Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/TzcMUZJB36283MbQQ99iptGNtIw.roa
File: TzcMUZJB36283MbQQ99iptGNtIw.roa (raw, json)
Hash identifier: B6MD76RKOjAWzFgIbMOdkpS2VEGooCsigDBU1azmGLA=
Subject key identifier: 4F:37:0C:51:92:41:DF:AD:BC:DC:C6:D0:43:DF:62:A6:D1:8D:B4:8C
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 019425FDC378E127C5C61C9E188286E6DA18
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/TzcMUZJB36283MbQQ99iptGNtIw.roa
Signing time: Thu 02 Jan 2025 07:49:35 +0000
ROA not before: Thu 02 Jan 2025 07:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208153
IP address blocks: 147.181.62.0/23 maxlen: 24
2a04:9a00:1110::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:c3:78:e1:27:c5:c6:1c:9e:18:82:86:e6:da:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Jan 2 07:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f370c519241dfadbcdcc6d043df62a6d18db48c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4a:ad:fe:d3:c8:09:b3:8a:6d:f9:70:09:63:
54:f2:97:03:93:24:fe:54:e1:88:28:1a:70:bf:f8:
13:90:60:99:7f:96:15:82:a9:a6:d4:75:d1:b7:33:
58:10:74:51:cf:6d:4b:e3:99:22:43:59:ec:ad:10:
76:7c:3c:b8:a2:a4:5c:c5:90:47:4b:8a:a2:62:0d:
f5:9a:5e:b8:5c:28:47:3a:18:c6:c2:c4:e1:96:a8:
ad:9c:19:88:5b:a4:a2:c7:e8:3b:e4:f8:56:3c:0f:
7c:85:89:62:96:bb:e1:5c:2a:4f:ea:d1:88:ce:dd:
d4:aa:f2:1b:9c:1c:b5:61:05:be:83:a6:7b:b3:2d:
ab:58:25:a9:d4:ef:15:15:1a:ad:36:8f:9f:2d:19:
74:8b:d9:7b:33:39:c4:ba:34:93:c3:62:89:4f:ff:
7b:41:71:4d:c3:0a:5a:d8:ac:66:a1:ee:3d:f3:5d:
47:9c:1f:69:36:f6:3a:f5:29:7b:47:33:8f:c2:81:
f6:62:ea:b7:71:67:c5:e5:ad:31:42:f5:4d:6b:1b:
5e:e8:7c:ea:d8:b7:8c:52:04:35:98:f0:d8:9b:04:
9b:ec:22:40:44:92:b1:75:99:b0:eb:5f:26:c2:d3:
24:78:6d:32:7b:d1:b6:9d:17:6d:b8:19:18:1a:1e:
a1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:37:0C:51:92:41:DF:AD:BC:DC:C6:D0:43:DF:62:A6:D1:8D:B4:8C
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/TzcMUZJB36283MbQQ99iptGNtIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.181.62.0/23
IPv6:
2a04:9a00:1110::/46
Signature Algorithm: sha256WithRSAEncryption
5d:ca:00:9e:bb:6b:d2:7e:dd:62:aa:24:9d:57:a5:4e:bf:dc:
dd:b7:4a:29:f8:71:87:b3:00:af:16:64:48:6f:b2:06:dd:7a:
29:78:87:7e:9e:0f:31:88:73:47:53:08:4c:e6:fb:86:5a:a7:
e2:49:a8:7d:00:10:9a:3a:8e:a0:16:b5:e5:84:cf:48:11:bd:
14:39:56:81:54:ee:11:df:b0:87:34:02:fa:ca:ce:0c:60:a9:
07:b1:e5:6f:de:3e:aa:d8:73:a4:10:ac:38:3b:5a:db:48:00:
40:2e:5b:84:31:7e:84:1f:23:06:ea:25:37:92:39:ed:66:7f:
08:40:5f:33:e5:86:4d:89:62:87:05:11:a4:f2:7f:1d:35:54:
60:61:ff:20:af:a7:13:60:72:0b:88:13:13:2e:5b:ad:1f:60:
19:8a:e3:79:31:48:6e:b6:e0:0f:7d:59:48:e1:32:85:ba:87:
1b:00:02:02:18:c1:cc:18:fd:ca:d8:de:9e:e1:92:46:76:e3:
f2:e6:0f:a5:ec:b2:8b:78:e7:94:f0:91:89:77:75:f0:3e:fd:
a4:9e:bd:82:5d:4f:58:91:ab:0b:93:f7:8e:01:94:6f:89:2a:
3c:58:52:e1:1f:95:2c:de:f3:b4:8b:4f:49:53:6f:7f:22:59:
3d:7d:83:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:27 2025 by rpki-client