Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/TORlgt1u7648Spjd4ILCDKgsUno.roa
File: TORlgt1u7648Spjd4ILCDKgsUno.roa (raw, json)
Hash identifier: QW0T8pY94OKXHnQ5xfDyn/tCVhCBjDeJm94bgSBXBGU=
Subject key identifier: 4C:E4:65:82:DD:6E:EF:AE:3C:4A:98:DD:E0:82:C2:0C:A8:2C:52:7A
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 01941FFA85FDB096C8F731A84FDEB7390F49
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/TORlgt1u7648Spjd4ILCDKgsUno.roa
Signing time: Wed 01 Jan 2025 03:48:19 +0000
ROA not before: Wed 01 Jan 2025 03:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9087
IP address blocks: 176.221.30.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:85:fd:b0:96:c8:f7:31:a8:4f:de:b7:39:0f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jan 1 03:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ce46582dd6eefae3c4a98dde082c20ca82c527a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:68:81:4f:18:1e:a8:56:88:ed:6d:04:31:2b:
45:69:36:b0:45:f9:27:0e:d7:94:21:5a:96:fc:82:
8f:df:dc:4e:35:f1:44:69:0e:00:fa:a4:ce:f1:81:
14:1d:5b:b5:2b:2e:ba:85:12:db:25:95:6f:f0:cc:
ee:da:40:ba:c5:3a:59:f0:e7:ba:1f:d8:ad:e4:73:
26:c2:5e:e8:e2:98:60:bb:fb:42:ed:bb:c3:63:e6:
1d:0c:cf:b5:79:b6:cc:e6:b6:f8:ee:98:34:0c:d8:
d7:8b:0f:66:52:19:ec:6b:c2:20:2c:15:37:99:8a:
a0:d3:1e:04:a5:60:5f:d1:1a:be:4a:b6:97:d5:11:
ad:0c:46:73:09:a8:c6:d4:79:2a:23:f7:c8:ef:6b:
bf:a8:3c:36:4e:40:67:5f:c0:be:9a:83:dd:bd:37:
4e:0b:a4:60:59:2a:eb:24:85:22:bc:34:bc:20:e9:
fa:12:04:87:48:f8:2d:d8:b0:d9:88:c1:70:bb:8c:
95:d7:06:6d:aa:0f:73:e1:0b:97:80:21:86:b9:f3:
f5:98:18:35:3b:da:3d:75:2d:90:c9:af:b4:95:6d:
75:20:f4:83:5b:72:5c:65:e3:6f:b4:f3:4c:35:1c:
e4:24:c7:ed:3d:e1:8d:00:c0:1b:95:54:02:94:bf:
62:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E4:65:82:DD:6E:EF:AE:3C:4A:98:DD:E0:82:C2:0C:A8:2C:52:7A
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/TORlgt1u7648Spjd4ILCDKgsUno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.221.30.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:12:81:b8:ca:41:24:90:36:6c:52:97:05:46:87:79:36:7f:
6b:15:3c:f4:bd:fd:28:57:0e:40:3c:c1:55:bc:db:d7:f9:7f:
ca:c6:92:90:82:40:88:65:ff:59:41:f2:28:0d:6d:38:d4:fc:
c7:74:0a:25:b2:f1:96:54:7c:aa:fd:b0:30:4e:41:ed:9c:04:
74:a6:a7:de:6e:23:e4:f0:83:2d:4a:13:8c:db:ec:c7:88:98:
94:c1:a7:64:ae:da:5d:14:73:ff:6b:06:fe:c0:49:97:05:f6:
be:21:3d:74:dd:64:c3:19:57:8c:53:16:d1:35:d0:b8:86:d2:
20:08:ff:a0:2c:1a:59:6a:ba:3e:26:29:24:74:c6:e4:d2:bc:
d3:02:34:68:33:49:be:f4:99:e2:8a:05:de:54:b9:da:d1:68:
75:62:7e:79:cd:64:b2:71:bc:f3:00:40:fd:5e:1a:6c:8f:03:
1b:64:27:f8:52:0f:4f:d8:3d:99:b7:de:dc:a6:d3:3a:2f:c6:
f6:07:1c:80:13:b2:7b:29:11:22:f1:69:b3:11:e0:75:dd:9b:
6d:35:ce:a0:98:2d:36:f7:77:a5:e1:4f:74:03:a8:41:ae:0e:
76:1c:a8:a7:60:52:74:c3:ad:87:5d:5d:6d:ce:ed:9f:51:7a:
31:48:1e:07
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+oX9sJbI9zGoT963OQ9JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNzVlNGU5NGI1Y2I3NDUxN2I3YjAxNTY4MDE1ZGE5ZTZl
ZWNkYjYwHhcNMjUwMTAxMDM0ODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Y2U0NjU4MmRkNmVlZmFlM2M0YTk4ZGRlMDgyYzIwY2E4MmM1MjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWiBTxgeqFaI7W0EMStFaTawRfkn
DteUIVqW/IKP39xONfFEaQ4A+qTO8YEUHVu1Ky66hRLbJZVv8Mzu2kC6xTpZ8Oe6
H9it5HMmwl7o4phgu/tC7bvDY+YdDM+1ebbM5rb47pg0DNjXiw9mUhnsa8IgLBU3
mYqg0x4EpWBf0Rq+SraX1RGtDEZzCajG1HkqI/fI72u/qDw2TkBnX8C+moPdvTdO
C6RgWSrrJIUivDS8IOn6EgSHSPgt2LDZiMFwu4yV1wZtqg9z4QuXgCGGufP1mBg1
O9o9dS2Qya+0lW11IPSDW3JcZeNvtPNMNRzkJMftPeGNAMAblVQClL9iNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEzkZYLdbu+uPEqY3eCCwgyoLFJ6MB8GA1UdIwQY
MBaAFG915OlLXLdFF7ewFWgBXanm7s22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzIt
NjY0NTc3MjRjMmQzLzEvVE9SbGd0MXU3NjQ4U3BqZDRJTENES2dzVW5vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzItNjY0NTc3MjRjMmQz
LzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsN0eMA0G
CSqGSIb3DQEBCwUAA4IBAQCeEoG4ykEkkDZsUpcFRod5Nn9rFTz0vf0oVw5APMFV
vNvX+X/KxpKQgkCIZf9ZQfIoDW041PzHdAolsvGWVHyq/bAwTkHtnAR0pqfebiPk
8IMtShOM2+zHiJiUwadkrtpdFHP/awb+wEmXBfa+IT103WTDGVeMUxbRNdC4htIg
CP+gLBpZaro+JikkdMbk0rzTAjRoM0m+9JniigXeVLna0Wh1Yn55zWSycbzzAED9
XhpsjwMbZCf4Ug9P2D2Zt97cptM6L8b2BxyAE7J7KREi8WmzEeB13ZttNc6gmC02
93el4U90A6hBrg52HKinYFJ0w62HXV1tzu2fUXoxSB4H
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:26:43 2025 by rpki-client