Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/tTranONLdrBCJnhMadQqd0e5eTg.roa
File: tTranONLdrBCJnhMadQqd0e5eTg.roa (raw, json)
Hash identifier: c+kQSkJnYqld76K3vBK/wSJIKiQGXSX4R6k3aLUZXig=
Subject key identifier: B5:3A:DA:9C:E3:4B:76:B0:42:26:78:4C:69:D4:2A:77:47:B9:79:38
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 01941FFA3779989CB8021FC304D2F38DC708
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/tTranONLdrBCJnhMadQqd0e5eTg.roa
Signing time: Wed 01 Jan 2025 03:47:59 +0000
ROA not before: Wed 01 Jan 2025 03:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47134
IP address blocks: 188.213.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:37:79:98:9c:b8:02:1f:c3:04:d2:f3:8d:c7:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 03:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b53ada9ce34b76b04226784c69d42a7747b97938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f2:ae:f4:ee:6d:12:13:92:00:4f:2a:bf:81:
f1:0b:fa:04:f0:f8:7a:8b:f7:d5:61:ee:f1:28:d9:
d7:03:21:34:f9:69:37:7b:33:de:be:17:ec:d5:b5:
31:9d:60:88:fa:9a:72:3f:32:63:34:57:eb:10:0d:
26:e0:f2:20:27:22:8e:9f:d9:ba:0c:a1:2b:9b:df:
cf:d5:17:bc:ce:64:00:2c:76:25:c8:5f:2f:d8:ad:
4a:c7:ec:12:44:c9:ff:dc:e8:9a:c5:4c:ec:6c:b8:
80:3f:14:b9:97:45:b2:a1:a3:75:bc:36:26:7f:14:
93:f6:86:80:9f:da:4c:bf:c6:86:ea:d4:94:94:76:
a8:25:ba:ba:d5:ef:29:9e:f3:35:41:39:4a:6e:ce:
e7:49:32:20:7d:80:81:c6:5b:5a:a2:d9:db:f9:69:
88:a5:53:e1:fc:58:80:ca:4d:72:c9:7a:0e:ef:b4:
d0:3e:d5:f9:d5:54:27:62:a4:b3:3d:21:6f:a8:ba:
3f:3a:0d:ea:df:04:d9:75:9d:4b:5b:d1:fb:78:c2:
b1:0f:d1:b0:a8:86:b0:a5:10:4e:f4:ad:b7:51:4a:
75:60:75:9d:7b:86:1d:f4:93:35:43:e7:31:d3:ce:
64:4c:64:94:42:cb:85:72:01:6f:81:a5:41:86:55:
4b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:3A:DA:9C:E3:4B:76:B0:42:26:78:4C:69:D4:2A:77:47:B9:79:38
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/tTranONLdrBCJnhMadQqd0e5eTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.213.32.0/24
Signature Algorithm: sha256WithRSAEncryption
70:c0:1b:12:bc:99:e2:be:8f:cb:2e:ef:e7:ce:94:8c:b6:a6:
03:f8:61:61:40:18:7f:37:ba:30:cc:e1:d5:a9:65:9f:66:a5:
cb:cb:c3:26:33:60:f9:d5:8c:9d:b9:25:c4:b8:94:24:5f:08:
2d:e2:b1:f6:af:d4:38:27:1a:c9:e3:5d:0d:b2:cb:5a:91:d5:
c6:b9:a5:f2:bc:a9:f8:c0:a7:f0:3d:16:a1:f0:f9:b2:16:ff:
7c:86:93:58:f8:04:98:f7:f5:63:11:b5:28:85:ea:d6:c0:ed:
a3:b4:26:3b:d7:a2:31:38:aa:bc:89:ac:c2:7a:2d:14:06:fc:
04:b6:cb:41:76:71:3b:e8:ea:a1:ae:1a:08:ae:6a:0c:d3:e2:
a5:11:a0:56:84:16:26:1a:f0:7e:54:ea:ae:7f:a4:61:3d:f2:
d7:33:ea:b1:96:11:1a:cc:c7:d8:a9:fc:30:83:87:1f:49:26:
50:c7:38:62:78:93:47:48:8a:5f:9d:1a:d9:64:25:2f:ee:c6:
e2:6c:94:42:03:f1:e8:46:cd:70:db:ed:61:69:fe:ce:3f:4e:
33:34:46:d4:c7:08:30:31:a9:09:08:11:85:14:bf:d0:dd:45:
bb:ed:74:65:02:c7:c7:c6:fb:60:7d:d9:5d:96:27:2e:27:34:
03:2c:c6:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:53:10 2025 by rpki-client