Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/tgzOB-X3X9hQIl9WIvEW-sVk2TA.roa
File: tgzOB-X3X9hQIl9WIvEW-sVk2TA.roa (raw, json)
Hash identifier: dct8dEsqnpkwRMNVp0z4oU64+Yxl27f7QQdtJgkmALY=
Subject key identifier: B6:0C:CE:07:E5:F7:5F:D8:50:22:5F:56:22:F1:16:FA:C5:64:D9:30
Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial: 019420D63CB632FE45AE59116F22DF2DCFE2
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/tgzOB-X3X9hQIl9WIvEW-sVk2TA.roa
Signing time: Wed 01 Jan 2025 07:48:18 +0000
ROA not before: Wed 01 Jan 2025 07:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212477
IP address blocks: 79.110.236.0/24 maxlen: 24
146.19.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 15:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:3c:b6:32:fe:45:ae:59:11:6f:22:df:2d:cf:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Validity
Not Before: Jan 1 07:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b60cce07e5f75fd850225f5622f116fac564d930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ff:05:a5:6d:12:ab:ff:05:98:31:23:9c:93:
2e:ce:f7:44:1e:21:e8:eb:5c:6f:1b:df:59:4f:04:
eb:0b:bd:d5:63:b2:1e:96:0d:be:a3:c5:1e:a0:bd:
34:5c:ea:6d:9c:23:e6:88:2b:29:23:5e:3f:76:8d:
3d:e9:db:f3:7f:9b:5d:25:86:0e:3b:88:b1:19:b3:
f6:2e:04:06:06:76:f8:d5:15:cf:36:c5:e8:9b:0e:
6f:6f:b9:c8:15:e6:f2:f9:dd:3d:b4:af:77:64:cd:
4c:f2:07:31:4a:a9:e8:c7:f4:86:48:9a:5a:22:84:
ce:b7:ee:1f:f4:7a:40:8d:75:6e:d9:c1:f8:0b:cd:
ee:10:26:40:b0:31:f7:de:f0:4e:38:9f:6f:60:b8:
49:0f:dd:ce:2e:a5:aa:55:4a:38:7e:d1:b3:a8:8d:
8e:fc:c4:4c:43:ab:42:3f:99:2c:89:dd:48:02:66:
03:03:20:ba:c7:50:63:dc:a8:37:b6:6f:75:1c:89:
6b:07:32:cd:5a:27:96:b0:ea:b0:d9:1d:50:4f:03:
dc:92:8d:42:68:d8:80:bb:7a:2d:d2:f6:18:9c:5a:
16:27:ab:11:c4:b1:35:0b:97:6c:a0:72:11:82:65:
6c:37:0d:2f:28:57:c1:f6:25:99:8a:f7:81:e6:d4:
3d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:0C:CE:07:E5:F7:5F:D8:50:22:5F:56:22:F1:16:FA:C5:64:D9:30
X509v3 Authority Key Identifier:
keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/tgzOB-X3X9hQIl9WIvEW-sVk2TA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.236.0/24
146.19.160.0/24
Signature Algorithm: sha256WithRSAEncryption
86:e4:73:4e:48:35:53:9c:82:12:75:e8:fe:eb:b0:f9:13:a0:
92:b4:94:3e:7a:f6:41:1e:c8:cc:48:2f:6a:81:4e:6c:94:33:
5b:ef:1f:c9:5f:a3:8b:4e:61:d4:e8:07:65:b6:32:eb:bf:9a:
b1:74:cb:3a:e0:4e:86:03:57:06:4c:dc:7d:7c:c7:8c:04:03:
16:04:a5:40:9f:1c:6c:71:01:15:54:0f:c0:3d:97:69:45:b6:
fb:40:a1:17:31:a3:91:0b:36:77:b7:95:fe:18:0f:1b:46:e3:
fd:96:97:2e:04:07:dc:33:95:c6:1b:4b:24:cd:05:42:ea:1b:
73:01:a3:c2:6a:de:2c:27:47:1e:81:c6:0f:2c:d3:41:f1:9d:
a9:e2:0a:cf:8f:99:ec:04:a9:be:24:34:2f:20:4d:fe:b5:e1:
d2:7c:c9:fb:c4:49:6c:e4:b1:20:63:70:5c:09:50:0c:c5:5f:
0d:8b:dd:10:20:4d:e8:4f:73:43:ba:fd:f4:07:87:9d:af:57:
cf:d3:0f:93:a4:97:42:31:3a:8e:03:8c:80:51:9c:5d:ae:5d:
63:51:0c:3f:64:89:7e:0a:28:d6:e6:21:de:c6:d6:55:9d:97:
3b:5c:7f:28:c2:66:19:7b:54:bc:b7:a3:26:0b:ff:51:c4:54:
ea:f3:4d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:21:50 2025 by rpki-client