Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/tl_UOyVyvLiZ56go_zbUXu0w1RU.roa
File: tl_UOyVyvLiZ56go_zbUXu0w1RU.roa (raw, json)
Hash identifier: xLobW8IreRrUrnxI34BPjIORJjKfBMmVKGYJD5SGe5M=
Subject key identifier: B6:5F:D4:3B:25:72:BC:B8:99:E7:A8:28:FF:36:D4:5E:ED:30:D5:15
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 0194244565756E7E4FD3DEDA9CEAB2B1E62A
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/tl_UOyVyvLiZ56go_zbUXu0w1RU.roa
Signing time: Wed 01 Jan 2025 23:48:35 +0000
ROA not before: Wed 01 Jan 2025 23:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1101
IP address blocks: 185.100.59.0/24 maxlen: 24
2001:67c:12d8::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:65:75:6e:7e:4f:d3:de:da:9c:ea:b2:b1:e6:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Jan 1 23:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b65fd43b2572bcb899e7a828ff36d45eed30d515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2b:66:7c:48:9e:32:0d:03:90:d6:61:dc:37:
e8:cc:ad:47:6e:60:43:c4:6b:1e:c7:6b:12:23:17:
c5:06:b6:e0:64:fc:10:30:af:e7:bf:e0:10:99:75:
1f:15:9b:47:94:de:f9:28:b9:1e:d3:c4:7e:5b:1c:
96:77:7f:a7:67:30:17:2f:71:b4:a7:84:a7:dd:3a:
5c:99:d3:ab:90:49:16:8d:ce:0a:77:64:80:1d:76:
c1:43:18:bf:dd:df:58:21:4b:86:4e:b2:0b:0c:51:
2a:21:61:82:93:f8:88:12:d0:4e:8b:4a:d1:2b:b4:
99:66:98:61:02:67:94:44:68:02:da:da:24:d3:bd:
2c:25:4e:1c:7c:c2:49:8c:a0:73:0e:e1:20:80:ba:
20:fe:59:6d:3e:c5:c7:e3:86:26:0b:f3:83:99:af:
7a:9b:d7:f3:59:22:0d:8c:7d:63:e4:bd:df:1c:3a:
2a:5a:fd:e7:81:3b:26:6f:fc:d4:59:a2:85:45:90:
18:61:2a:af:22:dd:ed:6e:72:cc:b0:29:c5:3e:57:
14:f6:fa:50:de:bf:37:ff:1a:b3:57:dc:23:af:41:
be:9c:f1:96:6a:d0:cd:12:6a:3c:5f:82:3e:27:bd:
22:a3:d4:66:30:12:30:8f:f9:b3:1e:76:d2:ea:88:
bd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:5F:D4:3B:25:72:BC:B8:99:E7:A8:28:FF:36:D4:5E:ED:30:D5:15
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/tl_UOyVyvLiZ56go_zbUXu0w1RU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.59.0/24
IPv6:
2001:67c:12d8::/48
Signature Algorithm: sha256WithRSAEncryption
03:c0:39:3c:70:b3:a5:db:6f:d7:2a:30:15:3f:ba:fa:0e:f8:
eb:ce:8b:8f:a2:76:51:e1:3e:b5:2b:c5:13:6a:4e:37:32:6a:
f6:bf:e3:4f:c0:ac:d9:f2:59:e5:43:ba:bf:b1:64:e3:93:e7:
13:ee:42:b3:b5:0e:ac:36:eb:29:61:60:cd:bd:2d:0f:c6:21:
ee:57:1f:e9:1f:63:0c:56:8f:a1:97:e8:fd:7d:13:e4:e3:9a:
9e:97:62:d0:7f:48:83:99:1a:e6:d5:83:c1:bc:44:50:67:b5:
31:26:64:7f:86:6e:fc:f5:9c:62:86:e3:7f:75:07:df:8d:bd:
6b:db:93:99:c0:2c:7a:1a:be:b5:62:84:17:89:33:1a:6d:37:
31:aa:0c:78:fe:60:74:69:3c:d2:bd:b9:6d:08:8a:06:63:1f:
67:e8:6b:5a:a3:a5:a4:e3:fb:d9:72:58:1c:3e:4b:bf:2c:19:
2c:1c:dc:9a:66:3c:01:51:af:0b:b0:b2:07:bf:fa:cf:64:7e:
ef:6e:8e:2e:ea:1a:38:2d:ac:b7:0c:1e:8a:16:5d:e5:3f:2d:
dd:c6:36:15:1e:a0:c4:d7:7b:81:6f:01:87:94:29:47:0e:41:
3a:77:ca:4e:4a:a2:92:da:7a:09:97:f7:44:db:f2:61:ad:49:
a1:7e:d2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 19:04:51 2025 by rpki-client