Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/TMvhro726OTEJJjht0Q0a4l2Qas.roa
File: TMvhro726OTEJJjht0Q0a4l2Qas.roa (raw, json)
Hash identifier: b1YiQQq/VY4mWfbYJYUD6kOtMlV+ZtaVCwcnWoNMuUw=
Subject key identifier: 4C:CB:E1:AE:8E:F6:E8:E4:C4:24:98:E1:B7:44:34:6B:89:76:41:AB
Certificate issuer: /CN=e220bc4694539a15026ec55aad19a12bc214c15f
Certificate serial: 01948D127CC465C0A6C6D86C7B49F8BB9157
Authority key identifier: E2:20:BC:46:94:53:9A:15:02:6E:C5:5A:AD:19:A1:2B:C2:14:C1:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iC8RpRTmhUCbsVarRmhK8IUwV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/TMvhro726OTEJJjht0Q0a4l2Qas.roa
Signing time: Wed 22 Jan 2025 08:13:06 +0000
ROA not before: Wed 22 Jan 2025 08:13:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213540
IP address blocks: 2a14:c900::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iC8RpRTmhUCbsVarRmhK8IUwV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8d:12:7c:c4:65:c0:a6:c6:d8:6c:7b:49:f8:bb:91:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e220bc4694539a15026ec55aad19a12bc214c15f
Validity
Not Before: Jan 22 08:13:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ccbe1ae8ef6e8e4c42498e1b744346b897641ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5c:61:c6:91:b3:cd:34:ce:80:6f:ad:9c:33:
f6:66:95:b8:96:03:77:fc:d4:05:6e:e2:a2:00:28:
94:72:63:e1:1a:39:1e:43:eb:1e:43:43:1e:d8:3f:
29:3c:5f:8c:6a:82:18:84:aa:77:b4:0c:5f:f3:7f:
3b:56:10:c1:ed:50:0d:8d:46:35:2c:f3:76:df:3c:
b6:4c:6d:77:84:18:d0:6f:c2:fc:d4:6a:52:18:4c:
e8:a4:32:21:b9:66:25:f9:3d:77:ed:6d:7d:bf:17:
3f:ca:47:b7:e8:1c:d0:4c:98:14:75:f8:70:58:cd:
99:7b:4a:99:40:25:ec:e5:6a:c5:9e:3c:44:88:e5:
d7:f6:64:39:b2:1f:60:15:d4:6b:e9:82:bc:13:a3:
21:e3:43:d0:86:2c:18:4a:7c:1e:e1:54:24:88:62:
f6:09:44:3a:7c:62:62:97:8e:16:a3:00:93:ab:33:
40:00:df:34:05:f8:60:bf:a1:af:88:8f:13:87:72:
2d:43:4a:88:16:2c:46:d3:eb:f7:40:e1:80:e6:f6:
7e:83:b6:cb:11:dd:72:d3:ea:27:d6:29:d5:4f:0a:
42:ab:eb:fc:9e:9e:2d:5b:52:c9:36:ee:c6:8a:14:
3e:8b:32:70:c2:15:8f:70:2b:c8:23:6e:7d:19:da:
10:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:CB:E1:AE:8E:F6:E8:E4:C4:24:98:E1:B7:44:34:6B:89:76:41:AB
X509v3 Authority Key Identifier:
keyid:E2:20:BC:46:94:53:9A:15:02:6E:C5:5A:AD:19:A1:2B:C2:14:C1:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iC8RpRTmhUCbsVarRmhK8IUwV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/TMvhro726OTEJJjht0Q0a4l2Qas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c900::/32
Signature Algorithm: sha256WithRSAEncryption
9c:f6:fc:34:2b:7b:45:2c:49:31:c2:de:b7:99:2b:9f:fa:4e:
cb:ee:b1:f2:d6:59:9a:f1:13:2a:dc:d4:c1:81:58:83:9c:76:
7f:3c:e8:eb:90:be:8c:de:70:2b:51:ba:df:2c:d6:24:5f:4c:
a5:48:b1:ea:b6:e6:8c:62:d2:54:d4:79:ca:d4:dd:70:d9:e6:
88:a3:28:fd:4b:cf:6f:05:ec:fb:51:b4:72:ea:c3:90:54:18:
94:04:03:07:2d:57:44:a1:0c:45:f1:83:90:85:60:d3:db:40:
6b:3a:d4:f3:22:d6:a5:bd:5f:16:4f:2b:a8:13:ff:ab:88:c4:
dc:23:b2:81:52:06:45:f0:c4:d2:48:f4:ba:db:b5:45:fa:c6:
8a:9c:30:9b:46:22:ab:24:ae:a5:9d:cd:9c:e2:fc:eb:2b:c9:
bb:fa:88:ca:89:e2:49:21:88:0e:41:6f:08:a7:9c:0a:1b:d6:
f5:fb:3c:a6:35:82:ab:1b:78:86:62:80:0a:a0:b1:bc:92:0e:
07:2a:5e:c9:43:ea:2c:f2:6c:8d:eb:df:03:84:e7:64:93:72:
ea:f8:bc:c3:6b:3e:8f:a8:c1:0b:d8:bf:91:ee:f5:2f:aa:58:
87:03:bb:1a:97:5d:13:3d:cf:7b:86:e1:49:ea:ef:db:b2:84:
6d:ee:4d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:55:47 2025 by rpki-client