Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/TemDrQ0sq1lGhV-6SZOInykzoBg.roa
File: TemDrQ0sq1lGhV-6SZOInykzoBg.roa (raw, json)
Hash identifier: qf7xUZ36xDKxzJDT/F472QD8vkpN/AIve7vzyysOkNg=
Subject key identifier: 4D:E9:83:AD:0D:2C:AB:59:46:85:5F:BA:49:93:88:9F:29:33:A0:18
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01942747D093082879C7DA591318475EB4A1
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/TemDrQ0sq1lGhV-6SZOInykzoBg.roa
Signing time: Thu 02 Jan 2025 13:50:05 +0000
ROA not before: Thu 02 Jan 2025 13:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205026
IP address blocks: 188.130.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 03:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:d0:93:08:28:79:c7:da:59:13:18:47:5e:b4:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 13:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4de983ad0d2cab5946855fba4993889f2933a018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:27:05:8d:35:ab:5c:df:47:4a:f2:56:f4:a9:
28:be:50:0c:7a:25:93:f4:4f:b8:2d:f4:6e:fb:63:
11:59:d3:11:b9:ab:e0:44:22:6f:a7:3a:1f:a2:7b:
96:93:13:c9:6b:40:d7:06:7e:bb:16:f9:0d:62:68:
55:62:76:44:81:8b:0f:26:46:8b:38:36:22:c8:ec:
93:57:74:e3:dd:41:d7:bb:6a:d1:a0:61:03:fd:2b:
22:f2:74:7d:03:75:37:c7:73:34:c4:48:a7:e6:0c:
76:6b:e2:e1:65:06:61:99:1a:a6:70:d0:6e:fa:47:
f2:d2:44:ac:11:e1:2e:ff:f5:fb:8d:57:b1:05:d9:
78:78:5f:62:e4:f0:03:1e:57:e9:53:99:98:94:cd:
3f:84:30:79:3d:2b:28:7f:78:8b:bd:25:6a:71:16:
10:37:4a:dd:45:7b:43:41:c8:c4:0a:10:0d:0d:e8:
99:53:9c:b4:0e:24:fd:dc:ce:1a:21:8b:2f:7b:17:
ff:ce:f0:03:05:89:86:50:03:c6:8f:7b:40:07:b5:
59:b5:3a:dc:96:98:d1:9e:3e:ec:7b:78:ae:a1:9a:
66:de:9c:32:25:b7:98:ae:a5:81:c5:78:c1:be:3a:
3b:c9:23:b5:34:08:21:56:d2:5c:cf:fb:c1:18:e6:
ad:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E9:83:AD:0D:2C:AB:59:46:85:5F:BA:49:93:88:9F:29:33:A0:18
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/TemDrQ0sq1lGhV-6SZOInykzoBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.130.140.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:a6:f4:22:a1:fa:67:80:03:ca:86:51:b5:52:04:35:d6:aa:
86:d1:f8:be:0f:ec:d9:1d:94:99:51:49:ec:17:a9:a1:4f:c8:
f9:8d:16:40:d9:93:f2:fb:d0:3a:af:4e:cb:65:2e:0e:72:f2:
94:40:51:7c:00:f9:98:14:e4:0e:50:61:5b:8c:fc:21:4f:42:
e6:1b:ff:47:3c:6f:23:18:52:e5:b1:99:82:76:35:d1:3f:84:
18:6c:d5:2b:4f:5e:5e:6d:a6:3c:e9:45:ac:3e:35:fa:4a:24:
fa:6a:ce:42:b6:5a:8b:59:a2:6c:3f:e9:26:97:32:9e:4b:8a:
e1:36:b6:be:e9:3c:16:83:86:54:ab:72:c2:24:31:3a:3c:33:
61:ab:f9:af:2e:28:09:8f:59:3f:b2:08:b7:47:f9:98:00:7e:
cc:8e:f5:69:14:94:b8:99:36:fc:ba:30:a0:3c:1f:74:9d:69:
14:7a:84:03:c6:a3:60:c5:c0:e9:21:ed:96:e6:6b:15:b9:2b:
c5:96:d7:15:f7:9d:59:ac:1b:5c:da:11:62:e0:37:76:b7:44:
cc:59:0b:6c:df:4a:ac:d7:a3:eb:5e:27:58:d8:a6:0c:cf:5f:
1e:0c:02:2d:50:38:b8:17:71:70:cb:ba:4e:18:df:91:bd:24:
1e:4d:7c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:27:16 2025 by rpki-client