Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/tLxLqjMKG3eeFjZDQXQXHWBQkFc.roa
File: tLxLqjMKG3eeFjZDQXQXHWBQkFc.roa (raw, json)
Hash identifier: xzL6IonDBUzcyDyOYbVWhZq5qeu0Y3y8Vkv6W7fLIhQ=
Subject key identifier: B4:BC:4B:AA:33:0A:1B:77:9E:16:36:43:41:74:17:1D:60:50:90:57
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FD0A5EFDD6211FCC8AE8D0677A3F5
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/tLxLqjMKG3eeFjZDQXQXHWBQkFc.roa
Signing time: Thu 02 Jan 2025 05:49:29 +0000
ROA not before: Thu 02 Jan 2025 05:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60245
IP address blocks: 31.148.172.0/23 maxlen: 24
93.170.92.0/23 maxlen: 24
95.46.148.0/24 maxlen: 24
95.46.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:d0:a5:ef:dd:62:11:fc:c8:ae:8d:06:77:a3:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4bc4baa330a1b779e1636434174171d60509057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:28:03:67:63:09:32:da:00:4f:db:15:34:2c:
49:c0:f9:fb:f2:1d:c5:ac:ff:aa:c0:30:63:1c:f2:
7f:8d:53:16:78:fb:e5:79:a6:5d:4e:61:ed:06:d7:
1c:60:38:1c:39:e4:93:2d:d0:df:5e:5c:2e:06:eb:
11:3a:26:4f:4d:cf:b8:b0:8b:ea:c7:7b:8d:5e:9e:
76:c5:fc:6f:ec:5d:15:e1:e1:8e:bf:1e:c1:6d:6c:
67:8c:04:fc:e0:60:53:15:9b:46:1f:15:0d:da:fd:
da:07:3b:b8:30:12:d1:88:8b:21:e3:7f:22:bd:06:
28:4a:34:ec:76:56:c3:dd:bc:cb:b9:2b:bb:3c:cd:
20:5a:bb:ef:0a:f3:ad:e8:2d:17:03:31:6e:47:50:
4e:7b:02:b8:f3:03:d8:e6:29:a4:d4:79:58:59:d7:
1b:93:df:77:bc:68:cd:83:df:cc:a4:50:6f:2b:c1:
ac:1a:86:40:41:c7:a8:36:16:82:c4:1a:d0:5b:b7:
55:52:0c:98:ab:1b:f0:ef:97:28:92:69:86:52:bf:
00:88:8d:45:46:bf:5c:51:93:e8:e5:d9:c6:5c:dd:
78:08:00:de:fd:a2:42:a9:6c:bc:e1:ba:fb:e1:01:
2e:96:f8:c7:50:7e:b0:84:61:d2:cd:53:bc:9a:eb:
cb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BC:4B:AA:33:0A:1B:77:9E:16:36:43:41:74:17:1D:60:50:90:57
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/tLxLqjMKG3eeFjZDQXQXHWBQkFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.172.0/23
93.170.92.0/23
95.46.148.0/23
Signature Algorithm: sha256WithRSAEncryption
23:ca:5c:7e:14:ea:47:2c:de:cf:f4:7d:db:2e:fb:65:94:ab:
64:73:0c:ea:6b:50:60:b9:bf:02:a4:c3:ca:a4:d4:fb:0c:07:
74:d7:62:42:f1:3b:47:91:29:67:d2:fd:9f:44:45:41:16:75:
da:8d:de:3c:c1:ab:31:2d:61:8a:c8:94:6f:36:73:52:95:f5:
76:b9:47:61:3d:a4:09:33:a3:96:26:35:c8:39:eb:5b:36:6b:
3b:c4:5c:3c:01:ba:65:b1:b9:5c:1e:51:57:dd:3b:b0:0e:a7:
f2:3d:37:a7:33:2b:52:b9:c8:4a:30:e9:7d:54:5f:77:1e:9e:
4f:f3:43:20:30:2b:f7:85:84:db:63:9b:0b:15:80:c7:35:2f:
ba:e9:0f:49:f4:92:7b:df:c5:f7:1f:5c:4d:4c:78:c5:d2:59:
a4:d7:5d:4a:74:89:a0:ef:fa:89:c1:55:fb:40:53:3b:cc:59:
a3:c0:b2:92:55:b4:50:21:39:76:f4:cb:7b:11:1b:a2:38:c6:
0b:3b:db:ec:3b:d6:e7:70:e3:20:0e:cc:3a:94:14:8d:87:8e:
36:26:8d:43:9c:e8:44:aa:05:d5:89:fe:83:7f:56:29:74:07:
86:76:8c:13:22:3a:db:5c:f2:8d:54:d7:3a:69:8d:44:8c:ff:
a3:aa:9b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:32:22 2025 by rpki-client