Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/TemBIWJC83E6ZBcD9aVXyfzHtDQ.roa
File: TemBIWJC83E6ZBcD9aVXyfzHtDQ.roa (raw, json)
Hash identifier: PdOHyqGayofqAy5ey2SsU9lGwEKOsW/D2B70TpKPvVM=
Subject key identifier: 4D:E9:81:21:62:42:F3:71:3A:64:17:03:F5:A5:57:C9:FC:C7:B4:34
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 01941F8CC5C78212349D5011EE28E952186F
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/TemBIWJC83E6ZBcD9aVXyfzHtDQ.roa
Signing time: Wed 01 Jan 2025 01:48:26 +0000
ROA not before: Wed 01 Jan 2025 01:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210097
IP address blocks: 81.22.40.0/22 maxlen: 24
185.179.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:c5:c7:82:12:34:9d:50:11:ee:28:e9:52:18:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 1 01:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4de981216242f3713a641703f5a557c9fcc7b434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:34:4b:4c:07:27:35:03:19:96:bf:bb:f1:27:
2c:ed:c9:9a:2b:e2:ec:41:c7:59:2a:7e:03:15:db:
a6:3a:8c:05:36:83:a9:3d:7f:c6:cf:7e:fe:0b:01:
25:d2:8d:03:34:2b:9a:08:cf:ec:44:fb:3f:25:d1:
f2:e9:26:ad:db:74:bd:d9:1b:65:e5:1c:58:3c:40:
8d:9d:49:63:f8:9c:3d:c7:9c:d1:26:8b:c8:4b:5e:
8d:0a:e7:31:31:86:65:05:0e:a7:55:34:e5:28:c6:
44:47:ef:e6:09:3b:c6:8e:95:6c:68:8b:0f:8f:d7:
86:5c:48:e9:f1:b8:69:7b:d7:c7:62:52:fc:0b:73:
1a:d9:e8:ed:16:de:4e:d1:a9:2d:de:73:0a:0c:6c:
4f:66:65:8c:7d:ae:5a:53:55:53:26:55:d8:0f:30:
62:b1:36:ea:11:54:af:99:6a:6c:f5:4f:a1:14:95:
b4:39:e2:e3:8f:b5:d4:8e:d1:fa:81:2e:92:38:d5:
a9:5f:df:e0:b2:2a:ba:bc:02:79:0d:e8:68:70:f6:
5b:1d:3b:3b:d6:40:2c:c9:f6:69:1e:73:f3:ce:95:
09:2d:3a:eb:1b:a1:f6:6f:dd:98:e5:cf:78:2e:e1:
76:a7:7c:e0:10:15:cd:0d:cc:cf:75:bc:d6:96:e1:
53:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E9:81:21:62:42:F3:71:3A:64:17:03:F5:A5:57:C9:FC:C7:B4:34
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/TemBIWJC83E6ZBcD9aVXyfzHtDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.40.0/22
185.179.244.0/24
Signature Algorithm: sha256WithRSAEncryption
72:fa:ec:3a:ba:8d:5b:8f:47:73:c0:c4:c3:3e:9f:30:5e:55:
a1:d6:e6:d7:b4:c7:13:d7:6c:5c:45:5b:f3:c8:a7:bd:c1:b2:
2c:b1:7c:7a:bc:fb:a6:28:80:b3:22:76:27:58:01:bf:3e:18:
d7:e6:6d:c9:e3:a6:1d:41:0a:45:48:09:54:2b:38:ef:e9:e8:
21:bc:80:99:44:86:e2:06:44:eb:b7:16:27:b9:08:53:d9:14:
6c:9e:b7:70:ad:d5:00:12:df:a7:b2:c6:90:65:e3:82:65:ab:
3e:5d:86:02:af:93:bb:52:4d:f0:bd:02:18:00:eb:66:51:b8:
45:48:0e:b4:7a:57:44:aa:5e:7e:b9:ea:a2:53:ef:9e:9d:98:
08:48:11:7c:45:a8:ab:59:18:e0:45:99:90:22:d6:97:0e:aa:
7a:ea:c6:2e:19:08:ac:04:db:8c:4e:48:11:77:fd:c4:10:49:
63:04:9e:1c:0f:8d:3e:f6:1a:98:a5:28:ef:ed:db:ad:32:29:
a0:01:a7:47:31:ba:c3:b7:41:dd:24:a9:40:9b:25:be:3b:c2:
11:db:65:9a:89:05:b1:c1:65:dc:0a:84:da:24:85:fb:97:0e:
16:15:99:73:6a:4e:c0:e7:d4:d5:79:9c:75:40:d9:07:4e:ea:
80:52:22:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:39:39 2025 by rpki-client