Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/TGCJDTG82pX-vT9LeK2kOQ4sDi8.roa
File: TGCJDTG82pX-vT9LeK2kOQ4sDi8.roa (raw, json)
Hash identifier: zRKBbHZChcvp4qDJB7Pkx8ohWvBK1TWvnJD0kE9wiHc=
Subject key identifier: 4C:60:89:0D:31:BC:DA:95:FE:BD:3F:4B:78:AD:A4:39:0E:2C:0E:2F
Certificate issuer: /CN=60d0b0207603be43d8492e9851378b8b4f09594f
Certificate serial: 019473B96ABA7E4B38CA602C2E72B0D2628D
Authority key identifier: 60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/TGCJDTG82pX-vT9LeK2kOQ4sDi8.roa
Signing time: Fri 17 Jan 2025 10:05:18 +0000
ROA not before: Fri 17 Jan 2025 10:05:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 130.115.248.0/22 maxlen: 24
130.115.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:73:b9:6a:ba:7e:4b:38:ca:60:2c:2e:72:b0:d2:62:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60d0b0207603be43d8492e9851378b8b4f09594f
Validity
Not Before: Jan 17 10:05:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c60890d31bcda95febd3f4b78ada4390e2c0e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:09:91:73:4c:de:d4:09:1b:59:3b:29:8f:cb:
65:ba:51:06:fd:22:e2:fc:b8:83:38:9b:30:77:0e:
37:30:ea:48:0d:af:72:b2:2b:f6:7e:41:80:8f:4b:
3e:bc:0a:a4:c9:92:32:7d:08:bb:dd:c3:ac:cf:83:
5e:28:80:e6:63:cd:29:12:7a:ac:8c:61:de:a7:95:
fb:1e:dd:be:6b:d7:53:48:c0:ba:c9:5e:93:ff:fc:
96:0e:c2:ce:5a:2e:c9:de:fc:e4:9a:02:ad:af:0f:
9b:2d:65:5d:58:b3:0c:bb:15:02:f7:35:d9:fa:27:
f8:82:20:ae:75:db:3d:97:27:cf:26:06:7c:83:ea:
e5:99:63:ea:87:b9:2e:eb:c8:9a:f7:8e:c7:5c:2a:
48:e7:2e:42:24:32:70:19:63:c6:61:1c:2b:dc:6c:
6b:f3:ab:f0:ec:09:ad:5e:40:80:6d:9c:d9:13:68:
a4:b5:5b:40:2e:85:d5:b4:01:60:52:83:c6:95:2d:
28:93:37:09:8a:54:b8:ac:e7:f0:95:d5:7c:a1:21:
37:bb:d5:6a:c9:0e:16:f8:4b:79:32:79:77:06:34:
c8:42:d9:38:b3:49:91:cc:ca:55:a5:ef:0d:48:f3:
aa:82:c2:2d:c5:f9:8c:a7:e7:00:32:86:c6:a3:f4:
01:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:60:89:0D:31:BC:DA:95:FE:BD:3F:4B:78:AD:A4:39:0E:2C:0E:2F
X509v3 Authority Key Identifier:
keyid:60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/TGCJDTG82pX-vT9LeK2kOQ4sDi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.115.248.0/21
Signature Algorithm: sha256WithRSAEncryption
ca:bf:82:f7:b2:e7:a4:57:6b:7f:e7:7b:42:31:af:5e:76:ee:
97:7b:76:ce:0a:c8:a2:b3:d6:f2:86:75:18:21:d0:37:e5:fa:
5b:0d:26:a1:5c:cc:53:05:71:2e:8a:0d:c1:8a:58:60:16:8d:
4a:43:2c:4a:23:63:38:f5:ee:04:a3:c0:4b:a1:a3:c8:63:2a:
4b:f7:7a:25:9e:05:47:b5:c2:38:68:3b:e3:3d:6f:ff:3f:78:
bd:e5:5a:0f:95:32:7a:33:ca:93:97:ac:a2:eb:a9:cd:e8:21:
73:16:86:68:3f:ab:73:5d:a2:26:56:a2:36:1d:68:c2:3e:3f:
52:3e:da:03:9d:97:b8:d4:cb:36:b6:f2:0d:97:f3:1a:05:60:
44:ff:7c:6a:15:71:6f:dc:12:c0:f1:dc:2a:25:95:31:ef:13:
c9:15:76:93:bb:ee:75:0e:f1:ed:c2:0c:cd:e6:fe:f3:3c:6e:
b3:22:75:68:4b:a3:65:fa:10:02:9c:b9:e9:22:80:e9:7c:c1:
af:7a:c4:29:4f:b7:e0:46:28:f4:4e:2c:e6:0d:f3:7c:b3:f8:
c1:11:2b:30:e7:61:18:74:9e:75:18:2d:5c:e9:94:da:3d:9b:
fb:01:10:34:82:d5:43:cf:c8:c6:49:0d:35:7f:94:8b:90:30:
33:ff:5b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:11 2025 by rpki-client