Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/tdG4gwbiCDTl2DZU4EFrqi-57Fc.roa
File: tdG4gwbiCDTl2DZU4EFrqi-57Fc.roa (raw, json)
Hash identifier: HXWAwqtUcnHFWl+ei5dmWCUQV5Bz5IiYmO9iAB6ydxI=
Subject key identifier: B5:D1:B8:83:06:E2:08:34:E5:D8:36:54:E0:41:6B:AA:2F:B9:EC:57
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 019422FC11A713BEB9C68FBAEF5AC30D48D5
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/tdG4gwbiCDTl2DZU4EFrqi-57Fc.roa
Signing time: Wed 01 Jan 2025 17:48:52 +0000
ROA not before: Wed 01 Jan 2025 17:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135402
IP address blocks: 89.185.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:11:a7:13:be:b9:c6:8f:ba:ef:5a:c3:0d:48:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jan 1 17:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5d1b88306e20834e5d83654e0416baa2fb9ec57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7f:f8:03:4d:e0:dd:81:be:47:39:87:39:bf:
f8:03:74:ad:5f:1e:a4:01:2b:73:cb:04:40:06:78:
52:ce:42:55:dc:00:79:e8:f6:40:58:a2:72:d6:31:
fe:16:97:46:34:97:2c:47:29:58:8c:ed:6a:33:ea:
94:49:e5:3d:4f:64:a7:53:01:2c:61:f8:d7:e5:54:
df:73:b6:c3:c5:22:0e:c6:b9:20:d5:1f:d3:68:08:
2a:2f:c8:4d:05:32:16:46:a0:a2:ed:82:b7:30:e7:
d9:1a:9d:c7:48:7a:d5:f2:4b:2e:06:5f:05:9f:4c:
f4:ba:a2:6d:52:48:bc:90:bd:b0:c0:6b:61:cf:9d:
ae:ca:72:0c:be:ac:49:29:b8:24:9e:93:0f:4d:89:
43:5b:dc:60:0c:02:b2:a2:e9:f5:b1:c9:85:68:36:
2c:0f:63:3b:f1:61:da:22:15:8d:bf:a0:14:2b:9b:
b0:e7:dc:d5:2a:74:ee:07:98:f9:47:d5:e5:09:1f:
b2:fe:88:51:78:d1:2b:78:c7:12:bb:87:98:59:85:
4f:cf:7b:9e:f9:d9:75:9b:a8:b1:96:ab:91:0d:99:
d6:e6:1b:2f:cc:32:c8:1e:94:e8:e6:19:ac:14:92:
ca:eb:38:ba:59:6f:a0:55:c3:ce:77:ca:ab:33:2f:
2c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D1:B8:83:06:E2:08:34:E5:D8:36:54:E0:41:6B:AA:2F:B9:EC:57
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/tdG4gwbiCDTl2DZU4EFrqi-57Fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.22.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:fc:09:75:75:f1:ea:4b:c2:eb:e3:37:b7:b0:d1:c9:b4:6a:
87:f1:fa:f1:3d:68:7e:af:16:64:97:4c:a5:37:d0:5f:7b:b5:
e9:84:a4:40:ba:8a:f9:ec:2a:91:fd:e0:7f:92:4d:e4:e2:c0:
f3:7e:1c:cc:81:60:39:3b:6b:ce:ed:49:7e:29:b9:73:70:96:
8a:bb:74:c5:85:9e:8e:75:02:d3:dc:f4:b6:67:ad:bf:6c:09:
74:23:94:70:45:1a:38:d6:e0:1d:3f:44:52:21:d3:9e:43:65:
1c:8d:28:f2:15:d0:ce:e8:e3:71:f4:36:ba:06:7f:b8:99:43:
3f:2a:89:ea:78:09:e6:28:eb:c1:08:b2:c7:b4:3b:fd:dd:7c:
44:f6:46:28:11:e2:a5:41:37:88:4b:c3:ae:47:44:a9:77:33:
68:86:a6:41:e0:59:3a:97:51:8d:46:85:6e:68:7e:7e:bc:be:
76:4a:3a:3c:f6:a3:b8:a9:40:80:41:27:0f:ab:70:5a:45:d5:
ba:c5:27:42:9e:63:47:44:0c:f9:41:b8:e0:51:4d:a2:3e:23:
7a:bf:5d:5b:a3:80:10:93:ba:db:a1:f0:89:f3:e6:79:43:a4:
e0:ad:d2:fd:f3:2d:80:70:c0:5c:aa:09:f5:fa:d8:8f:9f:8c:
bd:11:3f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:34:44 2025 by rpki-client