Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/tHEpQ4zGqukNf56rTr_NWW1zUJY.roa
File: tHEpQ4zGqukNf56rTr_NWW1zUJY.roa (raw, json)
Hash identifier: 1ndDkMdqqS4xmF18ilK6v4luWjsEuelAMNUwp28ncuI=
Subject key identifier: B4:71:29:43:8C:C6:AA:E9:0D:7F:9E:AB:4E:BF:CD:59:6D:73:50:96
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FDF6A8241DFF9E93D4E28898B4B6E
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/tHEpQ4zGqukNf56rTr_NWW1zUJY.roa
Signing time: Thu 02 Jan 2025 05:49:33 +0000
ROA not before: Thu 02 Jan 2025 05:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62150
IP address blocks: 93.170.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:df:6a:82:41:df:f9:e9:3d:4e:28:89:8b:4b:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b47129438cc6aae90d7f9eab4ebfcd596d735096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7e:5b:af:67:1b:b0:c3:cd:f1:5a:04:06:91:
e6:a3:4d:ff:51:ab:89:c9:87:b6:d1:01:13:8c:f5:
ff:e4:e3:44:da:07:2d:ec:c9:94:f1:47:8c:02:e6:
74:49:c2:4a:ac:66:cd:4e:3f:6b:fa:dc:a1:9f:df:
79:e0:00:84:bc:36:b7:e7:f7:95:23:b4:ed:6d:05:
29:8d:33:9f:55:e6:6d:cf:4a:ce:49:6d:6f:f3:00:
2b:d0:07:28:8a:65:79:a0:36:08:18:6b:c1:25:09:
e4:a4:2a:a9:f3:09:34:dd:f9:c4:71:80:4b:8a:40:
09:f8:65:ce:81:7a:08:45:8a:81:43:56:44:f4:2d:
ec:f5:b7:8a:73:f4:9f:34:13:65:d4:8c:ad:57:25:
19:95:a7:e5:21:33:e0:cf:a5:d4:ee:80:e4:0b:ab:
93:f9:69:96:14:12:ec:1f:f3:6d:fb:ab:22:59:28:
66:a0:57:56:fb:e2:96:06:9b:1e:a7:38:d3:b5:50:
74:28:de:41:84:c3:42:aa:68:2a:08:73:a5:31:2d:
c4:18:7e:da:82:06:d3:00:e1:37:66:5e:5a:dc:ca:
00:d6:d2:8e:78:f5:4a:46:72:7b:56:cb:5d:21:73:
90:a7:f8:f0:14:37:ac:6c:ea:f7:70:cf:b1:be:9d:
c9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:71:29:43:8C:C6:AA:E9:0D:7F:9E:AB:4E:BF:CD:59:6D:73:50:96
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/tHEpQ4zGqukNf56rTr_NWW1zUJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.52.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:ab:5d:53:a7:c8:67:56:45:a5:6c:08:2e:55:e8:f4:58:ad:
31:89:bf:ad:3c:c7:c9:22:46:99:8d:0d:cc:49:a7:78:0d:f3:
5e:62:5d:f4:ff:bb:df:22:cc:ad:2f:81:6d:9f:a7:d8:18:7e:
29:c1:08:35:3a:1a:1c:e6:4c:2c:49:d7:a8:a3:73:97:19:b8:
e6:ae:5c:c4:b5:05:4a:9b:37:65:ac:42:35:39:fe:42:56:21:
17:47:e4:81:75:6f:fc:87:f2:cf:82:95:a4:25:5b:de:13:36:
f1:45:bf:4c:bb:7c:8c:e7:44:da:be:6d:73:d7:d8:28:5a:37:
34:12:0f:db:52:d3:98:70:48:3d:97:31:e3:91:74:08:ea:25:
b2:43:31:2b:3e:7a:a9:b1:da:52:e8:94:01:75:3d:4a:9a:42:
5a:d0:00:6a:c6:ce:7f:6e:09:ff:94:19:0d:1f:c6:32:a3:5e:
d7:90:86:76:97:e4:db:c0:fd:7a:d6:46:ff:6a:44:8a:9a:35:
cd:b8:fe:7a:f4:a7:46:35:64:14:08:dc:05:7a:b2:55:cb:93:
0b:2b:d8:c1:eb:b5:3d:8b:38:92:db:08:f1:5a:1b:94:ee:69:
e3:e4:d2:3b:43:45:69:8e:c2:2d:27:17:39:f6:a2:16:70:3f:
94:d6:cb:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:32:14 2025 by rpki-client