Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/Ts2grdh3WhIBgvviR4SebdJHIVA.roa
File: Ts2grdh3WhIBgvviR4SebdJHIVA.roa (raw, json)
Hash identifier: gCLhNsBpATqkGaeD3Tm7dpZpLjmibJqVgNt4Igote+Q=
Subject key identifier: 4E:CD:A0:AD:D8:77:5A:12:01:82:FB:E2:47:84:9E:6D:D2:47:21:50
Certificate issuer: /CN=d0a10944704d723c8dd9ce730cabf96fe26bab25
Certificate serial: 0194252218B6AFE912326A9FE239AD087F6F
Authority key identifier: D0:A1:09:44:70:4D:72:3C:8D:D9:CE:73:0C:AB:F9:6F:E2:6B:AB:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KEJRHBNcjyN2c5zDKv5b-JrqyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/Ts2grdh3WhIBgvviR4SebdJHIVA.roa
Signing time: Thu 02 Jan 2025 03:49:39 +0000
ROA not before: Thu 02 Jan 2025 03:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196721
IP address blocks: 212.6.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KEJRHBNcjyN2c5zDKv5b-JrqyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:18:b6:af:e9:12:32:6a:9f:e2:39:ad:08:7f:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a10944704d723c8dd9ce730cabf96fe26bab25
Validity
Not Before: Jan 2 03:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ecda0add8775a120182fbe247849e6dd2472150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b4:47:89:65:14:df:4e:63:36:fb:5c:3a:ff:
55:a0:61:bc:f9:c2:83:30:a8:51:b9:ae:25:66:1a:
9b:2a:9e:5a:2a:f6:8b:47:45:73:9f:cc:7a:e2:11:
ee:63:0c:b4:13:2e:e5:34:70:18:18:f3:29:06:18:
fe:48:75:1e:6c:c7:b3:86:f9:65:a4:f5:8f:4e:6e:
6a:2f:8c:d2:8c:68:db:64:1c:c8:ce:9f:27:a7:c4:
6f:a5:5e:05:c8:96:f7:70:3a:04:a6:a3:30:50:18:
f0:85:ac:40:b0:b6:ac:ab:d6:79:c4:ea:5d:32:50:
d7:fe:60:67:5c:98:b5:db:c8:50:4e:5b:51:e9:b4:
3e:04:02:07:e7:74:08:e2:7b:9f:55:c1:4a:51:f6:
eb:fb:1c:f7:9f:20:72:c3:6b:6a:d4:87:f6:8b:66:
cf:d9:1e:ac:7b:23:a4:ef:f9:56:16:b5:39:54:61:
b0:72:83:b0:d8:13:94:29:06:ff:16:00:ce:45:db:
14:64:fa:22:16:90:6e:a2:07:64:5f:ee:fa:0d:19:
c9:5c:e1:f5:eb:9c:43:6d:5a:24:06:da:9a:8a:d9:
81:cc:8c:3f:60:d7:f0:b9:f6:4e:cb:96:aa:a0:31:
8f:4d:13:40:ca:70:fc:3a:d8:5c:fd:42:d2:b7:e0:
f0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:CD:A0:AD:D8:77:5A:12:01:82:FB:E2:47:84:9E:6D:D2:47:21:50
X509v3 Authority Key Identifier:
keyid:D0:A1:09:44:70:4D:72:3C:8D:D9:CE:73:0C:AB:F9:6F:E2:6B:AB:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KEJRHBNcjyN2c5zDKv5b-JrqyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/Ts2grdh3WhIBgvviR4SebdJHIVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.6.30.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:01:32:17:27:8f:03:7a:f7:d3:e1:3c:a1:80:29:43:81:3b:
a0:e3:12:0f:51:fa:1c:4b:06:0a:cd:a2:7f:40:0d:5b:09:75:
c0:85:34:88:f6:9b:8d:0a:c4:c4:88:61:ed:9c:1e:6d:8a:fd:
3a:d4:3a:79:44:6c:25:ab:82:d1:86:1c:26:71:af:db:9a:c3:
28:64:07:64:b9:c2:64:f7:99:e7:b2:06:ec:f8:57:a0:de:3e:
4e:16:f5:79:d9:f6:ec:b8:6d:a2:3a:2d:4d:e5:26:f4:62:5c:
f2:92:71:a8:3e:6a:08:a5:b3:58:4e:0e:30:16:87:7c:f2:d6:
e8:28:9f:c6:cc:58:73:c5:24:ae:4e:4a:76:aa:de:b7:9d:7d:
ab:2f:6e:94:ba:c3:85:96:cf:38:4b:64:83:65:f4:f7:c9:f5:
71:a6:51:58:ee:17:0b:06:c9:84:7c:84:15:80:25:e0:3f:e5:
bf:c7:d8:3a:ca:8e:05:1a:ea:f0:a8:d8:ff:47:5c:b9:60:ae:
c1:7d:15:af:ef:96:8a:45:fd:e1:38:e5:97:d7:f4:50:58:94:
ac:2a:f5:f6:06:41:b7:d9:6d:f9:71:26:71:62:be:8f:47:f3:
af:c9:96:9b:44:56:4e:ca:13:28:da:98:b8:e3:04:81:66:5b:
93:b7:ed:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:17:56 2025 by rpki-client