Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/tB98Odb5xySPuatQxtBYr1TkuKY.roa
File: tB98Odb5xySPuatQxtBYr1TkuKY.roa (raw, json)
Hash identifier: jqy1Pxj3jnhl57ZRWHAF9knEyjWAZ+BFSBls3RcvCpA=
Subject key identifier: B4:1F:7C:39:D6:F9:C7:24:8F:B9:AB:50:C6:D0:58:AF:54:E4:B8:A6
Certificate issuer: /CN=ecba774ba82fb0427f766e783e770f4bd96416f9
Certificate serial: 0194258F5531CE5B69DDFE2B0BE31C3AADFC
Authority key identifier: EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/tB98Odb5xySPuatQxtBYr1TkuKY.roa
Signing time: Thu 02 Jan 2025 05:48:57 +0000
ROA not before: Thu 02 Jan 2025 05:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51007
IP address blocks: 80.84.134.0/23 maxlen: 23
80.84.135.0/24 maxlen: 24
80.84.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 02:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:55:31:ce:5b:69:dd:fe:2b:0b:e3:1c:3a:ad:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecba774ba82fb0427f766e783e770f4bd96416f9
Validity
Not Before: Jan 2 05:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b41f7c39d6f9c7248fb9ab50c6d058af54e4b8a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:06:33:a0:6d:6f:fc:28:1a:ce:aa:fb:f8:5a:
88:d4:72:c2:d0:8c:4f:be:3b:df:15:87:d8:5a:90:
15:6c:d9:c4:0e:fa:7e:12:dd:4f:74:3b:ac:7b:cb:
25:ce:fb:b7:b4:00:25:6d:8a:34:b5:32:1a:8b:e4:
8e:2d:3a:c4:86:e1:b5:25:19:7c:12:df:4c:bf:4b:
1c:11:29:9a:79:76:e6:76:e0:da:c3:16:24:4d:9d:
7b:27:b3:6b:ff:73:a9:a9:27:2b:f2:24:a4:09:60:
63:13:b4:ae:39:80:95:df:f8:66:15:c4:30:7f:7f:
76:1b:6a:8f:27:3b:e0:67:35:1f:ca:e4:35:78:a7:
2a:4b:5a:6b:29:bb:5e:61:8d:44:7a:3d:a6:6d:8d:
c4:0d:9b:14:8b:1d:09:07:1c:dc:34:8a:5d:7e:27:
f9:10:f7:87:26:63:bf:6b:aa:c9:6d:c2:3d:57:c7:
f8:57:b0:d9:28:9c:1e:34:64:d3:36:5d:c5:5d:24:
b6:cc:b5:d8:c7:22:e8:99:6d:4d:89:58:5c:62:b1:
79:52:c1:5f:2e:e5:e5:ec:b1:78:a2:40:e4:f6:40:
8f:2b:31:cc:3d:88:33:06:3c:f0:09:a4:93:1b:ac:
0b:90:c5:08:f9:95:dc:cb:ce:1c:b9:5d:87:e6:cc:
60:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:1F:7C:39:D6:F9:C7:24:8F:B9:AB:50:C6:D0:58:AF:54:E4:B8:A6
X509v3 Authority Key Identifier:
keyid:EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/tB98Odb5xySPuatQxtBYr1TkuKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.84.134.0/23
80.84.148.0/24
Signature Algorithm: sha256WithRSAEncryption
42:09:22:11:4f:c2:c4:37:b4:b0:51:d0:14:e5:30:7c:44:cb:
a7:57:3f:e3:84:85:67:fb:63:59:67:c7:8c:0c:96:7e:f6:7b:
dd:b9:92:37:f8:d1:79:33:bd:21:bb:1e:82:6a:3d:83:31:5c:
7c:6a:11:14:ea:8d:8f:9b:74:20:6b:c0:9b:d2:81:a0:50:b5:
70:79:62:8b:bc:25:db:97:ca:06:a5:35:15:dd:50:ad:a7:b8:
33:5c:35:77:52:02:1a:55:6f:47:9b:ad:b0:d3:9d:46:e8:84:
55:ec:52:31:ca:00:8a:78:69:e1:b9:9f:61:8a:c2:91:96:66:
c6:ac:d8:57:ec:fa:c7:33:24:1c:74:00:f5:c2:a5:d1:1c:42:
06:94:54:62:8b:5e:d5:43:cd:d8:e3:56:39:47:4a:4f:e7:49:
eb:19:a4:50:fa:7b:96:80:ce:12:fc:ed:8e:eb:18:3a:a8:cf:
33:6d:bc:12:88:91:e8:30:0d:d5:50:1b:57:d4:c4:f3:e3:0c:
b0:13:7a:db:e9:a5:23:50:5a:8b:5d:89:64:88:7f:2f:e5:d6:
03:fb:e4:9a:7d:83:48:e0:99:62:ec:16:db:6a:d7:24:48:a8:
78:9b:e9:04:fc:60:23:3b:fb:23:37:6c:12:f7:f3:b6:2d:be:
65:33:45:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:16:43 2025 by rpki-client