Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/TyV9-G3EmDmxesG6kytX3N3gsKY.roa
File: TyV9-G3EmDmxesG6kytX3N3gsKY.roa (raw, json)
Hash identifier: 5ZTWb+G4Smvs/SR1cTUZYD6dnJkngJRJoyw2KmVLYwM=
Subject key identifier: 4F:25:7D:F8:6D:C4:98:39:B1:7A:C1:BA:93:2B:57:DC:DD:E0:B0:A6
Certificate issuer: /CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
Certificate serial: 01953D94892F1536DF47CAEA35EA6ED18987
Authority key identifier: B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/TyV9-G3EmDmxesG6kytX3N3gsKY.roa
Signing time: Tue 25 Feb 2025 14:48:19 +0000
ROA not before: Tue 25 Feb 2025 14:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208149
IP address blocks: 109.68.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3d:94:89:2f:15:36:df:47:ca:ea:35:ea:6e:d1:89:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
Validity
Not Before: Feb 25 14:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f257df86dc49839b17ac1ba932b57dcdde0b0a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dc:28:3b:48:d1:5c:96:d2:31:ca:d2:3b:32:
e6:7d:60:d4:c0:45:d9:63:24:41:2a:80:d1:2e:c9:
50:8a:ec:fd:b1:f6:2f:77:cd:ea:a1:91:64:1f:41:
d8:42:f7:c6:dd:e2:f1:49:4b:c5:64:20:2f:f9:11:
e5:48:6c:20:4a:26:05:aa:17:6f:ac:55:57:f3:5d:
49:e2:cd:00:a0:d0:6c:57:e8:ab:b6:fa:b2:af:6b:
29:5d:61:c9:25:4c:4a:ab:be:b4:f4:40:ff:d8:e9:
42:06:6f:df:dd:fc:70:d3:9c:79:0b:fe:d2:7a:11:
1e:22:ac:a0:7c:f6:26:f0:9f:fb:e4:a0:14:0d:7d:
5d:b7:d8:fa:33:13:9d:d5:9f:9a:7b:3e:a9:1f:ba:
b6:ff:0c:19:56:83:e7:36:d3:41:f7:26:93:8c:79:
66:f4:6a:8a:81:8b:05:48:15:0b:4f:a7:bd:4a:b1:
d1:73:00:c9:7c:a3:ce:02:a7:fc:77:f8:43:84:16:
f2:86:84:c6:a1:08:b2:61:66:83:b9:99:25:ad:44:
99:44:3d:95:bc:86:50:60:10:6f:9c:33:ec:4b:96:
a2:75:5c:c0:8b:00:80:7b:b6:f9:54:16:74:a3:c4:
bd:59:98:b0:66:11:b9:ed:8e:12:35:ac:de:de:17:
ac:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:25:7D:F8:6D:C4:98:39:B1:7A:C1:BA:93:2B:57:DC:DD:E0:B0:A6
X509v3 Authority Key Identifier:
keyid:B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/TyV9-G3EmDmxesG6kytX3N3gsKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.68.151.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:d0:19:01:8a:47:da:36:5a:03:0e:6d:b9:34:47:3d:96:68:
f6:1f:a3:ba:4d:44:43:16:03:d5:cc:56:d7:b5:08:7b:e3:d2:
5a:69:77:53:9f:67:7d:59:f2:c2:8a:74:4f:03:d2:0e:37:54:
d2:51:58:e3:90:e4:35:18:74:9f:44:1f:eb:a2:ba:95:1f:80:
5f:05:02:46:b0:a5:87:d2:18:d3:69:b4:7b:81:2c:17:b2:0f:
ea:b5:f3:4e:13:a9:f1:f2:ed:77:1e:e3:73:d0:74:5a:b9:07:
dc:e9:a5:aa:89:69:30:c5:dc:ac:d0:e2:93:9a:02:9f:2a:2c:
17:cd:70:62:91:ad:72:cc:f3:64:d5:93:7f:dd:e3:8c:53:86:
6f:fd:0e:75:b0:6c:3b:80:f9:83:d7:3d:61:1a:97:74:42:2a:
64:aa:60:c2:b6:f1:41:8c:c7:08:07:f2:7f:72:e0:e4:b1:81:
3c:18:f6:b1:d7:da:8e:3d:38:be:11:0f:2a:6f:ec:ed:dc:4a:
d3:16:e3:7b:75:68:fd:57:f5:c7:03:e0:74:62:46:f9:ec:f6:
b0:ee:d9:3e:e6:e4:32:bd:22:4c:da:f0:19:be:7a:56:65:3f:
6c:ea:9d:5e:af:56:b8:1d:a5:6e:fe:fc:34:aa:1a:54:e0:e1:
1c:b7:a0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 19:59:01 2025 by rpki-client