Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/tzSxEqbN9RPe7WLi6GpaqxSubiw.roa
File: tzSxEqbN9RPe7WLi6GpaqxSubiw.roa (raw, json)
Hash identifier: NQOfRB00StYv2rpk5RfPASO+YDaJlcYUJaTmyGg5oDk=
Subject key identifier: B7:34:B1:12:A6:CD:F5:13:DE:ED:62:E2:E8:6A:5A:AB:14:AE:6E:2C
Certificate issuer: /CN=55f7caba9bd5f9fac1e0145a7567c9b459a95e86
Certificate serial: 019427B693D747D2AB803A2C886ACB186B5F
Authority key identifier: 55:F7:CA:BA:9B:D5:F9:FA:C1:E0:14:5A:75:67:C9:B4:59:A9:5E:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VffKupvV-frB4BRadWfJtFmpXoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/tzSxEqbN9RPe7WLi6GpaqxSubiw.roa
Signing time: Thu 02 Jan 2025 15:51:04 +0000
ROA not before: Thu 02 Jan 2025 15:51:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204203
IP address blocks: 195.88.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VffKupvV-frB4BRadWfJtFmpXoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 12:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:93:d7:47:d2:ab:80:3a:2c:88:6a:cb:18:6b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55f7caba9bd5f9fac1e0145a7567c9b459a95e86
Validity
Not Before: Jan 2 15:51:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b734b112a6cdf513deed62e2e86a5aab14ae6e2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:56:db:2a:e6:64:05:01:95:e9:3e:d7:8c:64:
76:a8:f5:b3:57:bd:6c:ee:4a:e6:76:05:c9:05:c5:
4f:48:3c:9a:26:5d:7b:e4:83:57:07:f6:8d:33:04:
c9:70:bb:ef:61:55:43:d3:f1:b5:7d:83:2e:03:14:
a1:7c:51:ef:88:77:ed:93:be:e4:5e:14:7a:33:63:
fd:c9:c4:63:45:b9:f1:13:18:4d:51:a5:e5:78:5d:
7b:66:0b:a5:2c:77:2e:36:a5:4b:8e:27:a5:c1:b0:
75:d3:8b:2a:08:7c:8c:0b:fb:df:7e:39:10:7a:d9:
74:42:8a:6d:a9:5e:6a:8f:7e:5b:04:2a:e5:a2:e4:
10:21:5f:fe:5f:18:5d:ab:df:0e:df:f0:68:ab:bf:
c8:77:60:e0:29:0c:03:c1:05:9d:9a:34:5f:44:80:
53:ef:d6:6e:dd:90:58:33:82:4e:69:47:8a:c7:05:
8f:41:10:77:c4:24:68:42:ab:8e:6a:09:15:95:86:
a7:35:12:c8:b5:f7:40:62:cc:a0:ed:d3:90:b0:ef:
6f:53:a2:32:53:3e:10:24:79:68:b8:7a:01:4c:8a:
8e:ae:7a:72:7b:1c:7e:bf:2f:aa:c1:10:32:ba:2c:
a8:aa:5e:a3:25:db:88:97:e2:8b:37:14:9d:70:6d:
ae:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:34:B1:12:A6:CD:F5:13:DE:ED:62:E2:E8:6A:5A:AB:14:AE:6E:2C
X509v3 Authority Key Identifier:
keyid:55:F7:CA:BA:9B:D5:F9:FA:C1:E0:14:5A:75:67:C9:B4:59:A9:5E:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VffKupvV-frB4BRadWfJtFmpXoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/tzSxEqbN9RPe7WLi6GpaqxSubiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.188.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:42:59:00:f9:05:ab:cf:95:8d:21:f3:d8:60:08:5d:75:14:
f0:cc:a4:e3:12:f0:ac:80:b7:18:a1:09:e9:d3:f2:34:72:1b:
78:20:85:c4:47:a3:1c:ec:a8:6d:61:0f:97:08:12:8f:75:b5:
32:be:c7:67:56:22:06:70:8c:3e:28:ae:bd:5b:90:05:17:c6:
f8:9b:59:a9:88:af:b8:94:7d:3a:41:c7:33:b1:25:a8:91:0c:
a1:43:46:bb:67:b7:72:2c:6e:1a:4b:84:14:4b:97:39:a8:87:
0f:65:23:77:d5:79:c6:f9:88:70:2f:dd:3b:d8:07:a6:39:11:
12:0b:6f:99:5b:32:0d:b1:13:61:48:be:97:57:1a:57:5b:b4:
b6:1f:95:e2:1f:73:e2:6e:9d:e6:d2:69:6b:22:ee:19:2f:7d:
81:5c:de:8d:d1:a5:b1:0b:f2:80:53:87:5b:7c:2b:ac:ec:5f:
2e:62:ed:db:1f:45:70:f3:64:76:c1:14:64:20:65:3a:71:3e:
36:d1:b4:6b:fa:e0:6f:1a:c1:85:5c:85:ab:7b:30:f0:73:81:
ab:ba:82:4e:b6:74:4c:09:ac:92:0a:dd:a1:db:3d:4c:68:7d:
d4:0c:a4:d3:47:c2:6c:a9:81:e0:d7:1e:53:17:f9:8c:43:ba:
60:de:e1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:54:48 2025 by rpki-client