Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/TCLTZN7AGKUB7xzA7aAzZJCLGEY.roa
File: TCLTZN7AGKUB7xzA7aAzZJCLGEY.roa (raw, json)
Hash identifier: eeX0IhSYNZ9FE4vi+lYEY7nwkpcGZsK3aVToAyhv5yM=
Subject key identifier: 4C:22:D3:64:DE:C0:18:A5:01:EF:1C:C0:ED:A0:33:64:90:8B:18:46
Certificate issuer: /CN=af2bf82fda28e08f6229460ba2e24141464331e5
Certificate serial: 019422FB6E447B092A2DAEBBF7128C7FABB1
Authority key identifier: AF:2B:F8:2F:DA:28:E0:8F:62:29:46:0B:A2:E2:41:41:46:43:31:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryv4L9oo4I9iKUYLouJBQUZDMeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/TCLTZN7AGKUB7xzA7aAzZJCLGEY.roa
Signing time: Wed 01 Jan 2025 17:48:10 +0000
ROA not before: Wed 01 Jan 2025 17:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204943
IP address blocks: 185.235.48.0/22 maxlen: 22
2a0d:4b00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryv4L9oo4I9iKUYLouJBQUZDMeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:6e:44:7b:09:2a:2d:ae:bb:f7:12:8c:7f:ab:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2bf82fda28e08f6229460ba2e24141464331e5
Validity
Not Before: Jan 1 17:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c22d364dec018a501ef1cc0eda03364908b1846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:07:ff:db:50:84:1b:92:a4:4d:48:9d:2c:d4:
2f:7c:75:f3:95:13:25:40:4d:f2:9b:4b:cc:45:5a:
1d:cf:df:75:00:d7:94:fb:83:d9:2f:32:72:59:2a:
4a:26:5b:99:ac:e9:a2:f1:65:1e:f0:4d:26:a7:a0:
56:e5:8e:d6:40:2b:60:2e:d5:10:9a:2f:b7:ce:ca:
e8:1b:db:3e:bd:c8:d2:b8:46:59:c9:e1:d7:7c:81:
1b:d4:cd:0c:5f:a2:cc:96:a6:0b:e7:44:60:f8:63:
f3:e6:72:42:11:68:4b:72:c6:6c:91:03:6a:ba:15:
7c:76:d8:56:cf:33:47:d8:b6:eb:49:af:1e:12:86:
dd:56:0c:2b:3d:9c:d5:57:cb:45:b1:96:55:ab:aa:
57:05:67:2a:da:c7:ff:b2:3c:dd:50:9c:f3:3e:e6:
85:01:ce:fe:df:25:3a:63:47:a5:fe:91:bb:3b:5b:
2d:cc:5a:13:1e:af:65:3f:69:82:3a:b5:2b:b0:76:
60:b5:16:76:be:cd:1c:08:04:d8:ff:73:b8:62:12:
5a:15:86:9a:f4:b4:61:b8:e6:1d:83:fb:86:d9:04:
d2:c4:25:87:8f:6c:cf:d3:22:ea:5b:e2:99:de:a0:
dc:d0:af:5e:02:03:85:18:6a:84:57:9d:20:bb:b4:
da:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:22:D3:64:DE:C0:18:A5:01:EF:1C:C0:ED:A0:33:64:90:8B:18:46
X509v3 Authority Key Identifier:
keyid:AF:2B:F8:2F:DA:28:E0:8F:62:29:46:0B:A2:E2:41:41:46:43:31:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryv4L9oo4I9iKUYLouJBQUZDMeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/TCLTZN7AGKUB7xzA7aAzZJCLGEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.48.0/22
IPv6:
2a0d:4b00::/29
Signature Algorithm: sha256WithRSAEncryption
4b:bf:c2:0e:23:1e:8b:d4:6f:60:83:ce:a9:b5:a2:23:71:ad:
e4:40:4f:75:49:d4:af:6e:b6:37:05:b9:e1:49:c4:61:ea:c8:
1e:70:bf:b4:f2:f7:62:bf:b1:a7:98:cb:15:3c:2a:33:e5:c3:
7f:93:c2:46:6b:44:f7:f0:d2:8e:68:f5:76:19:58:19:2f:45:
fd:e7:86:2a:f8:7f:f9:1a:0f:e7:31:fa:73:ac:cf:3d:3c:5d:
4b:04:39:f2:6a:d0:69:57:a5:eb:f5:da:ce:d8:93:68:66:43:
72:a0:70:e9:d5:4d:d0:ef:11:91:7e:78:54:a9:6d:cc:f5:de:
5e:04:ae:0e:e3:79:0b:da:16:56:47:be:b0:3c:b5:88:d1:a0:
c9:8c:76:ff:fa:a5:dd:b3:07:cb:21:ad:08:f7:01:e9:00:b3:
5b:3e:66:ee:b9:67:a9:5a:48:85:6b:bd:19:35:74:ec:4e:00:
fb:9c:d5:57:c8:47:ff:b8:73:ec:e4:2b:08:48:04:e6:69:83:
40:89:0f:47:c3:8b:d9:42:b1:96:63:5f:4c:c9:6a:65:33:c2:
c8:3d:58:25:b5:7d:aa:14:a2:5a:97:79:83:f4:4f:55:1b:96:
0b:83:eb:d0:a9:a2:e3:a8:2b:b3:51:e2:03:17:7f:9c:c8:42:
14:6b:6d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:55:22 2025 by rpki-client