Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/TpzFnk7W-OsBRIAAr3dm_mueJxU.roa
File: TpzFnk7W-OsBRIAAr3dm_mueJxU.roa (raw, json)
Hash identifier: nkfZhHTodmONOvq1O5TW8ZfGR4EOeCS+8IrKi31DjPQ=
Subject key identifier: 4E:9C:C5:9E:4E:D6:F8:EB:01:44:80:00:AF:77:66:FE:6B:9E:27:15
Certificate issuer: /CN=ec3a633ef2c08251a58603562e56aa6efa93ec25
Certificate serial: 019423698969450766BC60DBB5B4D3729623
Authority key identifier: EC:3A:63:3E:F2:C0:82:51:A5:86:03:56:2E:56:AA:6E:FA:93:EC:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7DpjPvLAglGlhgNWLlaqbvqT7CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/TpzFnk7W-OsBRIAAr3dm_mueJxU.roa
Signing time: Wed 01 Jan 2025 19:48:26 +0000
ROA not before: Wed 01 Jan 2025 19:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49539
IP address blocks: 212.106.73.0/24 maxlen: 24
217.78.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7DpjPvLAglGlhgNWLlaqbvqT7CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 01:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:89:69:45:07:66:bc:60:db:b5:b4:d3:72:96:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec3a633ef2c08251a58603562e56aa6efa93ec25
Validity
Not Before: Jan 1 19:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e9cc59e4ed6f8eb01448000af7766fe6b9e2715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:13:3e:51:d2:72:6c:56:4f:ca:5f:14:87:14:
26:f6:35:64:e3:f3:ea:17:6d:bf:ce:a0:be:98:ac:
e5:13:0d:0d:6f:87:26:ce:00:82:c6:5c:ee:54:47:
8f:0f:73:7f:10:0c:97:1c:ff:1d:f5:d6:05:84:c7:
af:e1:42:bb:8f:fd:ef:43:ca:47:80:7c:13:f8:58:
ce:81:26:67:04:4f:54:6b:43:a8:57:92:40:39:be:
a8:49:1b:c8:bd:75:9d:9e:5c:67:89:6b:9a:83:7f:
8b:32:1d:3d:5d:0f:67:97:3f:69:b5:55:d7:5a:cb:
4b:5f:e5:88:08:e0:8a:8f:b0:95:a5:e7:f5:79:de:
aa:cd:d6:f2:a8:30:47:bf:bf:41:be:cb:cf:21:33:
eb:c6:d8:a4:9f:0a:e3:d1:71:60:78:bb:c7:c1:f7:
97:69:a4:e4:2a:a8:d6:4e:b6:21:9e:e8:8d:14:59:
ab:98:73:73:6b:65:58:5e:88:40:c5:b5:42:e7:2f:
58:cd:e5:21:f5:73:c7:56:0e:5c:55:89:16:a8:8e:
62:cc:ef:f0:23:2c:c0:69:09:a0:33:93:62:ba:38:
16:ee:5f:12:11:1b:5c:37:18:7a:b1:d1:16:c8:af:
32:31:fa:75:7a:2f:b1:b6:75:82:58:4d:eb:a1:a0:
8f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9C:C5:9E:4E:D6:F8:EB:01:44:80:00:AF:77:66:FE:6B:9E:27:15
X509v3 Authority Key Identifier:
keyid:EC:3A:63:3E:F2:C0:82:51:A5:86:03:56:2E:56:AA:6E:FA:93:EC:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DpjPvLAglGlhgNWLlaqbvqT7CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/TpzFnk7W-OsBRIAAr3dm_mueJxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.106.73.0/24
217.78.56.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:33:11:3a:e9:e8:e6:dc:9d:07:13:34:84:08:38:40:4d:fd:
b0:d1:cf:9a:04:01:9d:96:0c:e6:bb:80:76:80:91:9c:86:30:
79:df:a8:6f:fd:3f:d0:a6:ee:c8:5c:b4:f1:06:ee:77:28:17:
d2:15:a2:32:2d:3b:a1:76:9f:06:67:fe:f4:b7:5a:d7:6c:f7:
fe:2d:4a:bc:45:ce:80:76:69:33:11:0d:7e:ae:a2:40:44:8b:
f6:01:5b:a8:78:e0:c7:e0:76:56:c5:3d:73:f2:bf:23:a1:77:
ea:9e:c8:44:8a:29:ca:5c:18:ad:af:f1:71:37:e2:14:cf:b0:
8c:e4:d3:08:e3:5b:1b:e2:59:41:c6:48:71:d7:92:9f:3a:5b:
71:e8:1d:55:b5:86:12:70:75:13:df:cb:de:42:f5:06:8f:68:
19:9a:f6:66:1e:da:15:a8:a1:06:92:66:fe:f2:27:6c:23:0e:
39:5d:ba:55:2c:c6:42:e1:2c:a5:8c:88:85:25:24:ff:3b:a5:
2e:32:e3:15:a0:df:23:2a:00:22:34:f5:ad:4d:b2:3d:9c:64:
a8:6b:c9:76:3d:e1:d2:ee:d3:55:ed:74:eb:5b:53:57:1f:44:
4c:a0:c6:89:fe:2a:56:97:34:b4:bd:86:c5:2c:fa:f5:69:20:
e8:c1:b2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 10:54:27 2025 by rpki-client