Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/TW2quqEtMmBMtjFETxrg2LVk9Oo.roa
File: TW2quqEtMmBMtjFETxrg2LVk9Oo.roa (raw, json)
Hash identifier: 63aKh4PjYXwflLNSYPKfmuOdFvd6LVwJFipNOxlRjJI=
Subject key identifier: 4D:6D:AA:BA:A1:2D:32:60:4C:B6:31:44:4F:1A:E0:D8:B5:64:F4:EA
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 019427B42AC3562AA8A9A8584871F540B068
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/TW2quqEtMmBMtjFETxrg2LVk9Oo.roa
Signing time: Thu 02 Jan 2025 15:48:26 +0000
ROA not before: Thu 02 Jan 2025 15:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204746
IP address blocks: 86.38.35.0/24 maxlen: 24
89.117.223.0/24 maxlen: 24
89.117.243.0/24 maxlen: 24
89.117.246.0/24 maxlen: 24
185.189.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:2a:c3:56:2a:a8:a9:a8:58:48:71:f5:40:b0:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Jan 2 15:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d6daabaa12d32604cb631444f1ae0d8b564f4ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f7:21:c2:6f:59:5c:4c:e1:f7:26:78:48:0e:
0f:c9:06:7f:71:cd:55:15:95:fa:7f:fd:60:0a:16:
a9:db:3b:0d:59:df:33:07:97:a1:a0:09:4c:28:ab:
d7:56:ad:f8:e0:90:7d:76:33:88:b1:0a:12:f2:55:
4f:80:88:82:41:46:77:54:15:43:b8:24:37:df:9b:
15:0e:97:32:7b:e9:28:ea:81:12:b9:b1:6f:d6:79:
52:fc:4c:9d:30:fa:65:65:63:e6:7e:da:11:52:5d:
64:2e:b9:17:5c:41:e4:c2:3e:cf:43:f0:4a:ac:06:
88:92:df:ad:41:7e:77:18:ca:65:81:3e:55:80:c2:
60:f2:61:2f:76:26:38:c4:9b:94:6c:24:f9:60:e7:
01:e6:06:6c:ae:c4:f3:dd:a5:e5:62:84:7d:2e:b5:
16:73:8e:f2:f3:13:65:fb:b8:07:be:5d:4a:c0:02:
87:44:c3:f3:72:e5:e3:67:c2:8a:c0:94:5a:9b:4a:
d0:56:14:e1:81:f2:11:8d:bf:b2:82:dd:f3:0b:59:
22:67:e5:cc:fc:c7:ae:63:a9:63:55:08:35:c9:a9:
f3:0e:3a:df:cf:09:c8:f1:71:c2:c4:9f:bc:82:3a:
4e:a6:f4:30:96:b2:72:30:16:16:3d:41:a4:1b:c9:
99:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:6D:AA:BA:A1:2D:32:60:4C:B6:31:44:4F:1A:E0:D8:B5:64:F4:EA
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/TW2quqEtMmBMtjFETxrg2LVk9Oo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.35.0/24
89.117.223.0/24
89.117.243.0/24
89.117.246.0/24
185.189.153.0/24
Signature Algorithm: sha256WithRSAEncryption
32:04:d0:20:67:e7:6f:e3:c4:59:00:6b:9f:aa:81:62:aa:9f:
30:d9:a7:10:c7:02:53:bf:f3:2f:9e:22:0a:3a:fa:ef:40:9d:
36:f7:d1:2f:de:c6:26:6d:62:43:50:eb:e5:b8:0e:2c:ab:b8:
a9:48:e4:88:bc:0f:77:7e:3f:c5:1b:4c:85:a6:1a:c5:ef:19:
f1:0e:f1:da:6c:98:35:42:07:69:29:c6:62:49:da:1e:a8:53:
a2:94:47:ec:9b:1d:d7:d0:65:87:b3:4b:7b:98:51:12:4b:de:
04:70:65:1e:85:d5:90:61:1d:0c:86:74:9e:36:11:49:02:d1:
76:c2:6f:ac:94:55:51:7d:09:a3:47:01:64:39:2c:25:09:29:
d8:65:a6:03:b1:f5:3a:ed:fc:2b:40:c1:fd:ba:47:55:70:47:
2c:ed:54:48:7c:f9:c5:42:87:17:aa:52:74:42:80:6a:cb:c2:
20:dc:80:74:5d:1a:91:f5:1c:ac:41:d6:b9:e0:05:1e:b6:42:
72:6d:0f:71:e7:a5:fd:c6:60:04:5e:7a:5d:f3:2d:78:fd:b3:
2f:b2:c3:11:ea:cc:f3:9e:ed:b8:01:4a:3d:fa:de:35:9b:fd:
78:c2:f8:69:c1:8d:38:03:be:83:94:86:9d:15:97:47:7e:a7:
77:76:b3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:20 2025 by rpki-client