Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/odyRy2FLHB1ia0-B0wtN-GrVmpY.roa
File: odyRy2FLHB1ia0-B0wtN-GrVmpY.roa (raw, json)
Hash identifier: kVTUOVywoB+P4bkpPocvLbzGPCGuaGOyFmq1BUYllIU=
Subject key identifier: A1:DC:91:CB:61:4B:1C:1D:62:6B:4F:81:D3:0B:4D:F8:6A:D5:9A:96
Certificate issuer: /CN=4d92be02509643bc7a2f862871639d08e276c636
Certificate serial: 019421446524BE88719F9B8FC61523D9C16A
Authority key identifier: 4D:92:BE:02:50:96:43:BC:7A:2F:86:28:71:63:9D:08:E2:76:C6:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/odyRy2FLHB1ia0-B0wtN-GrVmpY.roa
Signing time: Wed 01 Jan 2025 09:48:37 +0000
ROA not before: Wed 01 Jan 2025 09:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212506
IP address blocks: 195.16.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:65:24:be:88:71:9f:9b:8f:c6:15:23:d9:c1:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d92be02509643bc7a2f862871639d08e276c636
Validity
Not Before: Jan 1 09:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1dc91cb614b1c1d626b4f81d30b4df86ad59a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:48:74:e6:03:f0:1e:95:b5:3d:f6:f6:38:bd:
1e:8c:43:68:35:1c:a4:c7:16:42:5a:d5:e9:e8:2e:
84:b6:d0:e9:d0:2d:92:26:7c:f1:90:c3:4d:0a:bd:
4a:14:5d:ac:73:71:e7:da:d9:51:5d:21:3a:ff:e2:
bb:c4:db:a5:8e:4b:11:48:1b:1e:32:14:ad:e6:e8:
ad:4f:0b:89:d3:5f:97:19:44:b4:0a:bf:0e:8e:e1:
f6:61:fd:40:58:a3:60:71:c1:4c:55:b0:ae:4e:1d:
a2:01:0f:5a:7d:dc:7f:bd:ee:f4:1a:73:46:b5:ea:
69:f6:53:0f:d2:3e:ff:6d:f3:d8:82:b0:1f:bc:e0:
d4:fe:51:8e:34:37:6b:cb:79:36:fa:a2:c6:93:ac:
28:45:5d:03:33:33:cb:10:10:25:60:3f:3a:d6:f7:
45:13:61:21:1e:0f:21:f5:9a:52:04:a8:a1:7e:65:
06:b2:d6:f2:86:b3:6a:2e:10:0d:3e:d2:79:c8:99:
f8:f2:60:84:92:e0:d6:2a:83:08:66:ab:61:5e:04:
18:00:c8:28:21:73:43:05:0d:14:02:95:df:51:3a:
2e:7b:59:05:8d:58:81:ba:18:de:41:d1:db:86:90:
4d:19:66:41:7d:0e:aa:e4:ed:c1:c4:d6:50:2c:5c:
af:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:DC:91:CB:61:4B:1C:1D:62:6B:4F:81:D3:0B:4D:F8:6A:D5:9A:96
X509v3 Authority Key Identifier:
keyid:4D:92:BE:02:50:96:43:BC:7A:2F:86:28:71:63:9D:08:E2:76:C6:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/odyRy2FLHB1ia0-B0wtN-GrVmpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.16.72.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:58:31:d8:ea:57:3f:29:7b:90:a7:e2:e4:56:a2:2f:40:cd:
68:3f:08:47:b1:70:93:80:77:7a:d3:4a:2d:4b:5d:d4:e0:15:
15:b5:ed:39:e3:a1:c5:30:b3:5a:9f:01:ec:ef:a8:a1:ef:c7:
64:cd:e4:55:b5:1e:32:0a:0a:08:15:d0:50:05:df:a9:70:f7:
7f:d8:63:16:96:7f:83:5e:db:79:bc:a8:81:d5:a8:8f:20:9c:
91:54:e5:6a:44:67:a9:98:0e:63:e4:ee:d1:4d:f4:02:76:25:
f8:04:14:f7:c3:f3:42:5f:53:ff:33:49:4b:15:c5:da:91:f0:
99:59:5e:7e:33:fc:24:25:f0:5f:f1:91:94:ba:37:f5:08:f0:
9d:8d:c2:55:b9:ef:00:4d:5a:79:0d:23:fd:f7:04:4e:f6:4e:
58:51:ee:32:4e:20:93:ef:37:64:37:60:c2:8c:54:8e:c2:a7:
bd:21:89:7b:0e:b5:f1:db:3e:f1:ca:42:ba:15:f4:d8:5b:b3:
46:2e:f0:f2:57:ef:26:a8:a8:fe:a7:a2:76:c7:69:f4:cf:c6:
b6:11:b3:93:6e:89:73:e4:5b:e8:16:26:f3:83:e0:57:94:99:
e4:07:ec:6f:b9:c9:7c:4b:23:c7:ca:6f:06:25:03:77:af:88:
e8:4d:0f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 19:07:20 2025 by rpki-client