Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/TI__S_5wBSs76T2sPdddnNR3NI4.roa
File: TI__S_5wBSs76T2sPdddnNR3NI4.roa (raw, json)
Hash identifier: 1cgm9AfaKeKcFrBAUFYpRgSienV4cq0Pog28Pn4vsBo=
Subject key identifier: 4C:8F:FF:4B:FE:70:05:2B:3B:E9:3D:AC:3D:D7:5D:9C:D4:77:34:8E
Certificate issuer: /CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d
Certificate serial: 019426D9527C5EFB6E29C53642DE00BC5EAE
Authority key identifier: 8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/TI__S_5wBSs76T2sPdddnNR3NI4.roa
Signing time: Thu 02 Jan 2025 11:49:24 +0000
ROA not before: Thu 02 Jan 2025 11:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213682
IP address blocks: 157.119.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft
rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 16:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:52:7c:5e:fb:6e:29:c5:36:42:de:00:bc:5e:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d
Validity
Not Before: Jan 2 11:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c8fff4bfe70052b3be93dac3dd75d9cd477348e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c7:e8:20:11:99:0e:b0:de:c8:45:9a:a8:ef:
54:30:91:3b:6e:18:39:b4:0e:62:5f:20:be:af:16:
0f:34:75:be:45:80:4e:1c:f4:30:f1:21:f1:71:26:
3f:d5:fd:6a:9f:b7:ad:17:9f:f3:61:13:3b:0f:0b:
32:3e:60:c9:83:b2:d1:59:57:3a:28:81:3a:cc:dc:
1a:68:ab:3b:97:1f:74:47:7e:8d:03:65:6b:a3:6e:
28:a6:3b:c1:ed:64:d9:e6:02:97:16:d6:69:e6:39:
dd:ea:d3:c7:51:b0:6c:3f:61:3b:68:d4:cd:6f:8e:
be:d6:81:1a:33:98:ea:97:15:f4:53:a4:e2:5b:3a:
1b:2d:a1:e2:ba:9f:48:7d:d8:69:5f:b6:f7:e6:50:
15:4a:f6:a1:99:47:83:db:99:2e:81:09:90:8d:11:
a7:d7:f4:f1:c3:9a:fe:b0:30:ef:74:74:12:da:10:
db:d1:ab:29:e1:55:0c:40:b2:c6:f6:10:c0:50:80:
8d:8d:da:f5:e6:62:0c:b4:de:9d:ce:24:98:ee:d8:
1b:18:20:ff:20:63:c8:c2:5d:c0:02:67:85:73:3a:
ba:e6:6f:86:c0:e2:89:ec:8c:d8:83:e3:c1:41:6d:
c0:45:0f:a9:e8:2b:e3:f1:90:26:53:46:06:a5:26:
fb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:8F:FF:4B:FE:70:05:2B:3B:E9:3D:AC:3D:D7:5D:9C:D4:77:34:8E
X509v3 Authority Key Identifier:
keyid:8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/TI__S_5wBSs76T2sPdddnNR3NI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.119.189.0/24
Signature Algorithm: sha256WithRSAEncryption
12:6b:c4:0d:2c:47:04:43:a7:75:b6:70:8b:9d:10:1b:26:bc:
0b:65:a8:15:35:bd:65:22:1f:90:c6:f9:f4:23:48:7f:78:cc:
81:f6:0a:3e:e9:1d:55:47:51:7b:92:5e:a8:68:3f:40:2c:f9:
48:45:88:3d:d6:53:1b:dd:c2:f8:d3:57:91:93:da:ee:aa:c3:
79:f8:95:69:54:d0:0a:23:f3:b0:65:0d:67:8a:bd:57:27:87:
75:35:e4:8a:a9:cf:37:07:0a:cd:94:08:db:ac:68:95:f2:9e:
56:ff:bd:ce:6b:dc:65:d9:5f:e2:6b:db:d3:ef:dc:df:3f:18:
96:ae:22:7e:7b:41:13:7d:e5:01:2e:40:6f:7d:00:c6:b9:69:
cc:9b:c1:6c:41:54:c0:2e:b7:bd:9b:db:c1:93:78:e6:d1:b7:
72:a0:56:af:ae:d4:7b:ee:12:6b:87:4f:93:a2:60:bd:27:d7:
0c:29:dd:3d:98:de:38:de:c9:88:a7:5c:ce:b5:a5:f3:92:1e:
a4:a8:5a:8c:7f:c6:1c:b6:73:31:ee:57:bb:06:7b:d9:dc:87:
f5:ac:8b:b3:14:38:59:42:0a:ee:05:a8:ae:58:5e:43:58:fc:
f0:0e:80:02:7f:f5:80:7b:28:85:91:38:2f:40:69:a4:24:3f:
df:b3:43:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:29:43 2025 by rpki-client