Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/tWQ9cnFy3imrP2HUU-YNNesXz-M.roa
File: tWQ9cnFy3imrP2HUU-YNNesXz-M.roa (raw, json)
Hash identifier: keNfuumhLj0esV6ivUODGor64VRXrwZusUQrseCHziI=
Subject key identifier: B5:64:3D:72:71:72:DE:29:AB:3F:61:D4:53:E6:0D:35:EB:17:CF:E3
Certificate issuer: /CN=a3698b01053911607edb2a76090a6aced95a3ed5
Certificate serial: 01941FFA1774F8767A500C352CE6C62564F3
Authority key identifier: A3:69:8B:01:05:39:11:60:7E:DB:2A:76:09:0A:6A:CE:D9:5A:3E:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/tWQ9cnFy3imrP2HUU-YNNesXz-M.roa
Signing time: Wed 01 Jan 2025 03:47:51 +0000
ROA not before: Wed 01 Jan 2025 03:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15924
IP address blocks: 194.61.224.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:17:74:f8:76:7a:50:0c:35:2c:e6:c6:25:64:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3698b01053911607edb2a76090a6aced95a3ed5
Validity
Not Before: Jan 1 03:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5643d727172de29ab3f61d453e60d35eb17cfe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6f:d8:15:1f:57:96:75:98:a5:8a:fd:c7:6d:
be:52:53:5c:38:f8:0e:d1:28:05:50:b1:d8:37:1c:
f4:45:f9:f1:5c:f2:18:36:22:62:2c:b9:61:e5:3e:
e5:31:e6:ad:e8:d8:ea:3c:4b:30:45:58:80:ba:f2:
05:a8:f7:e6:78:ea:92:b8:0d:d8:b4:1c:86:08:b6:
3e:60:2d:b3:0e:83:7e:8d:87:f6:56:a7:0f:c5:0e:
fd:a1:cd:2b:4b:09:32:da:d2:d2:b2:66:8b:23:39:
6c:5d:b4:2f:b4:33:41:e4:14:70:38:52:95:0c:86:
df:97:00:8c:07:18:8c:23:e8:3e:4d:75:e6:6b:98:
f3:1b:f5:e9:c5:37:50:9e:5b:3b:bb:cd:9c:ad:79:
06:40:7d:1d:4f:0c:36:65:3e:15:67:11:9f:70:74:
e1:39:bf:30:00:bd:63:17:2d:f4:59:87:17:cf:7f:
8a:d3:de:d1:8c:41:64:f1:c9:7e:9d:3c:b0:96:4e:
6e:d7:f9:94:b2:e6:d6:f5:07:ac:29:38:a7:c6:f3:
db:5a:da:34:a6:91:8b:0c:a4:cf:3e:4d:0d:a2:44:
b3:79:38:3d:05:de:0a:de:b5:48:a2:80:7e:a0:44:
af:46:0f:cf:d8:3f:08:69:e9:fa:1e:00:85:c5:de:
69:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:64:3D:72:71:72:DE:29:AB:3F:61:D4:53:E6:0D:35:EB:17:CF:E3
X509v3 Authority Key Identifier:
keyid:A3:69:8B:01:05:39:11:60:7E:DB:2A:76:09:0A:6A:CE:D9:5A:3E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/tWQ9cnFy3imrP2HUU-YNNesXz-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.224.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:a2:bb:4e:79:f0:7f:bb:39:1e:22:4a:23:1a:21:55:b9:77:
45:a9:e3:d1:f3:05:f0:44:46:e2:a4:01:a8:a4:0a:bf:f2:7b:
34:55:d0:d2:37:86:15:03:12:a0:73:5d:82:ba:20:36:53:f9:
fd:b8:cc:c3:c4:37:c4:53:af:9a:74:af:b0:43:ed:f2:f3:c5:
c6:f6:fc:f2:c6:a9:05:a3:a8:d5:ea:ed:b3:e8:72:f3:45:3a:
ed:70:5d:6a:2a:11:1b:e0:ca:19:b2:b1:e0:e9:e4:ea:cb:cc:
18:32:6c:b2:4c:60:d6:4f:80:46:31:3d:fb:57:71:1b:a0:f8:
a5:1a:86:3a:d7:77:bd:15:fe:25:14:6f:26:49:42:b9:1b:1f:
f8:18:5b:77:fe:fd:68:71:07:45:b6:4a:fc:54:74:48:f4:bb:
6d:0b:96:4e:07:4b:cc:d3:1b:9d:d6:e5:10:1a:c8:96:ca:28:
73:f4:f8:b5:1e:b7:ed:20:3a:de:19:5e:be:ee:58:99:8f:2b:
67:58:5a:d3:3f:8d:9a:1b:6a:f5:11:da:a8:e7:f3:b9:e3:55:
57:0f:43:e0:1e:2b:7e:54:32:b5:f7:89:fa:34:84:b6:db:38:
07:b0:bb:ab:e1:77:23:09:4a:1c:0f:c7:43:bb:c4:6e:8b:d5:
8c:de:d5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 15:09:44 2025 by rpki-client