Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Tx_2Xpm1Q_w3PlOOVZ9YdyXaFXg.roa
File: Tx_2Xpm1Q_w3PlOOVZ9YdyXaFXg.roa (raw, json)
Hash identifier: 9GhpRqSdCgvC5FcR5gwzJbSDdbd57ZEoQsMA1+LaczQ=
Subject key identifier: 4F:1F:F6:5E:99:B5:43:FC:37:3E:53:8E:55:9F:58:77:25:DA:15:78
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FA6A811B479CC742F4ABF2E926C31
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Tx_2Xpm1Q_w3PlOOVZ9YdyXaFXg.roa
Signing time: Thu 02 Jan 2025 05:49:18 +0000
ROA not before: Thu 02 Jan 2025 05:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44546
IP address blocks: 31.148.0.0/16 maxlen: 24
91.201.20.0/22 maxlen: 24
92.38.0.0/17 maxlen: 24
92.253.128.0/17 maxlen: 24
93.170.0.0/15 maxlen: 24
95.46.0.0/15 maxlen: 24
146.120.0.0/16 maxlen: 24
146.158.0.0/17 maxlen: 24
151.249.128.0/17 maxlen: 24
185.67.252.0/22 maxlen: 24
195.178.4.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:a6:a8:11:b4:79:cc:74:2f:4a:bf:2e:92:6c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f1ff65e99b543fc373e538e559f587725da1578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3b:32:cd:fa:d5:03:94:c6:e9:f7:a3:e9:d6:
58:28:97:d4:39:26:fb:cb:30:ad:09:2c:aa:fb:e6:
67:ea:95:8f:54:e9:a7:e9:ab:96:6f:3e:58:1d:ed:
b1:64:f7:6e:c8:41:31:40:36:be:8c:a1:54:5c:35:
93:a3:54:e8:ed:1b:1d:81:a1:0d:45:b0:0d:d9:62:
e2:f7:61:5f:18:3e:2e:f8:8f:0a:07:e3:f5:6c:71:
13:15:39:0f:5c:b8:47:a3:12:51:af:e6:9f:21:f6:
ae:c3:b9:af:30:37:d4:67:f6:52:d8:23:c4:c3:80:
a9:c5:a4:e9:c7:a3:0a:2f:57:f6:6f:ec:f3:1b:a5:
22:f7:23:0e:76:19:30:eb:71:8c:08:1e:1a:ca:6f:
3f:15:25:33:7b:23:7a:35:e8:e9:da:25:31:0f:6a:
19:50:df:53:5b:ab:a0:c1:e4:29:3a:06:10:40:2f:
57:d3:b3:7e:c4:6d:4e:e1:41:68:c1:cc:11:42:fd:
ee:3d:ae:df:43:3b:e3:0e:eb:d0:b3:b2:ad:f2:6f:
e5:62:71:10:da:2c:b3:56:1e:58:5e:f1:da:2b:5d:
09:5f:16:b2:71:b5:ed:e3:5e:4f:9c:c5:9f:f3:05:
40:c9:5a:39:9f:f5:3d:4a:f4:05:ee:1d:33:e6:ef:
4b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:1F:F6:5E:99:B5:43:FC:37:3E:53:8E:55:9F:58:77:25:DA:15:78
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Tx_2Xpm1Q_w3PlOOVZ9YdyXaFXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.0.0/16
91.201.20.0/22
92.38.0.0/17
92.253.128.0/17
93.170.0.0/15
95.46.0.0/15
146.120.0.0/16
146.158.0.0/17
151.249.128.0/17
185.67.252.0/22
195.178.4.0/23
Signature Algorithm: sha256WithRSAEncryption
27:1e:a3:43:f8:ed:52:91:62:b7:45:54:0e:41:bd:60:d9:ea:
ca:0d:15:22:e8:58:96:1f:0f:06:9b:21:8e:88:e0:6d:89:c7:
37:44:a9:22:fe:8a:3b:7d:bb:3c:ae:cd:84:67:6f:6e:cb:fe:
f4:b7:66:73:af:71:98:1b:7b:b4:d8:50:ea:ef:3b:cb:43:1d:
d6:a1:45:c0:57:b6:56:5f:65:e3:61:1c:b7:e7:a8:d6:0a:47:
43:9a:f1:c5:9c:75:59:3a:4b:83:f0:2e:c6:55:a9:12:3b:72:
11:46:21:94:3f:ea:6a:3d:73:fb:83:82:62:c9:b2:37:05:9a:
b3:67:1b:95:fe:74:21:54:9d:57:d9:ee:8d:08:33:98:41:2f:
ea:85:7a:b6:08:d5:9c:2b:ab:47:e0:aa:c0:75:65:83:ac:64:
15:f3:2e:5a:e3:67:db:ee:8d:94:a6:89:fb:94:55:69:19:e8:
c7:4a:7d:bb:41:09:cd:2c:9d:e9:cd:a5:75:5d:0e:eb:6f:39:
84:3d:33:20:09:2b:e3:c8:be:9e:d5:77:ae:71:3e:be:85:69:
df:2c:db:f5:60:b4:ed:e3:83:c0:e0:89:1f:14:6a:ce:fc:18:
34:4c:b6:f3:af:42:f7:41:9d:70:6c:ce:b5:c6:45:55:36:cf:
52:34:14:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:36:41 2025 by rpki-client