Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/tRk-YBczE3FDkZSqF_DZ1cS8prs.roa
File: tRk-YBczE3FDkZSqF_DZ1cS8prs.roa (raw, json)
Hash identifier: Ai82fu8mHDQlsp9CwpAnEbDmHQG0LuobBXqdeqImOwE=
Subject key identifier: B5:19:3E:60:17:33:13:71:43:91:94:AA:17:F0:D9:D5:C4:BC:A6:BB
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 01941FFA3F3F9F37B06B875CDAE079490763
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/tRk-YBczE3FDkZSqF_DZ1cS8prs.roa
Signing time: Wed 01 Jan 2025 03:48:01 +0000
ROA not before: Wed 01 Jan 2025 03:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206382
IP address blocks: 89.36.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 12:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:3f:3f:9f:37:b0:6b:87:5c:da:e0:79:49:07:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 03:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5193e6017331371439194aa17f0d9d5c4bca6bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:61:b8:5c:0f:fa:e5:2c:ab:a3:e3:62:82:c7:
07:8a:73:f4:41:bc:06:2b:10:e0:78:68:8d:e4:a7:
fc:c9:cf:6b:8e:c3:2a:e0:3b:53:d9:d5:84:ea:a8:
6f:2c:d5:d8:de:55:5b:e3:76:60:a1:42:11:c3:d0:
0c:d4:5a:d8:8c:52:9f:87:b4:5e:d8:ac:61:73:ba:
0b:06:5b:8a:98:c7:69:6a:b6:b1:4a:ed:27:1f:96:
10:f0:be:21:79:79:36:9d:bf:a2:bc:07:e5:16:df:
59:ce:4f:dc:15:a3:4c:2c:4b:c5:28:8b:a9:f2:01:
1c:ea:97:17:1d:ba:76:cc:ea:d6:92:a1:63:c0:11:
1b:55:13:2b:8d:d5:8c:c0:ec:d7:08:eb:cc:9e:a6:
02:0c:73:ca:5a:38:d1:ae:31:ab:68:e0:7a:08:af:
d1:46:bb:47:36:71:f5:e5:5a:b9:2b:c4:8a:ec:66:
15:c5:ce:cc:74:03:d1:4c:7d:32:b5:82:74:c7:bd:
1d:4f:95:2c:82:80:5c:a1:0c:03:40:81:89:9c:b2:
0d:3d:60:65:f5:e3:1e:27:5c:6b:9c:e7:28:13:24:
ed:52:bc:0c:63:c1:40:cf:d4:44:f5:ad:70:d6:a2:
bc:ed:72:3b:cf:df:d0:42:28:d4:10:10:69:55:55:
1a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:19:3E:60:17:33:13:71:43:91:94:AA:17:F0:D9:D5:C4:BC:A6:BB
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/tRk-YBczE3FDkZSqF_DZ1cS8prs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.36.192.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:71:77:8a:0d:c7:64:df:12:25:b1:62:d8:d6:52:d7:53:92:
86:60:87:8d:be:80:c4:a3:e6:6a:37:8b:e2:3b:ca:f2:83:72:
b3:89:32:9e:fc:b3:8d:63:15:fb:f6:03:ad:91:dd:14:9a:9d:
9d:71:bd:37:e2:8e:bf:42:06:44:c9:46:f0:24:2d:a2:38:8a:
08:06:b1:44:ba:39:2a:d8:02:91:98:ef:e3:f3:f0:e2:ab:bf:
4e:55:27:f3:6e:2a:d6:a9:4b:69:9a:85:9d:a3:4f:72:dc:70:
f8:ef:b3:67:73:14:26:a1:72:1c:00:3f:67:6c:00:ba:35:a0:
21:da:ff:5f:a9:0d:21:dd:22:b3:4f:e1:95:eb:49:5d:b4:31:
b1:6e:9e:fd:ec:91:a9:c1:7a:3e:e3:8b:52:d3:3a:63:54:64:
cb:4b:aa:0d:7e:11:95:83:c6:a0:97:86:5f:bf:a4:5f:3c:2f:
b4:4e:f9:e3:ec:d6:0c:d3:b7:ec:89:f8:fc:f7:c4:2e:e2:88:
14:4f:f1:76:23:5e:0e:25:9b:92:33:21:52:ff:66:c2:9a:13:
96:79:82:9b:df:bb:2f:fe:b3:1d:09:2e:72:28:02:8c:d8:bc:
b7:d4:df:cd:a9:da:5b:df:85:fd:65:f5:24:c8:d9:2d:f2:85:
fe:81:06:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:12:30 2025 by rpki-client