Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/ttxltNG2zQjIJW6GFa8ByUupTIM.roa
File: ttxltNG2zQjIJW6GFa8ByUupTIM.roa (raw, json)
Hash identifier: X+Rp7cCbU+AQt/6HVOu55hwFlooIOfWp0xOq7PMcuDs=
Subject key identifier: B6:DC:65:B4:D1:B6:CD:08:C8:25:6E:86:15:AF:01:C9:4B:A9:4C:83
Certificate issuer: /CN=20aa60cb0024332a2db68993f3357158af60c8de
Certificate serial: 01942747C28371AA325B9A570CA477873F29
Authority key identifier: 20:AA:60:CB:00:24:33:2A:2D:B6:89:93:F3:35:71:58:AF:60:C8:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IKpgywAkMyottomT8zVxWK9gyN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/ttxltNG2zQjIJW6GFa8ByUupTIM.roa
Signing time: Thu 02 Jan 2025 13:50:01 +0000
ROA not before: Thu 02 Jan 2025 13:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12638
IP address blocks: 5.1.128.0/17 maxlen: 17
176.0.0.0/13 maxlen: 13
176.1.0.0/16 maxlen: 16
193.7.128.0/19 maxlen: 19
212.23.96.0/19 maxlen: 19
2001:1a28::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IKpgywAkMyottomT8zVxWK9gyN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:c2:83:71:aa:32:5b:9a:57:0c:a4:77:87:3f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20aa60cb0024332a2db68993f3357158af60c8de
Validity
Not Before: Jan 2 13:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6dc65b4d1b6cd08c8256e8615af01c94ba94c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:14:d5:84:6b:73:a8:1d:ac:99:7c:d8:58:37:
68:0b:e8:3d:ca:72:cb:31:ff:18:a6:c1:52:81:de:
6a:ef:e6:00:11:df:e5:0b:8c:96:8d:5f:30:8b:33:
d8:b3:69:e9:5c:d7:d1:ed:b3:93:25:ac:f5:55:7a:
fe:1d:0a:bc:8e:3c:70:22:e2:c3:98:6f:ef:d2:3a:
1a:33:7a:f3:8c:35:b8:ff:b0:3c:a0:96:3a:fd:61:
75:49:1d:3e:15:56:d9:4c:22:15:7b:79:e3:d0:c3:
e3:ce:01:a7:6c:9c:b5:b9:8b:15:97:02:24:9c:c8:
93:63:20:4f:4f:c8:6a:cf:62:52:d0:3e:0f:bb:23:
76:aa:2b:bf:bb:96:1a:02:cd:1b:56:2c:92:66:7b:
53:eb:5b:59:99:94:0e:48:9b:ad:0c:6c:85:47:45:
90:34:9d:36:56:0b:34:cd:a1:9b:db:49:6b:b6:10:
3d:9b:d4:34:dc:81:59:8e:fd:6e:ae:a8:62:fa:95:
74:e8:30:98:18:c0:34:cf:ca:0e:de:b8:4c:2e:3c:
27:49:f5:82:74:11:be:0b:3d:85:44:e2:a7:6d:8a:
bd:c6:40:c8:51:16:c4:28:50:f9:5a:61:d2:21:88:
e8:ec:09:b3:4f:4b:28:74:41:85:69:26:15:65:5c:
0f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:DC:65:B4:D1:B6:CD:08:C8:25:6E:86:15:AF:01:C9:4B:A9:4C:83
X509v3 Authority Key Identifier:
keyid:20:AA:60:CB:00:24:33:2A:2D:B6:89:93:F3:35:71:58:AF:60:C8:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IKpgywAkMyottomT8zVxWK9gyN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/ttxltNG2zQjIJW6GFa8ByUupTIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.128.0/17
176.0.0.0/13
193.7.128.0/19
212.23.96.0/19
IPv6:
2001:1a28::/32
Signature Algorithm: sha256WithRSAEncryption
37:98:43:a4:3f:37:87:c6:66:e6:1e:e0:06:31:1f:d5:18:68:
19:d7:df:b5:c5:41:4a:0f:16:a5:d5:27:9f:88:b0:0e:76:0a:
2e:e5:d4:f6:0c:f7:c9:f3:85:33:e5:b7:19:bd:71:66:ee:de:
85:10:f4:88:8f:1e:a5:5a:db:34:61:6c:a8:97:67:99:1e:dc:
b5:42:19:93:e3:c2:43:6c:68:00:ad:91:8a:60:a4:83:5f:5a:
94:a3:9a:1a:d8:b2:d9:12:78:42:8d:d8:d5:ee:f7:6f:7c:73:
64:c4:45:30:52:84:d0:66:b8:0c:1c:73:c7:de:cc:97:06:9e:
2e:4d:92:8f:6d:02:c4:1c:f8:33:03:0c:b8:e2:30:9e:07:bd:
39:b0:db:0a:0b:1a:b0:7a:bd:e1:88:35:f1:c6:f3:09:ba:e0:
53:73:5d:ed:37:0a:b0:2f:c3:43:fe:26:6a:34:6c:15:da:28:
17:ca:f5:28:72:ba:f4:f8:b6:62:f2:37:d7:92:de:26:45:5b:
85:9d:c6:4e:f8:35:ac:68:e6:c6:dd:40:40:bc:17:2d:51:26:
09:89:01:6f:4c:17:7d:d4:21:e7:79:2c:94:ac:01:81:c5:c8:
47:cb:ad:e0:b8:39:a3:b8:7a:6a:d9:28:b9:41:c5:82:fc:51:
fa:2d:8e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:04:11 2025 by rpki-client