Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/TTYqeImd9Bx1jE17xCXwGjIy_ds.roa
File: TTYqeImd9Bx1jE17xCXwGjIy_ds.roa (raw, json)
Hash identifier: zl9hhkn8MVjXkdNWr2SWdYWZOS+aR6DMyQIaYbl32sI=
Subject key identifier: 4D:36:2A:78:89:9D:F4:1C:75:8C:4D:7B:C4:25:F0:1A:32:32:FD:DB
Certificate issuer: /CN=a4824308bc83b4ee56f1c0c1b9fbfc311b0cd44a
Certificate serial: 0194266BB9EF9035162F9726BFA8BAA1C0D3
Authority key identifier: A4:82:43:08:BC:83:B4:EE:56:F1:C0:C1:B9:FB:FC:31:1B:0C:D4:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/TTYqeImd9Bx1jE17xCXwGjIy_ds.roa
Signing time: Thu 02 Jan 2025 09:49:41 +0000
ROA not before: Thu 02 Jan 2025 09:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51465
IP address blocks: 84.38.16.0/21 maxlen: 21
84.38.24.0/21 maxlen: 21
193.91.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:b9:ef:90:35:16:2f:97:26:bf:a8:ba:a1:c0:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4824308bc83b4ee56f1c0c1b9fbfc311b0cd44a
Validity
Not Before: Jan 2 09:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d362a78899df41c758c4d7bc425f01a3232fddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e0:d2:b0:09:fa:86:b6:f4:d8:95:4c:30:3e:
18:9a:36:7c:81:7c:d0:f5:02:04:63:77:fa:27:57:
82:42:83:98:9e:39:22:f2:e1:d7:ef:61:3f:b3:60:
52:27:25:4e:37:7a:6c:be:d9:77:47:2a:a9:11:2c:
be:55:27:a7:5f:30:46:53:6a:13:38:f8:0d:74:ee:
f2:d5:3a:ec:3c:54:0b:33:89:6d:63:75:a2:1c:30:
ff:5a:70:29:6c:ec:cc:aa:43:c5:33:74:55:98:9d:
e5:b3:05:e3:cb:47:5c:6c:ed:b8:57:d7:f1:b9:1b:
9b:d7:c8:f5:0f:0b:32:4a:7a:ba:5a:07:9f:f7:9d:
2b:ae:60:40:c5:4a:d9:04:7b:93:46:29:f3:aa:6a:
ae:76:eb:a6:43:e0:15:9f:b5:37:4c:49:54:c7:d2:
e8:1f:e7:06:6e:5e:80:ec:79:ab:17:14:1a:4b:3d:
45:9f:df:56:de:96:70:35:a0:a5:7b:eb:3d:22:3c:
73:be:00:3e:62:34:27:3b:e3:cf:12:2d:dd:11:3f:
ba:06:08:f6:9f:31:8f:f8:31:c7:6c:ab:3b:b1:4a:
fd:3d:f1:94:1f:4e:80:db:ed:8b:85:c2:89:bf:1a:
db:bd:d4:8a:d9:89:22:1d:1e:49:df:6f:6a:d8:66:
c0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:36:2A:78:89:9D:F4:1C:75:8C:4D:7B:C4:25:F0:1A:32:32:FD:DB
X509v3 Authority Key Identifier:
keyid:A4:82:43:08:BC:83:B4:EE:56:F1:C0:C1:B9:FB:FC:31:1B:0C:D4:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/TTYqeImd9Bx1jE17xCXwGjIy_ds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.38.16.0/20
193.91.5.0/24
Signature Algorithm: sha256WithRSAEncryption
67:6f:56:df:f6:e0:c6:35:2e:12:8e:6c:eb:0a:ad:8f:72:c7:
13:11:60:10:36:81:6f:ef:8a:a6:8d:c7:5a:28:6a:1b:8a:ce:
68:8c:fe:cd:95:ce:2c:31:66:25:90:2d:49:22:fc:2d:95:1d:
fc:ca:98:d8:e8:ea:37:70:60:69:94:85:c6:2d:11:96:64:11:
2f:d2:bb:5a:1c:e6:3a:50:45:67:d8:fc:69:92:b2:a0:16:45:
5e:bc:e9:64:ba:38:c9:ea:93:55:83:86:10:1c:33:ef:7e:d4:
5d:9d:36:aa:12:91:f6:86:6f:b0:03:1f:e8:a3:47:40:45:a3:
2a:87:e6:6c:09:73:16:9c:a5:59:21:78:d0:07:25:61:63:7a:
b4:bf:da:a1:ab:0e:7a:45:08:1f:e2:1a:4c:58:66:bf:5d:25:
5d:63:42:96:52:1e:0c:90:41:41:3e:99:93:8c:72:a5:0d:6b:
9e:c4:d0:2e:d9:c0:ce:6b:77:d8:67:38:9e:34:34:05:f0:55:
4a:6f:9e:15:11:46:f4:5f:2c:a5:ef:4b:fa:c7:fe:b6:92:48:
61:ad:8e:a9:00:33:99:b1:bc:a3:15:50:2a:23:f9:ff:66:31:
39:78:98:e6:0d:23:43:8f:c9:31:a9:2c:58:dd:d5:c0:48:05:
d6:ba:70:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:39 2025 by rpki-client