Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/TVR9Wcx95L9uIbI7vmRK3_ppXuA.roa
File: TVR9Wcx95L9uIbI7vmRK3_ppXuA.roa (raw, json)
Hash identifier: FBGg+DHw7jOc497O265+HPovAlPdSEs0qwJnAdItW6I=
Subject key identifier: 4D:54:7D:59:CC:7D:E4:BF:6E:21:B2:3B:BE:64:4A:DF:FA:69:5E:E0
Certificate issuer: /CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Certificate serial: 0194258EAD600827A4A86EE88B38F7407480
Authority key identifier: 93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/TVR9Wcx95L9uIbI7vmRK3_ppXuA.roa
Signing time: Thu 02 Jan 2025 05:48:15 +0000
ROA not before: Thu 02 Jan 2025 05:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.176.100.0/24 maxlen: 24
185.176.101.0/24 maxlen: 24
185.176.102.0/24 maxlen: 24
185.176.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:ad:60:08:27:a4:a8:6e:e8:8b:38:f7:40:74:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Validity
Not Before: Jan 2 05:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d547d59cc7de4bf6e21b23bbe644adffa695ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3d:04:6b:5a:b4:70:f2:b3:4e:d1:89:17:18:
5e:9e:f4:8a:b5:05:2d:93:b6:1e:52:5a:4c:c0:7c:
5f:78:e9:24:a8:ce:7c:56:e2:f2:06:db:e9:6b:91:
ad:88:0f:a8:ac:23:1e:6a:6d:84:b4:4c:55:0d:19:
c3:95:b0:5e:48:22:85:8d:16:7d:0f:49:ca:ef:7d:
2a:30:2e:17:ff:5c:fe:45:13:1a:41:7c:84:bc:cc:
75:48:2c:a6:87:0b:e6:eb:14:da:de:5f:76:b4:5e:
49:52:41:ce:a9:41:23:2a:d4:91:f4:25:d8:b1:84:
62:91:b9:b5:3a:4a:09:3d:e6:78:ce:75:72:27:1a:
20:b5:dd:48:51:51:e2:cc:26:83:dd:58:0d:17:f6:
81:89:4f:6e:db:a5:ce:d2:a0:24:24:25:81:39:62:
ee:e9:37:e4:1e:6a:14:01:9d:2a:cc:58:d2:55:b8:
4b:42:55:e3:a8:86:e1:3c:47:e3:dc:50:2a:bd:a3:
02:04:ab:ce:e2:d3:0b:89:69:94:5e:dc:d8:90:c4:
fd:e6:ce:d3:19:26:38:32:59:e0:73:60:91:8b:75:
6d:84:ee:90:ae:19:19:6c:53:18:b4:bd:30:3c:ca:
d2:c9:fa:16:80:4d:4d:6d:3c:d5:57:70:de:24:04:
49:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:54:7D:59:CC:7D:E4:BF:6E:21:B2:3B:BE:64:4A:DF:FA:69:5E:E0
X509v3 Authority Key Identifier:
keyid:93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/TVR9Wcx95L9uIbI7vmRK3_ppXuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.176.100.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:58:b6:ad:6a:25:be:06:6b:0f:be:cb:51:63:70:1e:da:57:
c0:04:23:54:c8:db:b7:eb:24:b5:46:e2:22:48:e4:43:0b:06:
7e:e9:e7:af:ed:5a:66:0c:f4:b8:05:03:06:70:a0:e8:10:b1:
64:6b:0c:47:e4:37:c0:45:06:27:56:47:9b:59:f0:a2:8f:ae:
14:b1:92:46:85:67:12:dc:db:5d:f6:83:c6:d1:45:33:56:6a:
ef:cf:48:a2:26:4b:bd:89:37:46:52:f6:41:e3:ae:16:b2:fd:
be:e9:32:40:23:93:dd:49:16:6b:87:17:ba:0d:d6:e8:b7:10:
19:ee:28:5b:bc:8a:dd:5d:72:a3:1b:9e:70:8e:d1:02:a1:20:
ea:e5:e3:d3:14:32:b6:54:76:f1:27:81:ee:d2:f0:72:03:e8:
9f:35:61:8e:51:e7:39:60:9b:f8:26:c9:d3:7e:e9:5e:61:ca:
4d:84:6d:d5:fa:1b:30:90:57:3e:ae:57:51:5a:c2:0b:34:88:
de:50:e9:13:95:55:2b:30:c1:32:ea:82:fd:d7:67:21:47:45:
17:14:96:f5:3e:d3:65:d0:a0:85:59:e5:b3:62:f3:78:d8:58:
de:61:5a:f4:6a:2b:11:8d:ae:52:c7:20:03:ee:d4:23:5a:98:
ee:15:13:f6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQljq1gCCekqG7oizj3QHSAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMDFlYTA1OTYzYzk3NTZmMjhlZTJlOThiOGYzY2M0Nzlk
YzlmNTgwHhcNMjUwMTAyMDU0ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDU0N2Q1OWNjN2RlNGJmNmUyMWIyM2JiZTY0NGFkZmZhNjk1ZWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0j0Ea1q0cPKzTtGJFxhenvSKtQUt
k7YeUlpMwHxfeOkkqM58VuLyBtvpa5GtiA+orCMeam2EtExVDRnDlbBeSCKFjRZ9
D0nK730qMC4X/1z+RRMaQXyEvMx1SCymhwvm6xTa3l92tF5JUkHOqUEjKtSR9CXY
sYRikbm1OkoJPeZ4znVyJxogtd1IUVHizCaD3VgNF/aBiU9u26XO0qAkJCWBOWLu
6TfkHmoUAZ0qzFjSVbhLQlXjqIbhPEfj3FAqvaMCBKvO4tMLiWmUXtzYkMT95s7T
GSY4Mlngc2CRi3VthO6QrhkZbFMYtL0wPMrSyfoWgE1NbTzVV3DeJARJYwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE1UfVnMfeS/biGyO75kSt/6aV7gMB8GA1UdIwQY
MBaAFJMB6gWWPJdW8o7i6YuPPMR53J9YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3dIcUJaWThsMWJ5anVMcGk0ODh4SG5jbjFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9lYmY2Y2ItYTc3OS00NjRmLThiZWUt
OGYwOGUwMjcyZGY4LzEvVFZSOVdjeDk1TDl1SWJJN3ZtUkszX3BwWHVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9lYmY2Y2ItYTc3OS00NjRmLThiZWUtOGYwOGUwMjcyZGY4
LzEva3dIcUJaWThsMWJ5anVMcGk0ODh4SG5jbjFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubBkMA0G
CSqGSIb3DQEBCwUAA4IBAQB7WLataiW+BmsPvstRY3Ae2lfABCNUyNu36yS1RuIi
SORDCwZ+6eev7VpmDPS4BQMGcKDoELFkawxH5DfARQYnVkebWfCij64UsZJGhWcS
3Ntd9oPG0UUzVmrvz0iiJku9iTdGUvZB464Wsv2+6TJAI5PdSRZrhxe6DdbotxAZ
7ihbvIrdXXKjG55wjtECoSDq5ePTFDK2VHbxJ4Hu0vByA+ifNWGOUec5YJv4JsnT
fuleYcpNhG3V+hswkFc+rldRWsILNIjeUOkTlVUrMMEy6oL912chR0UXFJb1PtNl
0KCFWeWzYvN42FjeYVr0aisRja5SxyAD7tQjWpjuFRP2
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:41:00 2025 by rpki-client