Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/tzI-3RvxZseZ0auE1vTr_8vXlHs.roa
File: tzI-3RvxZseZ0auE1vTr_8vXlHs.roa (raw, json)
Hash identifier: CiZ/fhpSU1BnMxFu5Ur8z7I7FFKUZ6D5j7i0HG/zpqY=
Subject key identifier: B7:32:3E:DD:1B:F1:66:C7:99:D1:AB:84:D6:F4:EB:FF:CB:D7:94:7B
Certificate issuer: /CN=16ea37a8e73e7679a933d70f7b9c872081024455
Certificate serial: 0194214391CAF9A6B861ABCED11487C988A3
Authority key identifier: 16:EA:37:A8:E7:3E:76:79:A9:33:D7:0F:7B:9C:87:20:81:02:44:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fuo3qOc-dnmpM9cPe5yHIIECRFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/tzI-3RvxZseZ0auE1vTr_8vXlHs.roa
Signing time: Wed 01 Jan 2025 09:47:43 +0000
ROA not before: Wed 01 Jan 2025 09:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211421
IP address blocks: 185.81.97.0/24 maxlen: 24
194.59.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fuo3qOc-dnmpM9cPe5yHIIECRFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:91:ca:f9:a6:b8:61:ab:ce:d1:14:87:c9:88:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16ea37a8e73e7679a933d70f7b9c872081024455
Validity
Not Before: Jan 1 09:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7323edd1bf166c799d1ab84d6f4ebffcbd7947b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:51:d5:6f:9b:85:3f:eb:8c:af:3c:42:fc:06:
f4:ee:2c:54:b7:f1:2f:cc:88:25:c3:79:d4:03:cb:
45:f9:65:84:ae:59:f2:00:98:44:ff:39:7c:70:d9:
21:35:69:92:44:c3:76:9d:38:ad:c3:7d:fb:39:85:
4b:4b:81:d8:f0:be:de:61:06:eb:74:93:32:5f:8b:
89:7f:e6:6b:9c:14:44:7a:61:10:ec:7b:e5:6c:bd:
45:7f:59:33:44:0b:5e:6c:5f:04:38:8d:0b:49:f8:
90:bf:94:d0:58:e2:b0:0c:dc:5a:b5:6f:31:55:31:
8c:16:87:26:a4:82:08:a2:74:0a:0a:20:a7:72:f6:
4c:36:fb:8a:72:83:a1:80:ee:7a:c7:f9:38:b5:e9:
b5:ad:43:68:06:64:a9:fd:1a:ee:3d:44:36:68:2d:
90:0c:f3:f9:7e:7b:8c:c6:6d:a3:88:b2:15:06:c6:
2f:24:d5:b2:71:d7:f4:9d:5b:58:eb:09:d6:a2:2a:
89:72:59:5e:70:66:f8:9a:f7:74:f7:3d:5e:06:fd:
6e:8e:b8:39:89:11:aa:7c:7c:f6:ea:c5:be:6e:fb:
81:25:9e:a8:e7:9a:70:d4:e6:b9:dd:38:e4:5c:fd:
c6:67:a9:8f:df:89:cd:dd:99:5f:61:7a:51:10:a4:
a2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:32:3E:DD:1B:F1:66:C7:99:D1:AB:84:D6:F4:EB:FF:CB:D7:94:7B
X509v3 Authority Key Identifier:
keyid:16:EA:37:A8:E7:3E:76:79:A9:33:D7:0F:7B:9C:87:20:81:02:44:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fuo3qOc-dnmpM9cPe5yHIIECRFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/tzI-3RvxZseZ0auE1vTr_8vXlHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.97.0/24
194.59.170.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:27:07:f2:d8:d2:8e:6a:15:83:a4:c5:ba:f2:1f:69:06:a5:
5b:35:21:91:ed:b1:0f:e7:ae:7a:6e:cc:10:ac:1a:28:f3:fc:
d4:61:09:4e:6c:56:3f:7b:77:be:ec:cf:70:49:ef:b0:cd:b3:
0c:d1:ef:54:b6:35:35:53:d9:a3:c4:31:87:d1:c6:c0:47:37:
e0:34:6f:df:b9:a0:11:6f:19:3e:2b:83:69:8d:b2:2c:67:88:
8d:b3:86:72:59:08:50:8c:28:26:36:28:77:5b:e5:84:2c:f9:
94:43:03:c7:88:3b:c5:59:dc:0c:e1:6d:3c:4b:7c:a9:37:0b:
bb:c7:8d:0f:ad:71:95:31:a4:7e:93:2f:07:5a:e8:44:9a:de:
7f:79:55:ac:66:b2:51:92:2d:b8:2f:09:4f:20:75:90:f9:47:
ee:95:ac:a2:6d:af:cd:34:4f:6d:df:6b:06:c6:7b:92:c7:3a:
ad:3c:1f:ce:9b:25:f6:42:ce:bc:f4:52:c4:45:90:2e:04:f1:
9a:9a:a5:88:e9:be:ca:2a:d9:5b:29:df:08:bb:2a:6f:5b:01:
d8:2d:e3:76:7c:b1:50:5d:73:37:aa:e6:d4:40:63:aa:23:98:
85:4c:13:10:65:dd:11:40:ca:d1:84:34:b9:de:e3:9b:14:46:
85:aa:3c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:04 2025 by rpki-client