Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/1-TNKHUQBd0JEmyJIvaoUUde-kRY.roa
File: 1-TNKHUQBd0JEmyJIvaoUUde-kRY.roa (raw, json)
Hash identifier: G2e9u8Y6Td6qmoghBsuFWq6jIrLhCoLM2r2ooj9I44k=
Subject key identifier: F9:33:4A:1D:44:01:77:42:44:9B:22:48:BD:AA:14:51:D7:BE:91:16
Certificate issuer: /CN=4599ed84e4b211cc8baa89149741354f8850ef0f
Certificate serial: 01942745D4ACF1996F6C18D2B1436E10CF3C
Authority key identifier: 45:99:ED:84:E4:B2:11:CC:8B:AA:89:14:97:41:35:4F:88:50:EF:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZnthOSyEcyLqokUl0E1T4hQ7w8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/1-TNKHUQBd0JEmyJIvaoUUde-kRY.roa
Signing time: Thu 02 Jan 2025 13:47:55 +0000
ROA not before: Thu 02 Jan 2025 13:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49324
IP address blocks: 194.61.192.0/19 maxlen: 19
194.61.192.0/20 maxlen: 20
194.61.208.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZnthOSyEcyLqokUl0E1T4hQ7w8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 10:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:45:d4:ac:f1:99:6f:6c:18:d2:b1:43:6e:10:cf:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4599ed84e4b211cc8baa89149741354f8850ef0f
Validity
Not Before: Jan 2 13:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9334a1d44017742449b2248bdaa1451d7be9116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:eb:06:02:26:02:44:37:8e:7d:5a:dc:ff:e6:
b2:58:2f:0b:0c:d9:62:ff:c8:df:5e:e9:a1:60:13:
51:8c:6b:54:a3:f2:73:b3:c2:fa:14:dd:95:2d:76:
c1:5d:ba:a1:3a:07:c4:aa:75:18:81:e4:e0:b7:3c:
c7:a2:82:1e:f4:47:a6:72:06:00:9d:e5:ea:cc:ef:
cd:63:88:bc:ba:d9:8f:0b:25:9f:53:ae:d6:4d:a2:
ab:b1:62:dc:20:86:de:cd:e7:86:34:6c:a0:72:4f:
5e:bb:fa:24:69:86:ac:a2:fe:ee:2e:e4:2f:df:c2:
01:5a:be:90:78:af:56:73:35:e3:ff:a5:a0:c3:5a:
0b:a3:4a:43:4b:56:c8:e3:e4:8c:b3:5c:6f:2e:26:
04:33:87:25:ed:74:41:6e:58:bd:b6:27:11:5d:9e:
2e:90:15:01:58:a4:d6:b0:c7:60:10:e2:9c:12:88:
20:57:be:dc:e2:6c:0d:55:38:7f:ef:5e:2a:d9:40:
be:56:39:68:ee:f8:91:b2:3c:31:53:c8:c4:2e:c5:
10:01:01:66:d5:53:0a:3b:ff:b6:5e:0c:d6:49:4e:
a9:b9:c0:9d:be:b7:2c:60:67:58:7a:9e:d0:d8:06:
51:cd:02:9c:77:0d:65:8c:f8:07:f6:b7:7f:d3:49:
2b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:33:4A:1D:44:01:77:42:44:9B:22:48:BD:AA:14:51:D7:BE:91:16
X509v3 Authority Key Identifier:
keyid:45:99:ED:84:E4:B2:11:CC:8B:AA:89:14:97:41:35:4F:88:50:EF:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZnthOSyEcyLqokUl0E1T4hQ7w8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/1-TNKHUQBd0JEmyJIvaoUUde-kRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.192.0/19
Signature Algorithm: sha256WithRSAEncryption
88:0b:b6:25:74:45:f9:13:96:24:1f:92:7c:1b:df:0f:fc:a5:
9d:5f:c1:3d:32:44:1e:f7:03:03:70:d8:1f:a6:56:1d:79:c6:
72:77:72:f1:c7:1c:15:0f:c0:2a:80:91:22:a1:38:d8:c6:0a:
bc:03:4c:92:77:d3:31:52:f6:ce:41:1e:59:91:04:1d:e7:2d:
0e:9b:73:68:3b:94:ac:85:31:ba:28:2b:ec:73:1d:0a:63:28:
fe:56:66:18:da:c7:f9:a4:91:4d:96:66:45:34:e6:02:eb:1a:
7b:64:e6:9f:b6:76:b9:12:a1:9b:99:34:32:8e:b2:fd:f1:2e:
c6:7a:a4:83:cc:cc:45:e5:8f:f6:04:2d:4e:99:f8:75:b8:c8:
9f:de:04:f9:d8:4e:eb:2b:ee:ec:ad:69:ae:3e:49:72:c9:41:
84:45:d0:b7:80:f2:09:30:99:74:35:b5:5d:16:2c:e5:84:d3:
47:ac:ca:fa:7f:f7:a9:50:64:3a:a4:b5:1a:8e:e5:75:f4:b3:
81:fe:52:0b:be:c8:f3:ef:b7:fa:cf:cf:9c:6f:44:76:bc:72:
51:08:b3:c9:34:cc:1b:50:56:bb:76:ee:d1:4a:f7:ea:06:fd:
3f:90:e9:9a:6e:d4:e0:29:09:2d:a0:73:da:c9:54:a6:8a:34:
dc:fa:c4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:32:16 2025 by rpki-client