Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/TU-pNgBZBmjZJy6cvCLq3hsqXqo.roa
File: TU-pNgBZBmjZJy6cvCLq3hsqXqo.roa (raw, json)
Hash identifier: IurjiHHpmFVL5GOkWmRoizqX2Oq069GXNpmvPbK0lRE=
Subject key identifier: 4D:4F:A9:36:00:59:06:68:D9:27:2E:9C:BC:22:EA:DE:1B:2A:5E:AA
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 0194221F39D08C567119D0AB6209298B14BE
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/TU-pNgBZBmjZJy6cvCLq3hsqXqo.roa
Signing time: Wed 01 Jan 2025 13:47:39 +0000
ROA not before: Wed 01 Jan 2025 13:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 141883
IP address blocks: 109.248.16.0/21 maxlen: 24
109.248.24.0/22 maxlen: 24
109.248.28.0/22 maxlen: 22
188.130.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:39:d0:8c:56:71:19:d0:ab:62:09:29:8b:14:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: Jan 1 13:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d4fa93600590668d9272e9cbc22eade1b2a5eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:78:d6:31:2b:20:72:0b:d2:58:3c:6f:c6:19:
df:48:40:e0:5b:aa:33:40:99:ae:83:d3:1f:53:e2:
0e:ee:38:95:c5:f6:b9:55:ba:4e:c1:a0:f6:39:5d:
0f:58:69:66:18:23:ac:dc:0a:ad:bc:b3:92:67:df:
de:5f:71:3c:c6:80:45:09:55:54:c1:da:98:e8:7b:
e8:b9:f7:5d:fe:02:67:b0:0f:9c:ca:b0:e4:fc:bb:
35:2e:d6:2e:ef:2f:f5:8d:da:87:f8:5d:bb:1c:be:
d5:7b:ae:31:88:1a:38:e1:ed:df:50:bc:af:3d:c2:
6b:eb:a4:7b:39:52:8f:91:10:0b:39:6c:f4:44:4b:
f1:e3:84:bb:be:1e:f1:f1:b5:5e:6e:cb:19:e2:51:
fa:f8:a6:aa:4a:aa:30:eb:f3:96:44:f7:15:22:fa:
36:60:c5:3a:1d:4b:7e:32:cf:20:70:17:31:1e:a8:
19:36:8b:44:a5:51:65:8b:2d:40:63:cd:00:b3:3b:
4b:79:6c:f8:af:eb:0a:5a:b5:83:57:bc:0f:5c:03:
ec:41:f1:8d:5f:68:2d:e5:6c:14:b5:8a:73:ca:30:
48:01:6a:8e:b9:00:22:e9:9f:5b:de:15:4d:f7:fe:
19:10:b7:0d:91:47:9d:31:55:7b:3a:4e:28:32:5c:
22:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:4F:A9:36:00:59:06:68:D9:27:2E:9C:BC:22:EA:DE:1B:2A:5E:AA
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/TU-pNgBZBmjZJy6cvCLq3hsqXqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.248.16.0/20
188.130.228.0/22
Signature Algorithm: sha256WithRSAEncryption
28:4d:a2:e6:6e:10:0e:8c:38:a3:dd:39:b9:d4:72:f2:e4:e0:
47:61:9b:8f:cd:9d:a2:45:a4:66:5c:e1:3c:d1:35:16:03:e4:
60:d5:d3:e6:20:4b:26:95:4b:4f:d8:56:da:3a:51:09:2b:85:
d3:74:83:c4:2c:6a:c7:5f:ef:9a:e1:01:75:2c:46:1f:42:9c:
cf:c0:e3:c6:9b:c5:d9:7d:de:c6:b6:f2:87:28:ba:3a:be:62:
36:2e:83:8b:16:09:f0:40:50:e4:ea:e0:e3:c2:f9:b5:c9:7d:
37:22:fc:dc:aa:19:1d:1f:97:48:26:3c:96:39:82:6f:57:42:
37:31:90:fb:5d:4b:09:b0:da:92:a7:ff:e8:88:c3:41:4f:f5:
6e:19:0a:e4:39:99:1e:88:a3:64:3b:9b:b4:f8:f7:fa:9c:8b:
12:05:3b:33:7c:9e:e7:e8:c2:dd:c9:72:b5:82:b3:4b:05:6e:
1b:02:4f:7c:c1:ff:9e:32:dc:c1:54:5d:b5:fd:8f:69:dc:f9:
39:80:62:f3:24:de:10:37:d4:bc:a5:df:c8:dc:c5:33:0d:38:
94:e6:5c:77:4e:25:3e:47:7d:99:55:78:91:e1:9b:84:5f:ff:
4b:4b:94:1c:01:f7:25:61:8a:07:05:e9:30:6f:37:2b:a3:d1:
48:32:fc:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:20 2025 by rpki-client