Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/TUz_WJSMNczh0a4oE0JPAiZeFwc.roa
File: TUz_WJSMNczh0a4oE0JPAiZeFwc.roa (raw, json)
Hash identifier: W6HJwXWWYxWpF1iC+V/7g0tdFSADqlwW02aC7Kto7U8=
Subject key identifier: 4D:4C:FF:58:94:8C:35:CC:E1:D1:AE:28:13:42:4F:02:26:5E:17:07
Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Certificate serial: 019424B403C2CD481E7FE0BF556D26499424
Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/TUz_WJSMNczh0a4oE0JPAiZeFwc.roa
Signing time: Thu 02 Jan 2025 01:49:24 +0000
ROA not before: Thu 02 Jan 2025 01:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 18779
IP address blocks: 147.189.130.0/24 maxlen: 24
176.111.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 19:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b4:03:c2:cd:48:1e:7f:e0:bf:55:6d:26:49:94:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Validity
Not Before: Jan 2 01:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d4cff58948c35cce1d1ae2813424f02265e1707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3f:56:8f:60:16:cc:33:64:8c:07:db:f5:61:
72:61:ad:66:63:fb:78:33:a0:3c:49:10:1b:77:cf:
95:f4:be:38:d9:b4:24:0a:80:7b:c4:7e:4c:c9:a2:
6a:3d:6f:86:c9:77:35:60:a8:2e:b3:22:6a:a0:49:
f1:07:c0:a5:fa:1a:f6:d6:cc:c4:01:86:4c:c9:8b:
0e:98:52:10:7d:ee:18:80:00:0f:5f:fc:46:4e:0e:
63:8f:1c:1f:96:3c:ea:a7:0b:7e:42:b5:65:e9:c7:
de:5a:f3:61:62:25:f5:42:86:48:0d:95:c5:e5:10:
6c:32:83:f2:12:e7:8a:18:f7:61:3e:9d:9c:61:4b:
f0:bb:13:49:ab:f1:c2:72:3a:cb:e5:5f:80:a5:3b:
9d:75:7a:a5:4b:28:92:c4:1d:99:51:3c:06:16:de:
11:bd:00:e2:48:11:dc:80:26:85:eb:a9:a7:18:dc:
eb:a7:de:bd:4e:10:b9:95:68:93:c0:89:20:08:18:
de:b5:25:0b:15:a1:27:db:02:10:34:e0:83:c5:45:
cc:85:44:44:56:af:12:21:ff:30:90:69:2d:82:82:
50:98:4b:0a:76:46:1e:dd:23:71:b8:b3:de:84:cd:
8b:ed:64:3d:b9:17:5f:51:9d:f4:dc:6e:a9:8e:88:
75:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:4C:FF:58:94:8C:35:CC:E1:D1:AE:28:13:42:4F:02:26:5E:17:07
X509v3 Authority Key Identifier:
keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/TUz_WJSMNczh0a4oE0JPAiZeFwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.189.130.0/24
176.111.223.0/24
Signature Algorithm: sha256WithRSAEncryption
83:d5:fa:25:6a:d5:da:f4:f2:15:57:d1:9f:96:9c:7b:85:24:
26:b8:b0:03:d3:b7:af:4e:2f:7f:5e:b3:0c:6b:6c:9c:11:a6:
b0:2b:66:12:8f:a4:d8:0e:94:f7:7b:c2:0b:e2:8a:61:21:e2:
0a:c1:7c:c9:14:eb:78:e9:e8:10:be:75:b2:fd:76:74:4d:d5:
57:33:01:db:d6:7b:f8:57:e9:ff:d5:42:31:b1:c4:1c:69:a2:
3b:9d:17:4d:c9:54:75:40:bd:0b:a9:f8:bc:ed:5a:b1:74:f2:
54:33:73:39:29:4b:81:41:f4:b3:4d:af:a1:47:75:fc:11:bd:
4b:0c:f9:f8:bf:2b:d3:58:41:90:37:20:0d:d5:87:4d:e9:69:
58:ac:53:ae:35:a6:77:34:06:ea:bb:3d:42:01:11:85:ec:de:
bb:63:45:5b:f0:6a:ae:d8:47:63:de:d3:83:f8:c2:7b:87:f4:
77:96:d1:f4:86:20:cd:a9:7b:38:be:fc:21:0a:10:1f:09:a1:
0f:52:5a:c8:64:73:9c:f1:26:10:92:cf:b4:94:f6:c6:d1:f7:
d8:a9:c0:a1:48:2a:e4:dc:2d:2b:3a:26:5e:75:7b:0e:18:a9:
06:0a:65:69:c0:83:df:3a:11:03:18:ef:9e:52:20:f2:fe:40:
1d:e0:c5:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:10:35 2025 by rpki-client