Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/tD16yJgx6FslawER1Evjktr90DU.roa
File: tD16yJgx6FslawER1Evjktr90DU.roa (raw, json)
Hash identifier: IgaqAI1HCcxs2x01fN4KAw3fM/ZJo5SCnC5NuJ1Z+9Q=
Subject key identifier: B4:3D:7A:C8:98:31:E8:5B:25:6B:01:11:D4:4B:E3:92:DA:FD:D0:35
Certificate issuer: /CN=99f2f4b02246e604e237f37945a382bfada1277f
Certificate serial: 019421B1739B005AF3D2F0693E45A36EE514
Authority key identifier: 99:F2:F4:B0:22:46:E6:04:E2:37:F3:79:45:A3:82:BF:AD:A1:27:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/tD16yJgx6FslawER1Evjktr90DU.roa
Signing time: Wed 01 Jan 2025 11:47:44 +0000
ROA not before: Wed 01 Jan 2025 11:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216230
IP address blocks: 80.75.208.0/24 maxlen: 24
2a13:f540::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:73:9b:00:5a:f3:d2:f0:69:3e:45:a3:6e:e5:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f2f4b02246e604e237f37945a382bfada1277f
Validity
Not Before: Jan 1 11:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b43d7ac89831e85b256b0111d44be392dafdd035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3c:41:dd:21:80:b2:81:03:2c:0e:e6:a4:de:
ae:4f:53:d6:f0:4a:97:17:52:4d:46:50:e5:02:a1:
e8:68:b6:8b:d3:f9:1c:2a:03:45:5a:96:99:60:8d:
f1:28:47:ce:a3:77:7d:25:46:48:95:78:b1:3a:92:
1f:da:7f:03:7d:e8:82:32:21:f7:83:6a:37:8f:83:
ba:9e:d0:8f:0a:2f:30:21:31:ee:de:28:bb:13:7e:
c3:48:b2:ae:3a:b4:b9:49:7e:b2:d6:f5:14:fc:2b:
88:25:69:fb:51:23:dd:c0:a1:38:60:0a:0b:48:69:
46:25:95:cc:41:d2:85:b4:5c:34:c0:15:2a:3c:9e:
d5:08:fd:46:4e:a4:00:77:97:5d:4e:c1:6a:90:78:
09:7d:90:4b:28:2e:1f:40:00:cf:39:4a:98:3e:68:
cf:6b:5d:01:18:e1:c1:01:c3:8a:99:52:95:64:cc:
70:c4:34:64:92:25:e0:8c:a7:aa:74:f4:70:e0:da:
ca:31:5e:12:f4:de:49:2a:d4:5a:4c:75:fd:9a:33:
22:6b:ae:a3:16:08:a7:43:d7:af:84:cb:5b:74:e5:
17:a9:65:18:e4:c2:2e:e2:e2:8f:22:9c:32:a9:7e:
44:3e:93:05:aa:2d:55:12:42:37:1b:69:03:7b:46:
5f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:3D:7A:C8:98:31:E8:5B:25:6B:01:11:D4:4B:E3:92:DA:FD:D0:35
X509v3 Authority Key Identifier:
keyid:99:F2:F4:B0:22:46:E6:04:E2:37:F3:79:45:A3:82:BF:AD:A1:27:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/tD16yJgx6FslawER1Evjktr90DU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.208.0/24
IPv6:
2a13:f540::/29
Signature Algorithm: sha256WithRSAEncryption
4b:f6:a5:2c:97:1f:e9:93:d4:18:c7:c3:ce:db:5d:25:75:4f:
3f:e1:73:10:e6:35:cc:77:e0:39:9e:2c:05:a6:58:03:b1:ad:
64:2d:19:96:8d:21:12:d1:1c:69:60:3b:88:38:b2:e2:a9:30:
33:b8:96:de:a6:2e:fc:ca:d8:f9:8d:6d:84:f1:27:ef:60:7d:
05:61:e7:14:19:6e:df:43:ce:71:d3:14:47:67:9e:e0:e7:ed:
6c:4a:bf:b7:2b:75:db:40:d9:b1:4f:e9:b8:89:5b:2d:3d:36:
90:db:45:b0:e7:e5:11:01:65:cf:c5:90:b8:25:2d:1b:2f:f8:
7f:6d:f5:99:1c:3b:15:9a:39:e9:a7:bf:d1:05:54:0a:ab:36:
05:51:6c:8f:ca:a5:48:8c:32:5e:5d:bc:a8:fe:e7:86:b1:74:
1c:24:ef:e8:2f:5f:21:70:87:f7:b0:fe:da:54:7d:6d:98:e1:
aa:4e:4d:07:42:c9:57:af:2e:8c:ea:64:30:44:ff:e2:72:42:
fb:0e:1d:9a:8e:d3:10:b0:41:94:f5:57:67:70:70:f4:3c:84:
b3:22:83:ab:56:47:93:87:aa:85:c9:fa:07:e0:5a:68:b7:1a:
ce:e3:a4:af:ee:5c:64:0f:3d:87:58:df:3f:71:3a:f9:6a:5b:
8f:6e:1c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:56:59 2025 by rpki-client