Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/tLZE9xN0wEMlciA44LFiADYH8LI.roa
File: tLZE9xN0wEMlciA44LFiADYH8LI.roa (raw, json)
Hash identifier: wSS87TjmYV1lgJuaVAo3xUhNdr4f/voSLt3pqfbBM5Q=
Subject key identifier: B4:B6:44:F7:13:74:C0:43:25:72:20:38:E0:B1:62:00:36:07:F0:B2
Certificate issuer: /CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4
Certificate serial: 019423694437FC98E9B663F3948BC06D2989
Authority key identifier: A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/tLZE9xN0wEMlciA44LFiADYH8LI.roa
Signing time: Wed 01 Jan 2025 19:48:08 +0000
ROA not before: Wed 01 Jan 2025 19:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35337
IP address blocks: 194.56.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 22:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:44:37:fc:98:e9:b6:63:f3:94:8b:c0:6d:29:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4
Validity
Not Before: Jan 1 19:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4b644f71374c04325722038e0b162003607f0b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7c:fd:07:50:60:8a:da:ae:20:37:ab:5c:75:
7d:0a:0c:18:c1:c8:fa:b6:5d:3c:ac:56:81:ed:8d:
d4:47:52:24:23:3f:2b:60:aa:1f:c3:f8:97:1c:d9:
fb:52:8d:de:0c:ef:7a:8a:e0:8f:b0:8a:9d:3e:22:
db:85:1b:48:b3:80:02:70:f6:8a:69:fb:50:41:3f:
3b:91:c4:29:08:35:f0:67:a6:75:18:4e:7c:c9:61:
80:69:1a:6c:81:e5:15:b5:d1:e7:08:46:1c:b1:d0:
75:91:d5:02:41:2b:16:d0:c0:5b:2c:ea:65:cc:1a:
91:c6:4b:99:4d:99:fc:60:37:d3:3d:f5:18:c8:e8:
b1:b5:cf:9d:12:fa:64:ef:5e:e7:c8:3e:f3:22:1e:
eb:b9:7d:e8:90:8b:12:56:25:a8:e3:a0:b1:54:c7:
01:bc:82:6d:f8:77:aa:57:8d:fc:13:6e:6e:6f:23:
dd:3e:87:d5:e2:b3:03:58:6b:92:c8:d0:36:ca:d3:
db:9d:66:c5:bc:7f:63:89:65:56:cf:a6:8d:4d:d9:
6e:ba:b1:d8:5d:89:03:fb:80:58:fb:f6:02:84:0b:
52:8a:40:ce:d2:91:86:c1:fe:e1:f7:16:01:7c:f0:
1b:cf:67:fc:dc:0a:83:47:5c:9f:81:51:30:77:5f:
f3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B6:44:F7:13:74:C0:43:25:72:20:38:E0:B1:62:00:36:07:F0:B2
X509v3 Authority Key Identifier:
keyid:A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/tLZE9xN0wEMlciA44LFiADYH8LI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.211.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:85:8c:e7:b2:7f:2d:c1:c4:e4:d2:a8:0d:52:79:87:7a:ef:
19:e4:b0:84:ef:2f:98:82:fc:29:04:bc:d7:e6:09:9c:a8:7c:
7b:1b:d3:b0:25:e9:65:8a:3b:63:87:4e:7c:f3:26:54:4a:09:
16:18:db:4e:0f:b6:fe:f0:4d:87:c5:8b:5c:b1:81:57:48:29:
7d:1b:a6:cd:4f:71:39:3b:1e:03:e6:5c:bf:ff:c4:59:a1:bc:
a1:80:71:50:7a:98:30:3f:f5:07:97:42:5c:7c:57:94:e8:d9:
04:f9:4e:7d:d1:87:57:ff:a1:7c:7d:a9:14:f7:6d:f5:22:1e:
98:da:54:24:41:2e:e4:69:2b:17:39:27:14:98:05:b0:5a:1b:
d2:73:44:b0:68:d4:08:fc:3e:51:26:00:8b:da:78:7e:01:7e:
a9:51:5a:c4:1a:71:92:29:30:08:41:cc:88:0f:79:37:1b:39:
b8:86:c2:ce:94:03:ca:24:ec:95:84:fb:28:23:86:47:90:23:
7b:88:58:38:36:67:0e:cf:d9:c1:d8:13:5f:53:95:80:c5:e3:
3b:71:c6:6e:a5:14:bd:0f:98:27:1e:4f:66:17:b1:f6:4e:da:
1b:84:ac:68:ab:ab:c7:8e:98:43:65:73:64:dd:24:68:09:d8:
5e:80:ef:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:58:35 2025 by rpki-client