Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/TvMim_aEtrCLLOp0ZZIFYAVC2o4.roa
File: TvMim_aEtrCLLOp0ZZIFYAVC2o4.roa (raw, json)
Hash identifier: /xE4OxOvjCCoCUdeNOdzw/FvM+bpWmIZ3XvVFCX7TVc=
Subject key identifier: 4E:F3:22:9B:F6:84:B6:B0:8B:2C:EA:74:65:92:05:60:05:42:DA:8E
Certificate issuer: /CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Certificate serial: 019421440ACFF1AAFB03903CA7E388D67FC2
Authority key identifier: FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/TvMim_aEtrCLLOp0ZZIFYAVC2o4.roa
Signing time: Wed 01 Jan 2025 09:48:14 +0000
ROA not before: Wed 01 Jan 2025 09:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29189
IP address blocks: 217.64.208.0/23 maxlen: 24
217.64.208.0/24 maxlen: 24
217.64.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:0a:cf:f1:aa:fb:03:90:3c:a7:e3:88:d6:7f:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Validity
Not Before: Jan 1 09:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ef3229bf684b6b08b2cea74659205600542da8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1a:3a:5b:2d:5e:e0:d7:b6:40:f1:41:ba:06:
13:31:79:d2:9a:49:0e:c4:f7:0b:9c:66:61:3e:e5:
13:04:03:c1:61:24:00:b3:79:d0:84:12:99:20:98:
b2:71:e5:86:50:80:ab:a6:a7:12:97:1a:cc:08:2f:
ce:aa:a1:6a:02:2b:20:67:44:f5:f7:81:26:67:3b:
77:34:59:f7:60:68:f5:81:96:fa:69:f3:af:dc:97:
47:34:29:cb:17:73:bf:41:b7:da:f3:00:5f:d2:5c:
ee:7c:3c:53:ac:29:a2:bd:2e:40:2b:b0:0d:83:c4:
28:ea:dd:16:bd:ca:c5:05:2f:4e:09:19:d0:48:6e:
35:3b:e8:67:53:93:bb:e5:68:49:9d:62:1d:cf:ea:
8c:f1:7f:96:7d:91:3d:d2:5e:1f:94:12:31:19:c1:
08:f9:4d:47:bd:05:b6:d1:e9:b8:f6:56:39:06:5d:
21:e4:23:6e:f5:81:13:29:54:c1:ae:8e:89:8a:9a:
df:56:26:b6:ba:ee:c0:b8:ef:0e:2d:56:87:79:bb:
97:28:76:86:2d:16:1d:a4:ab:f2:ba:1a:0f:1c:ec:
43:08:e3:44:bf:1d:d5:ad:f4:e5:fc:3a:f7:8c:8d:
73:c6:f8:f0:ea:36:85:30:39:c5:2e:f9:2f:1b:00:
33:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F3:22:9B:F6:84:B6:B0:8B:2C:EA:74:65:92:05:60:05:42:DA:8E
X509v3 Authority Key Identifier:
keyid:FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/TvMim_aEtrCLLOp0ZZIFYAVC2o4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.64.208.0/23
Signature Algorithm: sha256WithRSAEncryption
29:8a:c7:15:f3:dd:06:66:17:62:7d:f4:f0:00:3a:e4:62:b0:
f4:38:16:82:c6:55:ff:b8:a8:ba:57:90:7a:9c:06:52:28:b0:
6f:16:c7:61:07:12:0c:9f:55:1e:a1:d5:90:18:2b:12:57:d9:
5c:58:52:bb:40:6c:d1:00:5a:86:c2:4a:6b:1f:f3:a6:11:b4:
dd:7c:87:da:c4:46:d0:13:f5:bc:7e:5a:15:53:54:35:0e:10:
4d:7e:51:d6:2c:70:96:17:ab:b1:4a:19:c1:9b:42:1b:e3:a1:
7b:fb:ee:ce:f1:fa:a3:63:f6:e2:52:ac:63:76:7d:c9:39:c9:
de:ab:d8:93:ee:28:4d:bd:b9:d8:33:50:17:1a:81:8d:cc:d8:
13:96:d1:77:e4:e9:9a:e2:b6:e7:6c:fb:cd:c0:32:4d:cf:d0:
62:3d:8a:c9:6a:dd:17:b6:2f:2c:74:92:61:0d:91:64:19:3e:
e8:b5:93:66:95:2c:9e:fc:ee:c6:18:2d:83:9f:0d:a7:d4:80:
d9:0f:2c:33:38:b3:fc:1d:d9:28:c8:ff:71:59:63:2a:28:1c:
2d:f0:03:f5:eb:9d:c4:a8:a4:3f:fc:aa:bc:97:59:55:a9:ac:
6d:fd:94:fd:c1:04:f8:bc:49:94:ea:ab:bb:cb:d5:7a:c1:c6:
d8:2e:0e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:28:33 2025 by rpki-client