Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/TOBAVscU9VJTwLsUhLP0tAjAQi4.roa
File: TOBAVscU9VJTwLsUhLP0tAjAQi4.roa (raw, json)
Hash identifier: IKzhkAp3S93tfIC5ceCBznZ4xMgoDfcxElkoH29JQ+Y=
Subject key identifier: 4C:E0:40:56:C7:14:F5:52:53:C0:BB:14:84:B3:F4:B4:08:C0:42:2E
Certificate issuer: /CN=1a79a0ac3312c1653f300b04510d9bf2c9c2a55f
Certificate serial: 0194206869E76E22B6A06340963933F5909F
Authority key identifier: 1A:79:A0:AC:33:12:C1:65:3F:30:0B:04:51:0D:9B:F2:C9:C2:A5:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/TOBAVscU9VJTwLsUhLP0tAjAQi4.roa
Signing time: Wed 01 Jan 2025 05:48:21 +0000
ROA not before: Wed 01 Jan 2025 05:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 680
IP address blocks: 194.76.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:69:e7:6e:22:b6:a0:63:40:96:39:33:f5:90:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a79a0ac3312c1653f300b04510d9bf2c9c2a55f
Validity
Not Before: Jan 1 05:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ce04056c714f55253c0bb1484b3f4b408c0422e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3a:74:6c:c7:32:b6:05:45:e4:fb:a1:ff:0b:
a0:6c:73:05:06:25:f1:5c:c7:bd:eb:b7:ea:da:e5:
09:53:18:4b:69:0f:b8:f6:e1:41:4e:f6:5e:45:8e:
85:0b:63:98:1a:8a:f7:cc:e6:f6:53:58:1e:a2:7c:
b4:e6:09:ad:93:29:38:e8:6b:ce:3a:32:13:43:28:
16:a9:16:87:62:44:40:f0:b1:58:04:88:20:83:be:
a6:d2:4c:12:cb:51:1d:bf:26:f6:50:2b:2e:96:cb:
cf:91:f9:21:b1:58:1c:19:88:3b:5e:3b:26:ea:d8:
57:2b:f4:47:e5:5a:7e:a4:97:df:e4:90:3c:7b:31:
e0:26:77:0b:b9:e8:04:5b:f7:bb:4d:ad:7e:28:d5:
a5:16:7f:aa:a0:7e:a4:20:5e:13:12:17:b5:28:c3:
9b:c4:92:82:69:dc:14:6f:d6:99:9b:44:b7:b3:5e:
ac:8f:3f:77:0b:c8:4b:1a:1b:7a:3c:13:bc:52:75:
cf:8d:06:35:b4:d2:7c:17:b6:f7:34:bb:cc:c1:31:
ce:3c:97:d6:e9:82:11:e4:a7:17:02:a4:38:4a:18:
9e:4d:fd:7a:ce:54:c8:02:07:86:28:15:dc:56:29:
c7:f9:53:65:5c:83:10:14:f1:7f:61:cd:c1:64:f6:
e8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E0:40:56:C7:14:F5:52:53:C0:BB:14:84:B3:F4:B4:08:C0:42:2E
X509v3 Authority Key Identifier:
keyid:1A:79:A0:AC:33:12:C1:65:3F:30:0B:04:51:0D:9B:F2:C9:C2:A5:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/TOBAVscU9VJTwLsUhLP0tAjAQi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.43.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:70:fa:6d:f6:4e:29:d7:0b:41:35:d3:d9:a7:28:67:97:22:
b6:8f:87:c0:7f:4f:64:e6:03:6d:73:4f:1e:90:4a:85:6d:e1:
cc:32:82:9d:4a:67:f7:67:43:88:f5:54:32:1f:db:62:cd:40:
e9:35:07:25:8c:e6:a5:99:00:1b:0f:7e:bb:fe:e0:b9:06:8b:
b4:51:6e:df:bb:aa:6f:a2:ce:8b:58:98:7d:ef:01:aa:9a:58:
25:2b:ba:31:42:5b:a9:84:37:f9:15:61:e2:a7:cb:10:65:37:
6d:6e:8f:43:ff:13:e2:0d:39:b9:0c:8b:f9:bf:85:9a:8c:ef:
fc:1c:1a:f1:a3:3e:bd:7f:d7:40:d0:7b:92:67:17:5d:c8:2d:
88:76:e8:6c:5e:68:d1:b7:f0:11:05:97:ed:30:70:84:f2:04:
7e:b8:07:08:87:7a:45:fd:eb:53:12:6d:c7:e6:39:1e:f6:5b:
71:7d:0d:bc:e1:49:e0:ed:5b:6b:99:75:b7:c4:96:97:4e:9b:
46:73:30:d4:2b:f6:16:2c:ca:fb:c8:76:a5:5d:7f:08:82:26:
fa:94:d5:b5:90:4f:b1:90:2c:cf:57:d7:9a:e8:c8:9d:29:08:
8e:97:b4:e6:c2:85:69:6f:92:26:b8:f5:61:54:ba:c7:60:1d:
4e:cb:21:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:22:22 2025 by rpki-client