Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/TmwRKIN0OXbwreTNlxZ26e1Y6OE.roa
File: TmwRKIN0OXbwreTNlxZ26e1Y6OE.roa (raw, json)
Hash identifier: Ae614sejhrQNmNfCpai/xS3/MUsvE+zoDtpp15eAh4w=
Subject key identifier: 4E:6C:11:28:83:74:39:76:F0:AD:E4:CD:97:16:76:E9:ED:58:E8:E1
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0194A70FA24FE0FBBB46E00D6F5A22D62443
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/TmwRKIN0OXbwreTNlxZ26e1Y6OE.roa
Signing time: Mon 27 Jan 2025 09:20:07 +0000
ROA not before: Mon 27 Jan 2025 09:20:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58212
IP address blocks: 82.153.207.0/24 maxlen: 24
212.38.89.0/24 maxlen: 24
213.218.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a7:0f:a2:4f:e0:fb:bb:46:e0:0d:6f:5a:22:d6:24:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 27 09:20:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e6c112883743976f0ade4cd971676e9ed58e8e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e8:01:ce:36:d3:9e:01:7e:2e:93:a2:ec:1f:
ea:54:2a:92:04:29:cb:c6:91:cb:ec:31:b1:43:1c:
35:14:d0:a1:c8:ce:35:77:1d:2b:e4:1f:77:7b:ac:
65:44:80:fb:ae:bd:17:d3:7d:68:81:39:1b:1d:55:
ee:1d:4b:e5:02:9a:09:de:c8:87:ab:f3:10:c4:76:
06:f8:e8:70:af:7a:5d:e3:b7:c0:df:02:30:4b:22:
c5:1f:0d:dd:57:a9:45:9d:e7:44:4b:9a:11:2d:42:
69:49:aa:f4:5b:53:f6:60:db:84:de:a1:ac:7d:77:
40:66:79:6c:07:e4:55:77:b3:f6:ba:8d:c1:75:e1:
8c:df:3e:70:5f:7f:4b:06:92:e8:a3:45:3b:aa:13:
34:f2:53:af:b0:ce:5b:b8:f5:ff:d5:30:60:50:4c:
96:72:8a:23:4b:1f:5b:9d:12:77:70:82:08:fe:3f:
09:86:a7:67:d5:52:0b:25:62:47:e9:dc:6e:01:02:
64:3e:4c:16:91:c6:ae:6f:16:00:f8:0d:7f:7c:80:
60:90:af:9a:e7:8f:ef:9e:20:48:5f:e5:41:09:65:
23:ae:f0:bd:ef:63:33:d7:e6:55:37:c5:0b:fb:62:
f2:f9:6b:9e:c1:d4:19:b6:68:d9:7b:30:0b:45:e1:
6d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6C:11:28:83:74:39:76:F0:AD:E4:CD:97:16:76:E9:ED:58:E8:E1
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/TmwRKIN0OXbwreTNlxZ26e1Y6OE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.207.0/24
212.38.89.0/24
213.218.209.0/24
Signature Algorithm: sha256WithRSAEncryption
90:e3:bd:4b:9e:a9:67:e3:7c:81:4f:a7:61:06:20:13:47:b0:
02:f4:30:94:da:20:cc:00:15:19:73:dd:23:6d:11:bf:06:a6:
65:08:d9:81:ad:f6:af:15:dd:fb:42:f9:0d:6f:cf:d7:51:32:
20:b8:d9:66:f4:f6:8f:31:d7:fc:89:44:00:12:f5:a5:dd:8c:
63:bc:a5:a1:dd:fe:ef:c6:22:00:f8:fd:86:31:4c:5e:63:4f:
35:ee:be:ff:1b:c4:43:55:72:77:72:42:49:72:60:f6:05:1a:
d6:f3:2a:0f:04:72:5c:86:8d:55:66:c9:ac:26:f0:75:43:d7:
d8:ad:41:f9:9a:52:2d:10:e9:76:37:c0:b7:dc:d3:e8:d2:70:
6c:ce:50:fb:be:47:c6:1d:9f:0d:f5:92:a5:cf:bf:d4:17:a0:
a9:c1:1f:46:6c:8d:52:2b:ec:67:b1:9a:e9:28:71:b0:43:38:
0d:ad:d9:32:7f:25:10:12:fd:95:ca:e4:46:4b:19:a5:ca:e9:
d0:5e:d4:2d:6a:e3:1f:5f:2a:f2:a8:40:b9:49:23:7d:32:a6:
2f:3f:f3:81:dc:24:c4:e4:fa:b7:86:17:ca:75:cc:36:4f:c7:
93:ef:18:2b:56:e5:c1:c5:d8:f6:c3:ec:58:0b:37:e8:06:56:
a5:92:88:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:32:20 2025 by rpki-client