Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/tW9ZA_4CWss3X9TrE-zFmtkPdpo.roa
File: tW9ZA_4CWss3X9TrE-zFmtkPdpo.roa (raw, json)
Hash identifier: XXDb82bp0zPPQS1Vg6DTFnx8Mw5fAjS1r7sQB1EqQ/s=
Subject key identifier: B5:6F:59:03:FE:02:5A:CB:37:5F:D4:EB:13:EC:C5:9A:D9:0F:76:9A
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 019425900195450A68360595701BEC96D4DB
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/tW9ZA_4CWss3X9TrE-zFmtkPdpo.roa
Signing time: Thu 02 Jan 2025 05:49:42 +0000
ROA not before: Thu 02 Jan 2025 05:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209213
IP address blocks: 92.253.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:90:01:95:45:0a:68:36:05:95:70:1b:ec:96:d4:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b56f5903fe025acb375fd4eb13ecc59ad90f769a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f0:d3:56:f0:3c:0c:2d:5a:ed:f9:17:95:30:
fd:bc:59:4e:6c:18:ac:4e:7b:6b:64:36:30:2f:c9:
68:bc:dc:5c:c6:c3:37:ae:59:92:1a:a0:14:df:68:
08:82:78:92:4f:3f:f2:26:fc:df:ab:5c:c7:51:82:
5e:fa:f1:bb:02:ae:ba:36:b5:bd:0d:f8:c3:13:39:
d9:49:f6:80:57:ec:a6:46:fe:7e:a2:f4:09:f7:f6:
c6:2d:5b:35:07:f9:4d:8c:10:8b:a5:2b:14:02:2e:
30:cb:73:fb:cd:35:d5:42:8e:07:15:2e:2e:4d:10:
de:49:e1:ef:a7:ce:45:2d:27:40:5c:1b:47:10:52:
0d:c6:b8:c5:58:39:34:f3:b5:30:68:b7:ec:08:60:
00:76:3d:5b:73:7f:e0:fa:67:2e:59:e1:44:c6:7b:
bd:1a:d5:88:67:20:eb:a7:ce:e1:e6:c6:d1:d6:30:
ac:fd:34:5e:aa:91:51:05:06:3c:b0:fd:37:c6:2e:
79:e8:4f:25:6e:e7:bc:e4:5a:76:26:b0:74:5b:e1:
52:0e:57:e4:ed:81:99:02:37:42:1f:3b:29:6a:1c:
87:63:79:d3:20:21:2c:1e:00:4b:b7:6c:13:c4:ab:
5b:14:d9:00:ec:ea:57:1c:a9:b8:33:04:c2:90:5a:
8d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:6F:59:03:FE:02:5A:CB:37:5F:D4:EB:13:EC:C5:9A:D9:0F:76:9A
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/tW9ZA_4CWss3X9TrE-zFmtkPdpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.253.205.0/24
Signature Algorithm: sha256WithRSAEncryption
56:93:15:13:b4:16:01:81:42:4d:47:13:4b:01:0f:fd:77:15:
3c:77:28:5f:80:4c:5a:a8:e9:2a:c9:e5:45:17:52:ba:be:f3:
0b:e0:2f:85:fa:8b:ec:ab:6d:20:5b:ce:5d:90:1e:cb:fa:87:
94:9b:81:46:79:80:19:1e:b4:e6:66:98:a2:2f:fe:28:c2:0b:
d6:13:83:1e:75:e7:ae:1b:ad:4a:64:fc:bb:da:fb:c3:0e:ec:
5e:9d:98:b8:aa:30:8c:ab:2b:39:57:d8:b1:a7:9d:2f:eb:ec:
62:42:cc:cb:c3:91:4c:c7:d9:2b:bb:c3:bf:77:99:03:f4:54:
5e:bb:bd:2e:c4:97:30:e8:46:c4:86:68:51:a9:78:25:53:7c:
2f:4f:c1:e4:b1:21:97:25:46:7c:73:3f:69:4b:2d:6c:79:a1:
70:da:62:4e:94:e9:b9:64:7c:f4:ce:16:ce:91:ab:de:fa:1e:
42:eb:a5:d0:1b:e4:c6:65:5f:e4:29:82:39:96:c8:9a:6e:12:
a6:f6:48:52:d3:9c:fc:05:5d:5c:9a:52:f6:48:ef:9e:db:bf:
2b:10:23:dc:d0:74:68:02:cd:06:c5:be:86:b0:57:e4:3b:7e:
cb:f7:5a:42:e6:45:32:98:66:a8:44:d0:fb:5f:eb:c8:46:75:
28:e7:e5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:44:11 2025 by rpki-client