Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/TzcKOj9Zbs6KbPYh_IUNdJFuw_o.roa
File: TzcKOj9Zbs6KbPYh_IUNdJFuw_o.roa (raw, json)
Hash identifier: Nd8DGSNjI4U6VllZfkdb3mT7nzYndNyfiOfx/EMJxwE=
Subject key identifier: 4F:37:0A:3A:3F:59:6E:CE:8A:6C:F6:21:FC:85:0D:74:91:6E:C3:FA
Certificate issuer: /CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Certificate serial: 019424458D662D384566AF13471D38225768
Authority key identifier: A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/TzcKOj9Zbs6KbPYh_IUNdJFuw_o.roa
Signing time: Wed 01 Jan 2025 23:48:45 +0000
ROA not before: Wed 01 Jan 2025 23:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203461
IP address blocks: 185.2.4.0/23 maxlen: 23
185.2.4.0/24 maxlen: 24
185.2.6.0/23 maxlen: 24
2a01:8100:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:8d:66:2d:38:45:66:af:13:47:1d:38:22:57:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Validity
Not Before: Jan 1 23:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f370a3a3f596ece8a6cf621fc850d74916ec3fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f2:e4:5a:ab:59:f0:90:80:ea:b9:d7:d5:e8:
a6:b3:cf:df:5c:47:a0:57:81:b8:2e:64:93:9a:3a:
78:a6:a1:81:51:49:10:c2:04:42:57:ef:db:3c:e9:
36:0a:be:b7:b7:c1:87:b8:b8:82:01:6b:19:4e:27:
cb:d2:d8:14:1f:dc:d1:1b:8e:e5:3e:ee:7b:4e:87:
6a:76:47:18:56:43:4f:ce:6b:4e:72:67:17:85:29:
56:19:a3:48:95:46:f1:b3:57:92:5f:cf:8e:65:33:
4e:48:72:91:48:e6:f6:5b:a7:c7:9a:f4:12:df:51:
27:01:f5:40:e8:d1:83:1d:04:ca:bd:6a:6e:6b:1e:
80:1c:5b:f1:2e:a1:a5:5d:cf:09:6f:c2:63:62:45:
74:05:ec:0c:78:14:17:ce:b1:36:4b:e0:11:45:79:
6b:c2:83:6f:8b:5b:3a:91:7a:ad:64:a4:02:e2:f3:
c0:35:a2:87:c8:b3:71:b9:00:89:a7:f5:3b:13:21:
7a:5c:7b:b5:25:8f:c5:25:e8:48:d2:a7:37:9d:9c:
87:8e:3b:05:cf:81:8c:2d:53:99:6c:36:a2:2e:c9:
c6:3d:45:53:c9:2d:8a:b9:05:78:e6:54:a3:bf:60:
40:82:01:08:23:82:64:16:c7:e6:7d:fa:7f:96:03:
f6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:37:0A:3A:3F:59:6E:CE:8A:6C:F6:21:FC:85:0D:74:91:6E:C3:FA
X509v3 Authority Key Identifier:
keyid:A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/TzcKOj9Zbs6KbPYh_IUNdJFuw_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.2.4.0/22
IPv6:
2a01:8100:1::/48
Signature Algorithm: sha256WithRSAEncryption
5c:d8:29:10:d9:f9:01:a5:31:54:45:d1:e9:eb:99:9d:49:11:
b2:cf:94:76:af:c4:79:11:40:75:4a:9a:ef:2b:5f:b4:60:cb:
2a:87:31:65:7d:c4:4b:a6:ac:71:83:df:c1:17:45:2d:f1:69:
85:e0:49:f5:11:f6:14:a5:d7:df:96:4a:a3:2a:cb:ff:c5:67:
a0:f8:ed:e6:94:15:de:c2:b6:c8:1e:62:86:8b:e3:48:f7:ca:
98:40:fb:9f:cf:65:1f:f3:0a:85:32:0f:89:39:9b:35:2d:52:
4b:9b:19:ba:b4:d8:3b:98:6f:68:ca:27:25:fe:fe:ce:56:93:
89:5a:8d:4d:a0:2e:6e:f3:24:29:ae:3f:75:bd:fc:07:c6:04:
1b:db:2c:09:d1:cf:07:2c:5d:c1:1a:bd:17:f0:0b:82:15:96:
0b:be:7f:a5:9a:9e:03:6c:85:a6:70:f9:4e:f1:b0:27:f3:ee:
32:12:51:7f:6a:8f:b5:35:d8:a9:ae:2a:e0:de:c9:8e:05:cf:
8d:9e:c2:c7:71:bd:b0:10:56:84:41:a8:ca:d2:03:b4:29:63:
37:78:90:9c:0a:1d:68:d5:52:79:82:02:6e:4e:17:b0:37:e8:
6f:86:dd:43:e9:f1:45:8a:ba:0a:94:94:27:c2:11:c2:34:b0:
d9:60:8e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:31:35 2025 by rpki-client