Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/TsGqxUBkJwOPQAWoVKR2AEF1ans.roa
File: TsGqxUBkJwOPQAWoVKR2AEF1ans.roa (raw, json)
Hash identifier: uv2TTIYvJgqngCKe+XNr+deXWi65MhBACHmWx2No1ag=
Subject key identifier: 4E:C1:AA:C5:40:64:27:03:8F:40:05:A8:54:A4:76:00:41:75:6A:7B
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 01941FFA910C179C29B2E8638ABD3E723D7E
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/TsGqxUBkJwOPQAWoVKR2AEF1ans.roa
Signing time: Wed 01 Jan 2025 03:48:22 +0000
ROA not before: Wed 01 Jan 2025 03:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211440
IP address blocks: 185.65.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:91:0c:17:9c:29:b2:e8:63:8a:bd:3e:72:3d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jan 1 03:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ec1aac5406427038f4005a854a4760041756a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e5:98:73:3d:4e:95:c3:bd:0b:76:ac:24:6a:
f8:a7:ed:d9:5f:78:70:9b:94:cc:e2:b9:d3:40:4b:
54:33:82:e4:e8:58:05:ea:84:3c:78:f1:fe:8f:45:
67:96:21:47:40:38:7b:f6:c0:d1:33:17:07:be:0f:
98:81:1e:3a:ac:24:40:a7:66:80:e6:34:b6:20:e3:
0a:f7:bb:b2:65:4a:b7:1b:51:d3:e2:71:2b:05:4f:
3f:16:7c:27:cb:8d:4c:7e:a3:f3:a4:67:60:03:38:
a2:15:63:f1:0e:6d:42:27:e4:6f:d3:95:9c:8f:39:
09:e7:89:87:54:82:09:2d:c5:54:37:73:bb:f4:69:
29:78:88:88:d3:42:68:7a:b8:6f:77:8c:f2:d4:3c:
9a:e0:29:82:92:15:c9:ed:17:9b:7f:c9:dc:e1:bb:
84:be:35:c9:72:32:45:f4:58:ca:d0:08:02:6b:b9:
f3:0d:99:47:71:92:6a:a1:d7:63:f6:b3:4d:1e:3c:
90:f0:86:71:b6:9b:9d:c6:31:b3:ee:4e:15:36:5e:
cd:b4:9f:da:ad:9b:0d:53:b9:6c:42:a9:34:95:c7:
c7:8a:ce:a7:68:93:4b:d4:76:a4:75:89:d0:a2:ee:
94:c7:ee:91:44:b9:c6:4b:cd:69:6f:46:4d:7b:5c:
5e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C1:AA:C5:40:64:27:03:8F:40:05:A8:54:A4:76:00:41:75:6A:7B
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/TsGqxUBkJwOPQAWoVKR2AEF1ans.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.63.0/24
Signature Algorithm: sha256WithRSAEncryption
03:5f:61:06:8b:8a:e4:76:d3:f6:cb:59:62:60:e2:51:3d:83:
3e:d4:e0:d8:b7:18:60:2d:ac:8b:2f:f1:b2:52:87:6f:3f:3a:
1d:dc:9d:03:14:81:64:99:eb:b6:cf:22:2c:38:27:f5:d8:fd:
6d:18:9d:e8:e6:65:58:dd:52:76:92:60:57:57:0c:30:4d:7b:
59:ae:03:ca:dd:5b:1f:41:9d:50:f9:20:e6:3c:2a:2e:17:b8:
9a:c5:1b:7b:4c:d2:92:b9:f3:cc:38:b9:fc:cc:63:35:15:5a:
13:b6:02:da:40:c6:18:09:15:f5:8c:a1:fa:7c:bb:f6:b5:17:
ce:a5:2f:ff:ac:1c:c1:5a:15:a7:e1:d9:c8:50:d0:0e:f7:10:
d5:37:73:c0:8b:f7:b7:02:12:16:3d:bd:62:5b:1c:70:d6:1d:
35:0f:df:db:e8:99:13:89:91:63:27:c2:37:cc:09:d0:3f:0a:
d4:01:17:f4:a8:77:c5:7b:89:a0:5c:37:72:40:61:30:af:43:
fc:47:08:cd:21:2b:2c:65:56:f0:77:f8:9c:f1:91:05:59:81:
84:63:71:66:37:fc:8a:30:cd:64:c0:69:f0:1f:8b:fa:87:a6:
2f:e7:ff:d7:f8:28:c5:bd:c1:36:1e:0e:51:ca:2e:23:81:72:
e0:8a:b2:8f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+pEMF5wpsuhjir0+cj1+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNzVlNGU5NGI1Y2I3NDUxN2I3YjAxNTY4MDE1ZGE5ZTZl
ZWNkYjYwHhcNMjUwMTAxMDM0ODIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZWMxYWFjNTQwNjQyNzAzOGY0MDA1YTg1NGE0NzYwMDQxNzU2YTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuWYcz1OlcO9C3asJGr4p+3ZX3hw
m5TM4rnTQEtUM4Lk6FgF6oQ8ePH+j0VnliFHQDh79sDRMxcHvg+YgR46rCRAp2aA
5jS2IOMK97uyZUq3G1HT4nErBU8/Fnwny41MfqPzpGdgAziiFWPxDm1CJ+Rv05Wc
jzkJ54mHVIIJLcVUN3O79GkpeIiI00Joerhvd4zy1Dya4CmCkhXJ7Rebf8nc4buE
vjXJcjJF9FjK0AgCa7nzDZlHcZJqoddj9rNNHjyQ8IZxtpudxjGz7k4VNl7NtJ/a
rZsNU7lsQqk0lcfHis6naJNL1HakdYnQou6Ux+6RRLnGS81pb0ZNe1xeoQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE7BqsVAZCcDj0AFqFSkdgBBdWp7MB8GA1UdIwQY
MBaAFG915OlLXLdFF7ewFWgBXanm7s22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzIt
NjY0NTc3MjRjMmQzLzEvVHNHcXhVQmtKd09QUUFXb1ZLUjJBRUYxYW5zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzItNjY0NTc3MjRjMmQz
LzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUE/MA0G
CSqGSIb3DQEBCwUAA4IBAQADX2EGi4rkdtP2y1liYOJRPYM+1ODYtxhgLayLL/Gy
UodvPzod3J0DFIFkmeu2zyIsOCf12P1tGJ3o5mVY3VJ2kmBXVwwwTXtZrgPK3Vsf
QZ1Q+SDmPCouF7iaxRt7TNKSufPMOLn8zGM1FVoTtgLaQMYYCRX1jKH6fLv2tRfO
pS//rBzBWhWn4dnIUNAO9xDVN3PAi/e3AhIWPb1iWxxw1h01D9/b6JkTiZFjJ8I3
zAnQPwrUARf0qHfFe4mgXDdyQGEwr0P8RwjNISssZVbwd/ic8ZEFWYGEY3FmN/yK
MM1kwGnwH4v6h6Yv5//X+CjFvcE2Hg5Ryi4jgXLgirKP
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:27:26 2025 by rpki-client