Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/TYwZFqNPf6Qsrw0GmPrjKEpe21A.roa
File: TYwZFqNPf6Qsrw0GmPrjKEpe21A.roa (raw, json)
Hash identifier: CZIXGgcAUIozY1tQFUYLHdOZbi+azarBS/OuaFJStXY=
Subject key identifier: 4D:8C:19:16:A3:4F:7F:A4:2C:AF:0D:06:98:FA:E3:28:4A:5E:DB:50
Certificate issuer: /CN=5e46bf1ff816be0ba4c621712342330a9fad8bda
Certificate serial: 01942521EF7E25CC14DC1153DBB792BC3A57
Authority key identifier: 5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/TYwZFqNPf6Qsrw0GmPrjKEpe21A.roa
Signing time: Thu 02 Jan 2025 03:49:28 +0000
ROA not before: Thu 02 Jan 2025 03:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 94.128.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 06:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:ef:7e:25:cc:14:dc:11:53:db:b7:92:bc:3a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e46bf1ff816be0ba4c621712342330a9fad8bda
Validity
Not Before: Jan 2 03:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d8c1916a34f7fa42caf0d0698fae3284a5edb50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3d:d4:72:7b:f1:35:42:85:7a:68:a4:38:18:
63:bd:04:24:f3:22:d8:72:23:d3:5c:5a:96:9b:90:
96:1a:e0:88:78:7c:d0:4a:26:da:5c:ca:18:10:32:
0f:69:1c:64:60:cf:87:a8:2a:b1:99:19:8e:87:0d:
eb:7d:71:f1:a9:f0:d2:25:08:19:e1:13:58:63:58:
59:d4:e3:b6:31:eb:dc:ff:59:f2:16:90:69:79:1e:
20:de:c3:89:05:c8:82:15:3a:9b:08:07:89:11:69:
19:4e:d6:d2:59:80:10:eb:ef:ec:fc:66:0c:a3:8f:
82:be:7e:b6:70:7c:5f:58:28:17:03:5f:e7:05:53:
3e:36:11:0b:1f:00:e5:92:d8:9b:a4:bf:df:5e:e6:
d5:af:da:d7:29:7a:5e:4f:c5:7b:0a:b3:cd:df:2b:
eb:23:b9:37:03:c6:bd:73:c9:87:05:94:c5:ab:b0:
ef:11:e5:dd:9c:b9:85:14:9c:a5:85:26:0e:19:ea:
9c:40:55:fc:52:69:f2:64:19:f6:a3:a7:d1:90:06:
67:44:f5:ef:89:58:a6:93:1e:ae:9d:06:1d:8c:81:
fa:26:c0:7c:3d:7a:bf:5a:d9:ce:54:5a:94:56:f9:
2d:11:36:b1:9d:17:3c:9a:65:c6:9e:e1:84:15:ce:
68:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:8C:19:16:A3:4F:7F:A4:2C:AF:0D:06:98:FA:E3:28:4A:5E:DB:50
X509v3 Authority Key Identifier:
keyid:5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/TYwZFqNPf6Qsrw0GmPrjKEpe21A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.128.1.0/24
Signature Algorithm: sha256WithRSAEncryption
79:84:47:a0:be:63:64:91:92:16:c1:8c:8a:99:af:43:71:37:
72:03:b6:df:5d:e6:ff:1e:48:1c:f3:73:4c:2e:ad:22:a5:00:
8c:81:f2:a9:85:3b:e0:44:60:b5:6e:6d:6a:83:7a:85:27:f9:
63:69:6f:3f:17:5f:9c:07:8d:78:5f:56:ca:7f:f4:b3:0c:1b:
d4:16:07:1f:47:c8:55:e9:a0:26:8d:f8:d0:c4:36:fd:ba:0a:
5d:5b:23:5f:68:45:82:85:90:b2:64:15:8c:91:46:29:a4:04:
69:50:e8:c4:1e:82:73:59:19:49:c2:af:d1:ff:21:6a:aa:ce:
20:df:a0:99:bf:12:6a:f7:f4:4a:04:33:d6:d2:b7:52:bb:84:
28:0e:ec:df:ac:30:55:5b:1e:2b:b1:56:92:aa:6f:13:d4:51:
48:22:86:ed:40:3c:13:f1:a3:71:9f:d0:ab:27:dd:bf:1c:9c:
b6:32:fb:ab:57:ea:5e:6d:c3:67:d9:fd:5c:9c:8d:1a:8e:4f:
5c:40:64:c8:c3:d9:e7:1a:18:d3:18:b6:41:cd:39:69:6e:af:
d3:97:43:47:d2:e2:f3:85:fb:68:aa:55:0a:28:62:8e:74:81:
aa:77:a4:44:81:28:ec:1b:fd:27:9e:f0:18:7c:e9:ea:8f:fb:
89:e0:f6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:50:50 2025 by rpki-client