Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/td5of2c-zNIx95LtRN04mtFJYAg.roa
File: td5of2c-zNIx95LtRN04mtFJYAg.roa (raw, json)
Hash identifier: rMhWdT4I0hK2RGp5gGoiamCjAXi8+XSWiM4KXZ7JjMw=
Subject key identifier: B5:DE:68:7F:67:3E:CC:D2:31:F7:92:ED:44:DD:38:9A:D1:49:60:08
Certificate issuer: /CN=1ac06cf2c9e957537439734f0584a8204a7b8311
Certificate serial: 0194266B8CEBB1AE07B73287B9715FD0F08A
Authority key identifier: 1A:C0:6C:F2:C9:E9:57:53:74:39:73:4F:05:84:A8:20:4A:7B:83:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsBs8snpV1N0OXNPBYSoIEp7gxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/td5of2c-zNIx95LtRN04mtFJYAg.roa
Signing time: Thu 02 Jan 2025 09:49:30 +0000
ROA not before: Thu 02 Jan 2025 09:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 680
IP address blocks: 134.110.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GsBs8snpV1N0OXNPBYSoIEp7gxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:8c:eb:b1:ae:07:b7:32:87:b9:71:5f:d0:f0:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ac06cf2c9e957537439734f0584a8204a7b8311
Validity
Not Before: Jan 2 09:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5de687f673eccd231f792ed44dd389ad1496008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:aa:05:e8:80:a2:1d:b1:2a:2a:dd:ed:f6:4b:
a8:08:e1:3d:c7:92:52:81:07:8f:96:ca:77:58:09:
2d:68:46:fa:41:e4:67:d5:a3:d9:af:e9:7c:f8:1a:
4a:33:77:a8:b9:81:f7:ec:37:52:4a:f8:bc:94:18:
a4:a5:c3:57:fc:5a:aa:ec:53:c3:ea:1e:2f:1f:a7:
e2:4a:ac:81:60:f1:ea:16:09:db:e2:14:7a:e3:bc:
48:4f:ea:e1:b3:f4:1f:d7:bf:1a:dc:c3:45:c3:0c:
26:5c:a6:dc:13:10:b6:bc:fa:0d:a1:6c:dc:ce:9f:
ca:4a:34:40:52:2c:9c:8f:87:56:17:50:75:8b:89:
96:54:7c:74:a0:2f:a6:9c:2e:ca:5a:0d:ac:2a:58:
b0:e3:03:81:2b:5a:c3:9c:73:2e:08:f8:15:74:e5:
30:d1:ed:4f:af:d2:e8:2e:fb:7b:62:83:3d:3b:45:
18:0f:ca:9c:94:71:0b:3a:5a:b2:a6:ae:d2:9f:fc:
ba:32:d8:d7:a5:d9:a1:11:fc:9d:13:40:8a:ac:dd:
47:19:ba:53:4e:8b:eb:10:27:0a:01:44:cd:61:19:
a9:69:a3:dc:ef:91:bb:d9:55:45:8d:ba:97:f9:3b:
7d:b7:d9:f1:52:ce:7a:07:07:48:85:a5:83:01:48:
b1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:DE:68:7F:67:3E:CC:D2:31:F7:92:ED:44:DD:38:9A:D1:49:60:08
X509v3 Authority Key Identifier:
keyid:1A:C0:6C:F2:C9:E9:57:53:74:39:73:4F:05:84:A8:20:4A:7B:83:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsBs8snpV1N0OXNPBYSoIEp7gxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/td5of2c-zNIx95LtRN04mtFJYAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.110.0.0/16
Signature Algorithm: sha256WithRSAEncryption
66:37:af:1a:72:67:09:5a:65:3b:28:21:cd:fd:f0:ac:d4:4e:
76:68:db:91:ef:04:c0:5d:47:cc:cd:a3:f9:07:f3:eb:a1:37:
d4:56:7d:53:e1:d6:4c:56:78:02:50:75:cd:21:b2:e6:4f:71:
cf:30:f9:de:fa:a0:89:4e:84:cb:30:f7:d6:06:c5:20:2b:82:
e8:28:7e:1d:10:cd:08:6e:7e:13:70:e0:43:50:e6:48:6b:ae:
b4:1a:c2:a4:6d:4d:fa:c0:46:ee:51:a1:50:55:c6:25:af:71:
d1:bb:10:36:69:74:0b:68:ff:05:27:46:0d:07:a6:e4:a3:4b:
c1:0e:86:a4:b9:c4:c3:6c:d8:d3:a7:35:b7:20:13:28:66:de:
c6:5a:84:7f:fd:2e:ee:11:c4:73:08:99:27:df:ce:13:39:72:
1e:8d:8b:bc:7a:ef:12:74:6c:f8:f6:22:fd:eb:1b:f8:49:1e:
0c:35:4b:4b:44:b6:51:7d:18:33:87:70:68:d1:8a:b0:32:41:
0d:f6:8f:07:46:2a:0d:82:6a:b5:96:78:c4:7f:de:08:35:b7:
04:ca:e3:b5:e0:e2:8f:38:72:4f:21:61:d4:0a:63:d1:1a:85:
ac:61:61:9e:ae:a0:50:a0:9a:be:f7:35:6e:2d:29:dc:af:c6:
6d:81:01:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:04:45 2025 by rpki-client