Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/sTgj5gtBXlZvbQkuD303wv14ZJM.roa
File: sTgj5gtBXlZvbQkuD303wv14ZJM.roa (raw, json)
Hash identifier: 2lGTVGTpWSlL4AKzK4tCKidrFOFRYmSZ+Qh+p4OiuBc=
Subject key identifier: B1:38:23:E6:0B:41:5E:56:6F:6D:09:2E:0F:7D:37:C2:FD:78:64:93
Certificate issuer: /CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Certificate serial: 0194222036E9393716F67114E99B5EEE746B
Authority key identifier: 4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/sTgj5gtBXlZvbQkuD303wv14ZJM.roa
Signing time: Wed 01 Jan 2025 13:48:43 +0000
ROA not before: Wed 01 Jan 2025 13:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44620
IP address blocks: 93.180.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft
rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:36:e9:39:37:16:f6:71:14:e9:9b:5e:ee:74:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Validity
Not Before: Jan 1 13:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b13823e60b415e566f6d092e0f7d37c2fd786493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c3:d5:e3:03:90:d8:05:d2:51:db:75:41:9a:
9e:ae:28:af:ae:7b:91:78:77:c4:0a:c9:ba:e1:7c:
88:54:8d:d3:f1:ed:ac:ed:e2:ca:a8:a0:76:d5:15:
94:9b:82:e8:7a:ba:59:98:43:88:4a:e2:44:19:a1:
21:6a:8e:b7:ce:59:29:5b:f8:5f:3c:ad:ab:d9:6f:
61:98:22:ce:13:ec:af:f9:c9:08:22:84:ab:f1:55:
e4:dc:23:0d:b1:26:1e:3a:b2:a4:1d:5c:68:d5:5a:
9e:f7:49:46:01:df:ec:04:9c:f1:f9:98:d7:20:80:
1e:27:dc:07:cc:4d:d2:97:81:68:cd:dd:68:8e:79:
67:0a:d8:0c:6f:8c:0b:17:21:9f:8c:05:b4:33:2c:
69:92:22:f9:e0:dd:ee:92:3f:2b:4f:8b:f9:56:ed:
d1:11:64:90:35:b7:fe:9c:b2:dd:89:e3:f5:82:e9:
20:c6:9c:0d:1f:23:c8:9a:14:0a:eb:14:36:b8:f4:
07:e3:b2:54:b7:2c:eb:be:e2:e5:89:4e:31:58:27:
8a:f8:91:9a:72:a0:15:ce:93:0b:93:19:29:18:fa:
00:bd:49:a4:83:6f:49:1c:72:49:5c:83:ca:7f:f8:
c0:82:c2:ae:42:7e:2b:0d:b4:54:2a:a3:2b:c5:81:
c2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:38:23:E6:0B:41:5E:56:6F:6D:09:2E:0F:7D:37:C2:FD:78:64:93
X509v3 Authority Key Identifier:
keyid:4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/sTgj5gtBXlZvbQkuD303wv14ZJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.180.134.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:a0:61:71:b5:35:06:39:ed:03:b6:19:b8:35:d7:6f:34:b5:
ea:32:66:8e:3d:eb:51:9b:a8:a9:5b:c7:9f:ad:d1:b5:08:d7:
2b:f0:09:ea:51:12:6c:12:3d:c6:a4:eb:24:53:c3:b5:75:c5:
2f:84:0e:25:a6:ff:6d:04:d7:a5:f3:92:11:3d:2c:28:90:f0:
bb:49:ae:70:bc:34:d7:b4:54:38:90:1a:c7:f7:69:e5:17:4b:
48:40:37:fd:26:35:96:56:d9:2a:6f:65:f0:e1:a4:92:e6:fd:
d7:31:63:d7:e0:b4:7d:3c:10:35:4f:16:be:65:42:58:00:14:
50:b0:71:1b:d8:b1:e5:e0:aa:75:10:d6:6c:22:ad:ce:d0:2b:
94:c3:5a:77:0e:ca:d6:1e:cd:b2:99:0d:d9:e6:c5:34:e3:87:
7d:3b:d9:f6:6b:45:21:d9:02:65:51:80:c8:38:2c:26:5a:f2:
89:db:a5:cc:8d:5f:bc:4d:07:f0:6f:83:93:b5:47:f1:b2:ee:
a3:71:3b:7b:b2:6e:3c:25:c1:c3:5f:f0:ef:2f:90:ed:36:e9:
ac:a3:e8:c0:34:63:f1:15:95:02:0f:d7:5b:56:db:25:85:42:
f2:48:46:db:7e:f6:35:44:6a:71:2f:c8:8c:7b:bf:39:0f:10:
dd:e7:7d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 16:42:17 2025 by rpki-client