Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/tFQcfPCSB6BXqTTZvhFAhl-OS0Y.roa
File: tFQcfPCSB6BXqTTZvhFAhl-OS0Y.roa (raw, json)
Hash identifier: gDfDS8wP6pJ9Ytao7oOOdrquqvAnErNK/1uv1jTII9w=
Subject key identifier: B4:54:1C:7C:F0:92:07:A0:57:A9:34:D9:BE:11:40:86:5F:8E:4B:46
Certificate issuer: /CN=ad3cc1a7870b610c355c6ec299b166edaba3df04
Certificate serial: 019501403F8A6514C19AB8835A6F34F63EAA
Authority key identifier: AD:3C:C1:A7:87:0B:61:0C:35:5C:6E:C2:99:B1:66:ED:AB:A3:DF:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTzBp4cLYQw1XG7CmbFm7auj3wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/tFQcfPCSB6BXqTTZvhFAhl-OS0Y.roa
Signing time: Thu 13 Feb 2025 21:39:02 +0000
ROA not before: Thu 13 Feb 2025 21:39:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44001
IP address blocks: 91.229.36.0/22 maxlen: 22
91.229.36.0/24 maxlen: 24
91.229.225.0/24 maxlen: 24
2001:67c:cf0::/48 maxlen: 48
2001:67c:cf4::/48 maxlen: 48
2001:67c:cf8::/48 maxlen: 48
2001:67c:2cc4::/48 maxlen: 48
2001:67c:2f38::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/rTzBp4cLYQw1XG7CmbFm7auj3wQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/rTzBp4cLYQw1XG7CmbFm7auj3wQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTzBp4cLYQw1XG7CmbFm7auj3wQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:01:40:3f:8a:65:14:c1:9a:b8:83:5a:6f:34:f6:3e:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad3cc1a7870b610c355c6ec299b166edaba3df04
Validity
Not Before: Feb 13 21:39:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4541c7cf09207a057a934d9be1140865f8e4b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8b:9f:18:ed:25:d3:e4:01:c6:d7:20:4d:6b:
e4:3e:24:fb:1d:17:95:06:01:c7:7c:0a:b2:dc:49:
d8:3a:90:c2:b9:c4:9f:f8:4c:8e:14:25:38:b6:ec:
9c:3a:86:00:12:fa:6c:aa:1e:84:52:10:eb:96:c6:
2b:1b:4f:5f:e7:13:3a:ce:5d:1b:c4:1f:f7:70:c1:
e0:2c:da:f1:aa:33:f9:e0:c8:62:90:df:2d:f3:46:
6b:13:33:e0:e3:ee:b4:76:47:e3:e2:f4:4e:c0:3b:
6a:b6:81:80:bc:e7:b9:35:9a:34:89:f7:69:fd:7e:
a3:c6:43:5d:9b:dc:0f:08:57:93:61:90:39:92:a8:
00:9b:d7:55:c5:3e:f3:e6:25:a1:d1:0b:7b:8f:4f:
d8:9e:8d:23:7a:19:c1:9d:f8:d3:07:fc:ca:71:3b:
c0:4c:7c:7c:19:0f:c0:e0:3d:9f:5f:02:58:66:13:
d4:9b:fa:79:b5:9a:d7:a7:22:64:de:d5:9a:95:84:
5b:9f:0b:d2:cb:b9:6b:44:a4:c8:46:96:eb:f5:de:
11:d7:eb:3c:d8:2c:9e:2f:cf:5d:c2:88:7d:88:ff:
27:a2:42:2a:7e:4f:56:39:78:32:62:94:66:ef:f3:
cb:f6:ca:12:41:47:97:3f:d7:4a:43:c7:f3:32:ad:
34:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:54:1C:7C:F0:92:07:A0:57:A9:34:D9:BE:11:40:86:5F:8E:4B:46
X509v3 Authority Key Identifier:
keyid:AD:3C:C1:A7:87:0B:61:0C:35:5C:6E:C2:99:B1:66:ED:AB:A3:DF:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTzBp4cLYQw1XG7CmbFm7auj3wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/tFQcfPCSB6BXqTTZvhFAhl-OS0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/rTzBp4cLYQw1XG7CmbFm7auj3wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.36.0/22
91.229.225.0/24
IPv6:
2001:67c:cf0::/48
2001:67c:cf4::/48
2001:67c:cf8::/48
2001:67c:2cc4::/48
2001:67c:2f38::/48
Signature Algorithm: sha256WithRSAEncryption
54:61:b1:43:78:de:30:a6:78:1c:2a:f2:c2:76:e9:b8:e4:1e:
8d:2e:f3:43:56:f4:18:17:fc:93:fc:1f:47:d1:84:69:66:73:
90:fc:04:b1:d8:92:96:7a:d1:74:0c:51:8c:a6:a8:38:e0:81:
49:3b:c2:e2:33:ce:18:1b:c2:72:a9:96:46:87:40:ea:d1:f6:
b6:7d:1a:a0:90:2e:c0:0e:4a:3a:9f:9e:bd:fe:db:aa:91:35:
60:b7:fc:6b:01:69:8f:55:50:d5:48:05:e6:b1:3b:53:b7:44:
1e:86:d2:3e:f2:b1:a7:aa:73:63:60:79:2f:d5:62:1c:16:0a:
df:71:bc:ea:c9:f0:78:0a:81:08:69:16:fc:c8:00:97:6f:5a:
d2:f5:94:31:f4:ee:31:ba:33:6f:b8:a2:e1:18:66:4b:a9:f5:
b0:97:b1:05:e2:7b:ae:78:60:96:c6:f9:2a:6b:cf:4a:70:1c:
e3:5d:f6:b1:72:5c:ba:ce:50:76:44:d6:97:3d:b3:37:b3:41:
b2:89:fc:39:c0:7e:2b:1a:95:69:94:cb:8c:7b:01:cc:68:52:
85:c8:1e:5a:0b:02:69:5f:f7:32:a3:54:ff:a7:2b:0e:30:72:
5d:04:ea:e1:99:0c:0f:23:ae:11:7e:83:0d:4a:6f:1f:f2:8d:
9e:a3:7a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:39:17 2025 by rpki-client