Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/T4IdyPOyJT-vcpUTevdsnNRpr2k.roa
File: T4IdyPOyJT-vcpUTevdsnNRpr2k.roa (raw, json)
Hash identifier: bowIRN0pzHA89i7IutwyoquoF4lwEHsh3PvwCnZ1E/Q=
Subject key identifier: 4F:82:1D:C8:F3:B2:25:3F:AF:72:95:13:7A:F7:6C:9C:D4:69:AF:69
Certificate issuer: /CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62
Certificate serial: 0194206821924052B0D11EE871143A085834
Authority key identifier: A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/T4IdyPOyJT-vcpUTevdsnNRpr2k.roa
Signing time: Wed 01 Jan 2025 05:48:02 +0000
ROA not before: Wed 01 Jan 2025 05:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206492
IP address blocks: 194.191.112.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:21:92:40:52:b0:d1:1e:e8:71:14:3a:08:58:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62
Validity
Not Before: Jan 1 05:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f821dc8f3b2253faf7295137af76c9cd469af69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:47:76:17:ed:2e:96:c6:b4:f3:a3:cf:0f:d8:
43:96:ba:0c:6d:4a:a2:99:3f:f3:90:f2:6e:28:c2:
29:8e:35:6a:fa:33:9b:fb:cd:3d:44:34:27:9e:ba:
fe:6e:99:09:c0:f7:87:c4:a9:fb:8d:7c:63:ae:ba:
90:7f:64:88:c8:16:37:4c:3b:a4:5e:97:7d:ab:af:
02:2b:13:62:1b:3a:6c:4d:2b:98:7a:90:6e:69:2f:
5a:73:57:74:94:89:3c:5a:39:cf:8e:31:a1:cf:21:
6b:ff:bb:36:63:3b:47:54:95:cd:de:6f:11:93:3f:
bc:93:64:ff:31:24:63:38:73:7d:20:20:70:3a:40:
b3:02:c8:e0:04:9f:86:32:22:64:df:e9:21:a8:84:
33:02:95:a5:7a:a2:6c:d5:36:d2:7a:2d:56:b0:8b:
cf:23:e1:c9:29:0e:c1:df:b4:3b:25:91:68:00:ee:
7e:73:24:25:ee:e8:0e:79:6c:5a:4b:d8:1d:cd:6d:
fc:93:db:63:b2:61:16:e8:a5:df:4e:66:ce:c0:37:
45:a0:05:fc:d3:68:1f:29:dc:76:ac:b2:65:d6:07:
15:92:66:43:b3:36:20:b6:31:d6:41:7b:76:a7:9d:
86:52:fe:7f:8d:8c:48:e8:b1:36:22:7d:21:8f:b5:
2d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:82:1D:C8:F3:B2:25:3F:AF:72:95:13:7A:F7:6C:9C:D4:69:AF:69
X509v3 Authority Key Identifier:
keyid:A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/T4IdyPOyJT-vcpUTevdsnNRpr2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.191.112.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:56:36:d6:e0:6e:f7:04:42:c0:84:71:03:53:77:2d:c0:08:
58:7c:e9:d0:53:ee:2c:be:af:e2:2e:4b:fe:1b:85:ab:62:0f:
f2:b6:77:cd:e2:ab:13:e7:83:75:86:73:2f:22:30:7a:ac:4f:
8d:4b:30:ae:06:93:11:5f:de:3d:15:70:27:ae:b7:66:0a:94:
04:7b:41:d4:ca:ce:50:7b:8c:28:a7:22:3a:49:d9:16:00:2e:
a5:67:f2:3a:b4:e8:58:5f:88:cb:1f:e2:53:10:d0:c9:9a:e7:
ad:5f:05:e2:d6:d2:7c:47:7f:16:70:3e:c8:ae:3b:5f:e8:e4:
4b:42:2c:b8:8f:18:09:b1:39:9e:c6:96:18:d1:f4:85:36:cb:
e4:ea:94:3f:39:7f:1b:f6:f5:ce:de:0a:5d:fe:1f:f9:bd:84:
70:ce:9d:9f:36:11:3e:39:b6:79:2b:7d:5b:7d:e2:16:cb:a2:
1d:31:cc:5c:3e:57:d1:ae:cc:2c:15:85:58:a6:2d:d1:91:43:
57:da:23:a3:c6:e0:b8:b9:8b:d1:dd:0e:a4:b1:f6:f6:70:f8:
00:da:a9:3f:bc:18:ac:f6:d8:9f:d9:d8:46:99:ba:58:dc:06:
31:1f:76:ba:ff:0f:95:99:c9:c3:ca:9d:43:ea:ad:3e:fc:ac:
32:4f:7d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:42 2025 by rpki-client