f3:61:72:01:b3:59:5a:fb:
3e:56:3e:67:84:e3:b4:51:03:46:56:6d:3b:88:49:
0d:4c:4d:d3:2c:c2:ca:3a:41:e2:5f:62:03:09:0c:
fe:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:4A:A1:B7:D6:6F:33:B6:9E:B9:63:F1:E5:10:76:F6:C2:09:42:C6
X509v3 Authority Key Identifier:
keyid:91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/Tkqht9ZvM7aeuWPx5RB29sIJQsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.112.174.0/23
Signature Algorithm: sha256WithRSAEncryption
78:8e:ee:a9:92:f6:a9:dd:9f:8a:58:7e:99:0e:fa:ff:d4:68:
bd:19:96:03:dc:26:8e:d4:65:0d:a6:03:4f:85:0e:03:6e:84:
19:df:41:de:02:d4:b5:93:66:18:6e:9d:da:b6:99:02:a4:3c:
a7:cb:f6:f1:31:fe:94:85:bd:7d:78:e5:3a:92:17:b0:9c:69:
4f:b3:df:b0:69:2d:88:54:51:18:48:70:85:ef:d3:93:43:2c:
05:21:d7:7f:4f:93:49:22:62:aa:5a:d3:d3:a7:9f:80:1d:03:
d5:08:ab:99:6e:29:0f:51:22:d5:ec:55:42:da:34:e8:47:c8:
d2:b2:39:fd:d4:bc:91:ed:d0:6f:43:29:2c:43:7f:ca:e0:ee:
f2:b7:ee:8d:57:41:0a:93:13:30:77:63:74:e2:10:f6:6d:4b:
b8:75:db:6e:c1:cf:3c:b3:5d:84:b3:cf:90:38:c2:b8:7f:d7:
a3:30:46:59:d9:53:fe:eb:c8:36:d3:7e:05:15:fb:00:67:c2:
a4:37:36:64:a3:2f:fd:db:05:a9:a4:2b:91:80:c9:a6:26:a9:
d0:d3:b7:bf:96:a1:21:2b:0c:d1:00:35:e8:95:b7:b8:f6:a7:
39:93:40:25:93:18:f7:1d:77:89:cf:bc:a6:b7:32:a9:8e:1a:
19:f4:f0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:39 2025 by rpki-client