Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/lT4zYQmBFI7_ftMovk1Fy7xfJ0E.roa
File: lT4zYQmBFI7_ftMovk1Fy7xfJ0E.roa (raw, json)
Hash identifier: gGBqj1wBTZiVXVUHtVRcdyXMIiNKVfFYeurRdleuOEU=
Subject key identifier: 95:3E:33:61:09:81:14:8E:FF:7E:D3:28:BE:4D:45:CB:BC:5F:27:41
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FDD3725F915FB22BA85F7698FAFBF
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/lT4zYQmBFI7_ftMovk1Fy7xfJ0E.roa
Signing time: Thu 02 Jan 2025 05:49:32 +0000
ROA not before: Thu 02 Jan 2025 05:49:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62008
IP address blocks: 92.38.36.0/23 maxlen: 24
146.120.208.0/22 maxlen: 24
2a02:128:15::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:dd:37:25:f9:15:fb:22:ba:85:f7:69:8f:af:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=953e33610981148eff7ed328be4d45cbbc5f2741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:20:d6:8e:cc:06:1e:ff:45:e0:25:13:a3:b6:
2a:57:44:2b:5d:3e:ef:bb:42:57:61:37:bc:49:38:
1c:da:46:38:0c:d3:73:53:0d:4c:7b:82:82:d3:00:
bb:bf:95:b8:72:b5:13:d3:6f:1a:91:a2:e1:74:a4:
13:ce:67:7b:3e:40:06:d3:fd:02:eb:71:9e:97:d5:
8d:07:f5:e8:23:dd:c1:d7:3f:f5:27:f9:e9:09:5f:
15:59:60:98:d7:32:0a:77:e0:3c:90:79:1e:f7:69:
37:13:7c:8e:47:41:83:f5:2b:ae:9a:2e:14:c1:21:
b6:b4:03:95:0d:50:ab:69:21:0a:a6:a4:ba:80:9e:
c2:67:45:3f:0f:57:9f:95:bc:08:e8:73:39:d2:aa:
f9:be:d0:a5:95:5a:2f:e0:76:52:35:56:d6:92:83:
12:7c:53:d4:16:91:e1:2e:43:aa:ff:db:8f:d3:09:
3f:cd:88:4b:98:90:8a:09:0f:44:a8:c8:8d:42:09:
20:df:b2:c9:05:a4:f1:02:ba:0c:4d:26:d6:1a:80:
89:b8:36:33:76:3e:8b:e7:01:93:a6:92:2a:7c:3e:
06:02:dc:e2:fe:b7:23:78:5c:f4:83:64:b5:a0:ff:
13:90:8d:0e:78:95:01:fe:c7:62:2f:a8:7c:69:6c:
a4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:3E:33:61:09:81:14:8E:FF:7E:D3:28:BE:4D:45:CB:BC:5F:27:41
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/lT4zYQmBFI7_ftMovk1Fy7xfJ0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.36.0/23
146.120.208.0/22
IPv6:
2a02:128:15::/48
Signature Algorithm: sha256WithRSAEncryption
25:c8:ac:d1:e1:ca:99:8e:36:f0:a5:d4:78:98:88:f1:79:da:
dd:a0:87:2f:84:64:1e:ef:59:b2:7d:45:cd:16:82:11:7b:6e:
e7:78:ad:03:dc:3f:79:83:c5:98:18:c9:05:2f:7e:89:8b:d4:
4e:b2:68:78:8f:d7:a7:e0:31:fa:96:f9:e0:ea:71:cd:6d:e0:
f9:81:ec:85:a5:21:87:fc:32:49:57:dc:52:d3:b7:98:2b:9d:
d2:96:a4:f3:b6:f3:58:57:43:0a:47:91:ca:4a:27:39:3e:e8:
c8:86:51:e4:11:c6:32:48:1f:27:2d:cd:ea:db:6c:ed:c6:3c:
1a:97:7c:59:65:f8:07:c7:94:09:70:fd:c9:fe:b6:fc:7e:bf:
ac:3b:20:cc:57:42:90:79:43:d6:0b:22:0e:3c:5c:ac:a0:2c:
26:95:f6:77:c8:2e:ef:6d:61:af:f5:bd:3c:77:1e:45:08:c4:
bc:bc:bb:c8:96:d6:75:df:1c:a3:31:a1:4d:63:ca:7f:92:8e:
ea:7b:3a:93:8f:3f:f7:79:8e:c6:a7:33:45:a6:44:94:71:90:
08:6b:01:6f:d3:06:ac:7d:d6:c1:33:75:82:12:29:e2:02:f6:
c7:8c:2d:ae:b9:a2:a3:30:2f:d9:94:78:00:fa:13:61:2b:ec:
b5:6a:d7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:34:19 2025 by rpki-client