Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/tbMl7oFKXcbypI4zCPH3_DIQ3z4.roa
File: tbMl7oFKXcbypI4zCPH3_DIQ3z4.roa (raw, json)
Hash identifier: woX9zsT33PUAbbfirUNyi4tkHILBBLskTh8l2Lf5sLU=
Subject key identifier: B5:B3:25:EE:81:4A:5D:C6:F2:A4:8E:33:08:F1:F7:FC:32:10:DF:3E
Certificate issuer: /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7
Certificate serial: 019422FB59D086BC4CCDF2EB72F86AEA512E
Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/tbMl7oFKXcbypI4zCPH3_DIQ3z4.roa
Signing time: Wed 01 Jan 2025 17:48:05 +0000
ROA not before: Wed 01 Jan 2025 17:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197968
IP address blocks: 91.147.108.0/24 maxlen: 24
91.147.109.0/24 maxlen: 24
212.108.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:59:d0:86:bc:4c:cd:f2:eb:72:f8:6a:ea:51:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7
Validity
Not Before: Jan 1 17:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5b325ee814a5dc6f2a48e3308f1f7fc3210df3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9a:d3:15:ce:5f:5d:b7:f4:2c:7c:28:52:d4:
cb:fd:80:34:67:21:1f:b7:45:7d:bf:1e:cc:74:d8:
96:ea:db:cf:a0:75:53:17:17:af:4f:4e:df:c9:48:
78:da:0d:61:9f:72:ec:e1:ef:d2:f1:1b:a6:52:ea:
11:65:47:56:01:96:d1:be:14:13:08:7b:ac:8b:a9:
b2:4c:1f:75:55:df:d4:fd:f0:22:55:c1:27:9d:bd:
3a:ac:56:6c:29:9e:d0:5d:0d:bc:d0:27:20:ca:27:
f6:09:94:0a:6e:34:ce:b0:6f:d8:3f:74:60:15:7a:
6b:0e:0c:b6:11:cf:c1:f0:ee:b3:ba:a4:76:4e:cc:
5e:82:2b:7e:50:bd:c8:8b:35:ac:25:e5:10:56:ac:
d4:ed:9c:88:23:b2:4d:17:0e:6d:96:39:b5:be:07:
58:56:78:5c:4c:47:ed:ba:b6:c1:c8:0e:36:2f:49:
f4:6e:e9:2e:57:15:9d:c3:a8:82:df:4f:66:ba:c4:
bf:ae:3e:98:93:1b:39:86:e5:f7:f6:f2:86:d1:55:
56:7c:40:40:24:46:cf:5b:40:2e:c0:02:0b:28:4d:
16:87:02:97:17:c3:90:17:d8:43:6a:34:ac:23:cf:
38:0b:68:ae:01:c3:3f:af:e0:c1:b6:fa:7c:f6:66:
d9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B3:25:EE:81:4A:5D:C6:F2:A4:8E:33:08:F1:F7:FC:32:10:DF:3E
X509v3 Authority Key Identifier:
keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/tbMl7oFKXcbypI4zCPH3_DIQ3z4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.108.0/23
212.108.86.0/24
Signature Algorithm: sha256WithRSAEncryption
06:c0:70:1a:dc:a0:83:56:5d:16:f3:3c:12:27:4f:42:e5:ab:
70:08:e8:67:fc:e9:ce:9f:f5:13:dd:56:3b:1b:e7:75:66:29:
bd:fc:5b:22:0d:72:14:6a:0c:85:f9:c7:fb:8f:b3:b9:72:52:
e7:0d:b4:eb:15:d8:af:fb:99:5c:59:a8:e0:38:fd:b9:d5:96:
4a:65:ea:32:41:6f:c9:b9:b5:2d:14:5c:d0:e5:84:04:88:87:
48:c6:18:69:17:63:9a:7e:9b:b1:94:90:e4:16:aa:56:12:98:
ce:17:de:99:6f:6d:73:70:83:db:0f:a7:44:8b:c8:27:15:4c:
32:5e:55:a2:30:72:47:31:b8:28:f2:44:b4:b4:00:d7:08:db:
ff:f5:1f:fd:a8:16:f5:53:b9:e7:4e:8a:53:6f:05:4c:b4:81:
5f:a4:f8:da:17:86:22:5a:60:b6:60:bb:6d:ab:b7:85:05:ee:
12:7c:ba:58:d1:c7:00:66:aa:fe:4e:8e:c9:40:5f:91:e4:7f:
cd:a4:2d:23:7e:dd:68:71:d1:a0:ae:6c:d9:34:bc:2c:61:75:
57:f6:85:c2:42:c8:40:33:06:1e:e8:fa:22:01:c8:62:0e:74:
d7:c4:4e:b7:a1:20:ca:cc:7f:9d:ca:a4:27:d3:94:e2:3e:7b:
21:a6:0c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:23 2025 by rpki-client