Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/T4TONXR3U8WyCo46CkuNtztHukY.roa
File: T4TONXR3U8WyCo46CkuNtztHukY.roa (raw, json)
Hash identifier: 7iqjcBkqATgjbVZTfR+LvUTtcq1T6F2SQHOk9So7h4Q=
Subject key identifier: 4F:84:CE:35:74:77:53:C5:B2:0A:8E:3A:0A:4B:8D:B7:3B:47:BA:46
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0196250EA9389D5EEC39D4F8D8E6CFB518E4
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/T4TONXR3U8WyCo46CkuNtztHukY.roa
Signing time: Fri 11 Apr 2025 13:33:59 +0000
ROA not before: Fri 11 Apr 2025 13:33:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213282
IP address blocks: 185.72.9.0/24 maxlen: 24
188.240.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:25:0e:a9:38:9d:5e:ec:39:d4:f8:d8:e6:cf:b5:18:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 11 13:33:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f84ce35747753c5b20a8e3a0a4b8db73b47ba46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7e:93:70:30:5e:79:6c:7c:21:1b:84:01:41:
2c:e6:5d:9b:31:6c:df:2b:7a:4a:5a:34:89:24:71:
26:ec:be:d5:9c:aa:c7:f6:16:d3:4d:19:37:c5:81:
59:72:45:05:45:64:bb:11:0f:6a:bc:72:81:53:38:
c0:b3:04:a8:49:f5:96:e6:25:1d:7a:c6:ea:58:4f:
94:24:62:bb:62:f1:44:fa:a5:da:89:67:69:74:5f:
e7:47:2c:d1:68:72:86:5c:5c:62:03:7d:b2:7d:e4:
b5:29:18:1b:11:fc:a3:76:da:37:4b:db:de:0d:fa:
95:13:6c:3a:ff:57:f6:01:2b:bc:89:7c:96:0a:af:
b7:60:ce:48:00:de:96:f1:66:d5:f8:36:36:49:40:
14:27:68:cf:24:b3:ad:d7:d6:07:58:0c:1c:8d:c8:
3f:3a:4d:4a:46:7b:fc:70:7a:65:25:fe:8c:17:66:
1b:35:87:d8:74:5e:ac:1c:79:ea:5a:11:6b:7c:ec:
17:31:3c:53:0f:50:b7:f2:5b:45:67:6a:b0:a9:8d:
60:10:16:a1:f8:ff:5c:7d:58:47:9c:01:e2:30:51:
1d:c9:ef:53:d2:23:60:05:ef:11:0e:b6:d8:bd:33:
04:3e:fb:02:5c:a8:84:9c:ee:6d:3b:ae:03:56:52:
15:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:84:CE:35:74:77:53:C5:B2:0A:8E:3A:0A:4B:8D:B7:3B:47:BA:46
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/T4TONXR3U8WyCo46CkuNtztHukY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.9.0/24
188.240.81.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:a9:39:72:53:c0:14:65:a1:99:d9:f5:be:6c:7f:81:cb:53:
83:69:84:35:ff:c7:24:bc:05:d0:ee:ce:fd:88:70:cc:e4:b5:
e2:00:31:a5:d7:36:02:28:a5:69:21:86:ff:85:18:6d:6a:01:
2d:04:25:a5:e4:c5:9d:8d:a5:b3:af:c6:5e:63:40:e8:b2:76:
17:12:c3:e7:64:92:3b:b9:8f:de:84:76:50:60:72:89:51:88:
ff:9d:e4:fe:c1:49:86:a5:47:06:39:07:d9:6a:7e:f7:87:3b:
bf:82:48:3a:52:c5:28:cf:b9:b2:4b:3d:e9:28:dc:17:5c:ef:
a9:26:97:d1:fb:0c:0e:1f:94:6a:f6:45:96:b8:b2:41:5a:50:
06:7c:c1:1b:ed:51:6a:34:be:2b:02:54:58:8e:e8:f0:ad:cf:
f9:e8:f9:25:48:e0:fd:f2:8c:77:6f:12:1a:0f:60:70:c5:65:
cc:e9:81:2d:4c:98:66:d7:78:6d:6b:2c:84:29:4d:ab:df:04:
6f:3f:83:e5:7f:9a:e3:a5:af:6e:79:0c:15:b5:dc:da:31:4f:
62:77:10:74:bb:fe:f4:75:cc:b2:fa:76:0a:bf:04:2a:de:ff:
94:d9:c8:b4:1a:05:e4:00:fc:35:00:b3:16:6a:2c:e4:47:83:
26:82:3f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:23:07 2025 by rpki-client