Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/TOwkSF1eSoJ34IlY_sAL_d7dGPQ.roa
File: TOwkSF1eSoJ34IlY_sAL_d7dGPQ.roa (raw, json)
Hash identifier: qgQJ65sybbMwGBkmkMyc9apxITp5UjZu3/AIRYjPkjQ=
Subject key identifier: 4C:EC:24:48:5D:5E:4A:82:77:E0:89:58:FE:C0:0B:FD:DE:DD:18:F4
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019427472AE51F17B9B4C0C0594C43C15E39
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/TOwkSF1eSoJ34IlY_sAL_d7dGPQ.roa
Signing time: Thu 02 Jan 2025 13:49:22 +0000
ROA not before: Thu 02 Jan 2025 13:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51791
IP address blocks: 185.88.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:2a:e5:1f:17:b9:b4:c0:c0:59:4c:43:c1:5e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jan 2 13:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4cec24485d5e4a8277e08958fec00bfddedd18f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:cd:15:d1:48:cf:f4:8b:3f:8b:39:8b:93:a9:
f9:94:fe:45:96:a3:3d:d2:86:17:c7:67:9c:ae:b9:
46:e7:39:76:63:a8:67:c6:31:71:f9:6b:e9:9c:c9:
5f:4a:5d:a5:b9:2f:09:41:e9:b3:51:32:b7:5c:b0:
c4:0a:f2:fe:f5:2d:63:56:04:8c:29:4e:3a:5b:b7:
83:e4:0e:4f:ff:6a:36:b1:08:ca:ab:f2:a8:13:b9:
36:09:48:0f:f2:f4:be:1b:d0:f1:f2:f3:27:a0:c6:
b9:0c:45:54:d6:cd:ff:38:a3:84:00:b4:8d:13:09:
e2:5f:a3:2c:b8:a6:48:25:7c:e3:75:80:33:69:2e:
fe:a7:bc:70:5f:30:a2:53:32:43:1a:b0:1f:3f:39:
fd:87:20:5a:69:1e:cb:f6:40:6f:d0:25:30:36:46:
92:09:bf:08:8d:7d:35:6d:d8:c6:02:6f:58:35:f8:
9c:e1:47:d9:6d:f4:08:e3:01:72:07:34:75:7e:b1:
b3:83:48:44:71:29:8e:1f:c8:83:86:83:e3:fa:24:
f3:55:6d:a3:73:c7:6c:68:80:6d:0f:c5:5a:1f:9e:
9e:cd:d2:d7:4d:02:98:86:d1:42:a8:df:6e:38:41:
df:18:50:74:00:b0:63:b9:b2:5b:67:29:fe:b3:7b:
55:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:EC:24:48:5D:5E:4A:82:77:E0:89:58:FE:C0:0B:FD:DE:DD:18:F4
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/TOwkSF1eSoJ34IlY_sAL_d7dGPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.88.174.0/24
Signature Algorithm: sha256WithRSAEncryption
61:ef:94:09:1b:7a:35:80:14:b4:a2:24:44:03:3a:0c:c5:99:
1e:24:3d:33:db:fc:9c:91:e8:f6:6a:fe:0a:f7:6b:b0:bd:5e:
0d:ef:81:85:4b:30:41:f0:a6:6e:02:f4:f3:5e:91:03:8c:c9:
fe:25:fc:3b:21:32:05:34:e1:a6:7d:f7:2d:40:f5:21:f3:12:
88:56:fb:26:97:f7:15:65:fd:e3:0f:d1:0b:14:36:00:aa:90:
7c:29:51:b2:fc:93:84:b1:08:51:59:df:4b:ce:db:95:b6:0e:
14:74:b0:ae:c7:e2:be:ef:13:30:41:80:58:2d:15:a9:1a:af:
ec:b0:8f:6d:34:5b:1f:b8:e1:cb:26:9d:27:8c:fa:c3:c0:4d:
7f:0b:ef:67:7e:f3:31:bb:2e:c7:9f:46:87:a0:96:b2:38:de:
a3:5b:c1:a4:6e:d9:1e:ab:28:21:20:88:4f:9a:5a:0f:00:66:
21:16:7d:5d:65:24:85:c6:20:da:cb:6c:6c:d8:36:e7:b6:5e:
2c:26:f9:ba:fd:a8:cf:74:ee:be:4e:c9:82:29:7d:77:86:10:
75:ff:0e:32:24:40:b0:a3:72:7e:22:ec:38:30:6c:30:90:c2:
61:b5:b4:27:b6:83:79:6d:a2:ee:69:19:2b:70:a3:9c:4d:d2:
fb:30:b4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:28:43 2025 by rpki-client