Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/TTSbgeEMLa3E_ET89kmhbvWRt_A.roa
File: TTSbgeEMLa3E_ET89kmhbvWRt_A.roa (raw, json)
Hash identifier: 8pa/N1xt8ugY+2hfLv/q6JQGYgRfNEDx7qaPGd/Mb/0=
Subject key identifier: 4D:34:9B:81:E1:0C:2D:AD:C4:FC:44:FC:F6:49:A1:6E:F5:91:B7:F0
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 0194228D98B9EB077493BF6FAC6C9BC22FD3
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/TTSbgeEMLa3E_ET89kmhbvWRt_A.roa
Signing time: Wed 01 Jan 2025 15:48:12 +0000
ROA not before: Wed 01 Jan 2025 15:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31085
IP address blocks: 212.252.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:98:b9:eb:07:74:93:bf:6f:ac:6c:9b:c2:2f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 1 15:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d349b81e10c2dadc4fc44fcf649a16ef591b7f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d2:26:80:b9:2c:f2:5f:c0:1e:80:88:85:ed:
2c:7c:76:55:88:99:3b:ca:fc:ca:4e:a2:56:29:f4:
d5:7a:a9:77:3f:97:d8:b7:b0:51:30:a2:65:f5:ce:
e0:03:17:73:e5:45:be:6f:90:5f:4c:16:e4:c7:bd:
11:91:04:73:10:c3:cb:1b:10:d0:1e:da:cf:7d:99:
05:13:20:4f:c1:64:81:c2:5a:56:58:ac:cc:2f:26:
45:c9:05:e8:b4:48:66:c4:3a:e3:07:63:39:5b:d4:
f3:38:8a:c8:ce:fc:e0:d2:28:a2:20:25:11:01:05:
e4:b3:6b:da:ba:3f:23:17:c6:43:c2:2a:48:fb:80:
8a:87:fc:7f:4f:f4:8a:52:20:fd:1b:e1:38:2a:eb:
06:fa:d6:00:c6:9c:86:6b:04:b4:df:d4:15:53:50:
e5:d1:d0:df:c1:21:3d:98:54:fb:42:77:19:45:4c:
c2:91:32:47:de:67:68:f8:58:f8:f4:26:0f:ab:2c:
a3:7e:5b:28:f0:14:4f:0a:d7:b9:a9:05:d3:0b:57:
69:d9:15:c8:3a:be:ee:d2:c1:12:80:a5:84:2f:ea:
0a:68:cd:bf:6d:79:f0:1b:dc:f3:49:38:f8:e0:d8:
f2:a6:ac:72:30:89:85:1c:d3:3c:54:4a:6a:6a:62:
79:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:34:9B:81:E1:0C:2D:AD:C4:FC:44:FC:F6:49:A1:6E:F5:91:B7:F0
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/TTSbgeEMLa3E_ET89kmhbvWRt_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.252.192.0/24
Signature Algorithm: sha256WithRSAEncryption
49:fa:3a:bc:28:a6:d4:df:eb:00:93:69:ad:14:48:be:9b:15:
de:92:aa:64:62:90:24:e4:44:f4:5e:34:b4:90:5d:b1:5c:c7:
54:d3:fc:bc:33:fe:1e:cd:94:b8:67:1c:03:cd:66:13:cc:2a:
7a:a1:7b:30:37:a1:c5:23:2d:14:b8:65:dd:8c:6b:e0:e0:c8:
52:54:a4:53:d2:a5:5a:a3:58:e6:5f:01:c8:c6:6b:66:ce:44:
70:3b:b1:1b:96:f3:27:c3:d9:04:70:58:12:18:94:ec:a4:85:
9c:17:9a:90:7e:ec:22:3d:cb:c1:6f:b6:17:dd:c6:e1:16:1b:
50:32:f0:65:bb:af:bb:ee:da:2a:95:67:70:6c:37:3f:7b:4e:
f3:2b:f8:62:ed:9b:11:26:7e:eb:47:38:81:cf:fc:2b:83:f8:
e5:02:e2:0d:4a:b4:03:15:e4:9a:98:63:b2:83:c4:8c:ac:24:
5f:f9:6f:a8:d0:ac:b0:cf:77:85:3e:a4:25:fd:7d:3a:db:0a:
fa:30:53:21:ca:9e:e4:e8:74:1c:e1:49:9e:25:f2:b1:b7:12:
3c:b6:7c:be:88:fa:8f:b6:ba:de:ea:33:93:a2:ba:92:99:17:
35:33:64:b3:04:92:9c:70:99:c9:ec:02:71:5c:f0:61:6c:77:
37:97:a3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:27:22 2025 by rpki-client