Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/TNWMepsqg63p5hPp_WIp7keoxrM.roa
File: TNWMepsqg63p5hPp_WIp7keoxrM.roa (raw, json)
Hash identifier: ojHWyKOV5srxlJiQiULgzvzFS84S0opQgtVz1ycrHJo=
Subject key identifier: 4C:D5:8C:7A:9B:2A:83:AD:E9:E6:13:E9:FD:62:29:EE:47:A8:C6:B3
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 01954807B78EF682BE6E4611EC3ED7FD8279
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/TNWMepsqg63p5hPp_WIp7keoxrM.roa
Signing time: Thu 27 Feb 2025 15:30:20 +0000
ROA not before: Thu 27 Feb 2025 15:30:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397423
IP address blocks: 104.249.25.0/24 maxlen: 24
104.249.62.0/24 maxlen: 24
104.249.63.0/24 maxlen: 24
216.173.112.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 17:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:48:07:b7:8e:f6:82:be:6e:46:11:ec:3e:d7:fd:82:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Feb 27 15:30:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4cd58c7a9b2a83ade9e613e9fd6229ee47a8c6b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c5:cd:91:a7:8e:6c:1f:bc:44:da:c8:f2:40:
1e:4d:93:fd:52:a5:ba:1c:4e:6b:13:64:97:a3:5d:
f7:78:2b:01:f6:f1:41:b1:8c:28:4c:a7:c5:19:c9:
91:98:3f:3d:8a:c2:12:e2:41:e1:3b:84:5b:40:a6:
bf:8b:47:77:ef:1c:51:7a:07:72:52:29:35:81:bc:
62:f0:d2:70:ee:bb:e9:bf:f7:1a:ad:d3:0e:b3:69:
a0:30:9b:2a:cf:a7:4e:4a:54:74:1f:ba:5b:97:27:
c5:91:b5:f3:5f:86:fa:42:d0:ad:1e:9b:09:97:e3:
47:33:2f:d7:1c:96:a8:34:fe:5b:3e:a4:dc:c1:ee:
74:4e:35:b6:32:d4:e5:d1:d3:bb:3f:ae:34:4f:3d:
94:b9:5e:5f:ad:e4:cb:bb:10:8a:9e:02:3c:9b:cd:
a0:f4:f2:9c:2b:a6:d4:fd:25:82:38:e1:42:ba:45:
d6:d7:fa:b2:73:2c:db:9c:9b:eb:5d:55:fe:e6:ab:
0d:d8:a8:5c:80:02:29:c2:f9:90:f6:a2:5d:42:3c:
d9:53:4c:f3:c6:49:01:56:9b:6f:91:44:ac:90:1b:
26:6f:c6:b8:bc:33:76:74:7e:c9:bb:54:8b:03:f9:
0a:b9:9f:7b:00:bf:88:8b:2d:53:21:3f:db:c5:11:
37:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D5:8C:7A:9B:2A:83:AD:E9:E6:13:E9:FD:62:29:EE:47:A8:C6:B3
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/TNWMepsqg63p5hPp_WIp7keoxrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.249.25.0/24
104.249.62.0/23
216.173.112.0/21
Signature Algorithm: sha256WithRSAEncryption
63:c2:99:9a:89:a5:43:77:61:33:1c:d1:b7:9f:5c:1b:f7:a4:
0f:d4:54:34:60:40:89:4e:17:65:c2:b4:a9:27:ff:21:c6:a3:
fb:df:4b:4b:31:5e:55:d6:94:c9:3e:d4:7f:2c:07:fb:91:39:
c1:f5:4f:12:2b:e1:7e:44:7b:c9:8c:ad:1b:47:72:5e:67:1a:
77:2d:35:0c:90:ee:a7:a8:86:c4:16:15:92:78:c9:5d:2b:26:
ce:b1:96:f0:4c:6b:f7:fa:01:ae:2c:d8:ef:d0:cc:7c:e8:36:
43:24:46:0c:bd:e6:e4:51:27:a5:8b:36:77:51:f5:76:ef:ee:
98:a8:f4:8e:da:ab:dc:89:4c:51:41:6b:fd:80:a9:b2:8b:d2:
4d:bd:bd:97:47:87:a5:3a:fe:ec:0a:f8:8f:15:3e:55:a7:67:
29:b8:3d:6b:10:c8:a6:a5:b4:1f:41:b6:63:a3:61:f7:5f:c3:
ad:13:5b:25:f0:9d:80:70:4c:8a:b3:de:c1:ce:03:6d:60:37:
7f:58:ba:8c:0c:95:7a:41:a9:a1:f0:ec:c9:cf:80:c9:3a:82:
44:33:76:8a:1b:f4:cc:17:a9:80:fb:e8:de:5c:a1:f8:b8:2e:
5b:64:bb:c3:9c:e5:22:07:e7:37:58:51:fa:e2:80:99:b0:5a:
e0:83:57:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:26:41 2025 by rpki-client