Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/TLZicJ-oF3y9XbymZF6MTAhyYvk.roa
File: TLZicJ-oF3y9XbymZF6MTAhyYvk.roa (raw, json)
Hash identifier: 4HeSyTBfKiFSQT/0BeZ4MVQL/epSIUIfB43B7ezWkA0=
Subject key identifier: 4C:B6:62:70:9F:A8:17:7C:BD:5D:BC:A6:64:5E:8C:4C:08:72:62:F9
Certificate issuer: /CN=48395eb4c0ee2daa5392cd99fc45efbc4a754e90
Certificate serial: 0194252077E81224AB2AAC38AF0EE097605B
Authority key identifier: 48:39:5E:B4:C0:EE:2D:AA:53:92:CD:99:FC:45:EF:BC:4A:75:4E:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/TLZicJ-oF3y9XbymZF6MTAhyYvk.roa
Signing time: Thu 02 Jan 2025 03:47:52 +0000
ROA not before: Thu 02 Jan 2025 03:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200845
IP address blocks: 45.150.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:77:e8:12:24:ab:2a:ac:38:af:0e:e0:97:60:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48395eb4c0ee2daa5392cd99fc45efbc4a754e90
Validity
Not Before: Jan 2 03:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4cb662709fa8177cbd5dbca6645e8c4c087262f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:41:fb:ac:81:b2:40:1d:c0:73:94:f6:8f:9a:
e2:ca:b0:66:b2:e3:be:72:57:0d:a4:0f:c7:d2:7f:
de:16:bc:b0:51:56:f1:12:ff:51:6d:66:2c:5c:df:
05:af:01:ea:ef:c6:f5:ce:e1:ae:6a:07:c4:f4:35:
a1:7d:5a:d6:b7:79:e7:49:2a:7e:27:dc:90:93:61:
85:66:43:89:25:33:5a:89:ed:d6:57:c7:dc:24:ca:
3f:36:0a:2e:ad:7e:6a:87:5c:b3:6c:30:d7:03:b5:
2b:93:72:a0:24:70:90:fc:f6:91:8b:7a:bb:16:a9:
55:ed:20:aa:58:53:69:6c:93:86:a8:00:5f:dd:98:
48:8c:ab:6f:07:27:db:e9:06:cd:70:10:94:9f:ad:
3d:3a:2f:ca:f1:f0:1e:3f:c3:43:93:a1:7a:eb:95:
aa:5b:75:c5:55:db:93:c9:cb:20:d6:12:3b:57:a5:
0b:91:be:bc:5e:b0:d6:4c:35:47:5b:8e:39:bc:b6:
ec:a3:c2:1e:1b:0e:27:0e:3c:d3:e1:08:1c:97:c2:
e9:15:00:a1:5c:86:e1:20:0a:2e:23:8b:b8:ef:99:
61:ac:a5:79:54:89:7c:49:6c:6e:22:29:b4:7e:8f:
42:53:53:32:5a:84:19:3f:1f:cb:ef:bb:c6:6f:85:
6f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B6:62:70:9F:A8:17:7C:BD:5D:BC:A6:64:5E:8C:4C:08:72:62:F9
X509v3 Authority Key Identifier:
keyid:48:39:5E:B4:C0:EE:2D:AA:53:92:CD:99:FC:45:EF:BC:4A:75:4E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/TLZicJ-oF3y9XbymZF6MTAhyYvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.12.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:20:f0:6d:56:c8:7d:6b:51:24:63:24:1f:cb:63:4d:56:29:
af:ef:60:b3:05:de:ec:bb:aa:6d:87:2d:24:f1:37:a7:9f:32:
53:1b:bd:12:88:69:0d:29:3d:28:17:69:c3:df:ec:ec:a8:51:
69:87:e0:cf:61:d7:a9:8d:54:bc:ff:d1:40:66:e1:fa:16:38:
45:67:54:5a:45:7e:aa:db:4e:db:75:a2:db:ac:ee:bf:68:3b:
4e:e2:ee:63:ab:65:a4:16:a7:c6:4b:9e:5e:b8:52:f9:cb:04:
c9:86:56:d0:25:d2:ba:c2:03:40:83:a6:f5:da:34:86:32:6b:
ef:a0:6b:86:52:e9:c2:b7:33:74:bc:eb:17:ea:af:59:6f:a0:
4c:3f:2d:e3:e8:28:07:6c:b8:17:e2:d5:a9:e8:57:7c:ef:90:
05:6e:e7:de:4d:29:87:ad:50:fa:a6:59:e8:bc:4c:66:a3:ec:
ef:ee:c4:2e:e3:a8:e7:53:81:fb:c9:09:00:b1:8d:af:0c:2d:
cc:c9:0d:8f:bf:88:e0:aa:3b:19:c7:51:f0:4b:9e:31:b7:e9:
ab:a4:fc:34:d6:b2:96:0a:4a:05:39:47:a9:06:7e:18:ae:6b:
0c:c5:ab:89:de:0b:e5:03:4c:b6:10:86:e3:d1:66:9d:f3:f9:
ed:6f:7b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:01:55 2025 by rpki-client