Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/T6gtaxOfCU_QWTuO38pW4oB0od8.roa
File: T6gtaxOfCU_QWTuO38pW4oB0od8.roa (raw, json)
Hash identifier: KVkZ8CQnrh+zeDQo7wPoH9A/3jqz/nj5EPod+63b4Ro=
Subject key identifier: 4F:A8:2D:6B:13:9F:09:4F:D0:59:3B:8E:DF:CA:56:E2:80:74:A1:DF
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0194258F8766DDC5A1D138ACCADB1BD2BEAE
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/T6gtaxOfCU_QWTuO38pW4oB0od8.roa
Signing time: Thu 02 Jan 2025 05:49:10 +0000
ROA not before: Thu 02 Jan 2025 05:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203757
IP address blocks: 212.111.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 08:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:87:66:dd:c5:a1:d1:38:ac:ca:db:1b:d2:be:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 2 05:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4fa82d6b139f094fd0593b8edfca56e28074a1df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:25:74:58:e0:63:de:db:5e:09:d2:e8:97:22:
2a:2b:61:47:75:34:9f:95:b7:2d:86:b3:17:f0:c6:
aa:ee:8c:68:5f:25:5f:18:aa:b0:d5:eb:e6:c9:57:
5e:fc:72:32:fe:4b:99:31:52:a3:22:cb:5f:dc:d1:
7c:a3:91:d8:63:ac:bd:b5:af:44:df:fa:c9:c5:02:
1a:fd:26:ae:b4:e4:21:4d:b9:60:14:8a:71:5d:c5:
cb:1a:70:8a:74:d5:a7:ad:a6:90:01:11:ed:10:db:
9b:0c:90:c4:17:b5:cc:65:65:6e:f6:75:44:be:eb:
3c:ab:90:4f:38:75:61:95:c7:5d:4b:e7:a4:02:19:
55:20:95:2a:03:f5:17:ea:c5:8d:36:65:b2:1f:3d:
ff:9e:b8:1d:ce:4d:60:cf:f9:f9:47:41:26:14:45:
50:9d:07:94:c3:71:b4:20:fe:b7:ab:47:fa:65:80:
3a:f2:d5:b2:49:98:48:32:81:6e:71:a0:f1:82:fb:
a9:9f:a4:f6:0c:23:1c:98:23:2b:0e:20:28:47:df:
0b:62:10:07:43:2b:bd:b3:f2:c9:48:74:a4:79:e5:
a2:17:cb:ad:a4:d1:12:a0:75:b7:0e:b7:cd:ec:fc:
5e:cc:ee:f4:08:10:ed:7c:b0:0b:e5:1e:73:f3:16:
fa:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A8:2D:6B:13:9F:09:4F:D0:59:3B:8E:DF:CA:56:E2:80:74:A1:DF
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/T6gtaxOfCU_QWTuO38pW4oB0od8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.111.200.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:dd:e6:f9:a3:1d:c4:a7:17:65:6d:0a:12:24:8b:64:df:e5:
c9:23:69:e0:4a:c8:79:c9:e5:58:13:e3:e3:8c:43:9b:be:fe:
ba:1a:6f:01:90:08:ce:c0:30:4a:2e:fb:42:39:e8:34:61:01:
b2:7e:b4:8d:e0:02:36:53:1b:a9:75:aa:72:ee:73:06:9e:e6:
99:9a:4f:6b:09:0b:b9:48:52:ec:c9:6a:97:fb:c3:4b:f2:86:
51:6a:4b:f6:4a:cf:1c:62:2e:80:e7:9c:91:07:af:b3:cc:d1:
dc:3a:c6:21:36:60:f3:d4:59:77:6f:a2:a8:be:ee:14:fa:37:
44:a8:15:95:70:79:13:9c:5c:60:05:d1:41:2e:14:5d:de:51:
14:90:1a:48:7c:ee:d4:99:a0:8f:2b:fc:e1:70:44:bc:96:01:
89:88:a0:f0:8b:bb:bf:28:8b:23:d2:07:37:1d:eb:57:09:85:
1d:25:8a:79:cf:d1:fe:75:0b:be:34:25:a2:22:31:34:9f:59:
03:81:b4:89:7e:a7:d8:36:48:43:d2:d9:ca:91:bf:08:cc:ef:
5a:0a:09:8d:6e:9c:8c:86:b0:13:c4:51:9c:f4:ff:1c:30:66:
55:55:cd:fc:56:f4:4f:a8:31:4a:cb:0b:33:5c:1b:cd:a7:c1:
0f:68:bc:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:24:13 2025 by rpki-client