Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/tuawZTEX7vHBTQMJyQg0WD-oypg.roa
File: tuawZTEX7vHBTQMJyQg0WD-oypg.roa (raw, json)
Hash identifier: IFKGL2W7O7px/Tqsp660BBZcbUWDZWgLugycTaSmqvQ=
Subject key identifier: B6:E6:B0:65:31:17:EE:F1:C1:4D:03:09:C9:08:34:58:3F:A8:CA:98
Certificate issuer: /CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Certificate serial: 019427B469C0858C517B59FA41FBB551DF39
Authority key identifier: 97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/tuawZTEX7vHBTQMJyQg0WD-oypg.roa
Signing time: Thu 02 Jan 2025 15:48:42 +0000
ROA not before: Thu 02 Jan 2025 15:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209854
IP address blocks: 2.59.202.0/24 maxlen: 24
2.59.203.0/24 maxlen: 24
85.209.4.0/24 maxlen: 24
85.209.6.0/24 maxlen: 24
85.209.7.0/24 maxlen: 24
88.218.150.0/24 maxlen: 24
88.218.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 15:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:69:c0:85:8c:51:7b:59:fa:41:fb:b5:51:df:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Validity
Not Before: Jan 2 15:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6e6b0653117eef1c14d0309c90834583fa8ca98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:4e:b1:da:b5:3c:5f:2c:a5:b1:37:f0:af:d6:
f7:e4:a7:48:66:62:e4:1c:0a:13:fe:62:40:a8:e8:
a0:72:33:eb:f6:bf:1a:0e:b9:2a:3e:a6:6d:13:c1:
c0:17:18:ad:79:7c:73:1e:85:91:68:c8:84:a0:db:
49:fe:7a:d3:50:9a:62:7a:55:66:d3:a7:9c:df:5a:
0a:c2:ec:2f:f0:f1:c8:ae:aa:59:a3:03:da:f8:13:
10:2c:d9:54:81:21:0e:9c:c9:3d:78:b5:d4:8d:ca:
4c:d8:73:6e:18:d8:c8:27:94:00:54:f6:89:76:4e:
2a:52:6b:8d:10:da:7a:23:32:22:e1:86:f3:15:a9:
3a:c0:ce:1b:59:70:22:77:13:39:a1:3c:03:6d:28:
48:64:00:f3:49:62:50:c5:96:60:b0:c9:b7:7f:f4:
79:4f:0c:63:ef:84:91:0a:52:f7:19:aa:93:e5:6a:
2d:6e:13:6d:9c:cc:14:dc:88:48:6f:9d:ed:3b:12:
41:74:b4:4c:f4:8f:cd:1d:62:17:18:d6:0c:a3:c1:
ab:b4:63:69:e5:93:03:8b:67:0f:1b:26:46:6d:d3:
01:9b:77:f8:d7:19:7b:68:0d:33:bf:0b:15:05:9c:
d5:2a:00:e6:3e:5e:e3:f2:0a:22:bb:39:63:86:16:
70:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E6:B0:65:31:17:EE:F1:C1:4D:03:09:C9:08:34:58:3F:A8:CA:98
X509v3 Authority Key Identifier:
keyid:97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/tuawZTEX7vHBTQMJyQg0WD-oypg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.202.0/23
85.209.4.0/24
85.209.6.0/23
88.218.150.0/23
Signature Algorithm: sha256WithRSAEncryption
67:c1:e0:8c:1d:e6:06:6c:47:e2:27:ee:0e:9d:2a:77:bf:57:
96:4b:2a:40:6a:20:b8:66:4d:e6:a7:b7:45:75:a5:77:a4:28:
3a:c1:7e:30:bb:0e:72:53:12:42:58:11:ae:04:f6:81:3d:af:
7d:22:95:9d:f9:23:88:b1:c8:4f:3d:a2:3d:e9:57:ca:89:b4:
10:ae:bb:8b:87:22:ce:a7:41:0f:23:ba:e1:79:f4:90:9c:72:
45:36:38:71:ca:52:48:8a:78:c9:6c:f1:b1:62:bf:fe:97:84:
8c:f4:27:d3:40:9d:cc:60:8f:88:ba:f3:be:06:85:02:0a:aa:
17:37:25:94:7a:9e:9d:2f:de:ba:51:02:3f:d5:e3:28:6b:fa:
92:38:8f:5d:19:7b:d2:5d:53:bf:5d:b7:93:f5:0a:08:99:f1:
d8:d0:b9:4a:f5:5a:99:20:b6:98:ec:1b:2c:17:9c:20:87:fc:
77:26:b4:6d:fd:9b:1c:5e:df:8b:b1:e6:15:b9:e8:32:c2:3b:
83:10:9b:f1:2d:bf:f0:7d:88:ff:86:b1:ed:d7:1e:55:8b:25:
84:57:26:a5:87:c0:75:7e:ac:00:48:70:d1:40:fc:39:cd:e9:
7f:c5:8b:f8:a9:3e:72:63:19:88:cc:20:a8:c4:11:29:7e:ab:
7a:77:72:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:02:21 2025 by rpki-client