Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/Tm2nsqR26Dl9LeV6Cyt_JHr-v8Y.roa
File: Tm2nsqR26Dl9LeV6Cyt_JHr-v8Y.roa (raw, json)
Hash identifier: uihaqn4cl1EUm9BC8+JYEwJFvxEP94e45YDqvyFRac4=
Subject key identifier: 4E:6D:A7:B2:A4:76:E8:39:7D:2D:E5:7A:0B:2B:7F:24:7A:FE:BF:C6
Certificate issuer: /CN=f22d5f17636a1f14efa8a0e4099b3d335ff84dd3
Certificate serial: 0194258F5AC000EF5EFA38AA63530DB32E3F
Authority key identifier: F2:2D:5F:17:63:6A:1F:14:EF:A8:A0:E4:09:9B:3D:33:5F:F8:4D:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/Tm2nsqR26Dl9LeV6Cyt_JHr-v8Y.roa
Signing time: Thu 02 Jan 2025 05:48:59 +0000
ROA not before: Thu 02 Jan 2025 05:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9145
IP address blocks: 194.76.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 02:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:5a:c0:00:ef:5e:fa:38:aa:63:53:0d:b3:2e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22d5f17636a1f14efa8a0e4099b3d335ff84dd3
Validity
Not Before: Jan 2 05:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e6da7b2a476e8397d2de57a0b2b7f247afebfc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2e:c3:66:44:3f:6c:72:50:f7:1d:89:8f:6e:
6a:de:b7:73:0f:3c:cd:47:c7:e4:ac:33:64:fa:f8:
b0:03:65:92:d2:9d:1b:ec:32:01:6e:41:87:16:5d:
4e:0a:e7:67:90:81:36:12:8b:1c:36:03:fb:4b:c4:
0f:34:26:96:58:00:90:78:5c:b4:fc:0b:49:d7:f7:
66:be:36:15:1e:2d:c5:bf:e0:0c:a9:e1:32:2f:ab:
8c:7c:a8:34:2f:d4:39:79:53:17:42:7d:39:a7:20:
65:75:0e:11:81:4b:3a:f7:99:43:69:d9:cc:c8:ea:
15:98:26:3d:69:ef:0b:fb:9b:56:0f:e5:01:53:6b:
83:a6:6a:77:14:cc:52:a7:de:e2:8c:b0:e9:a2:91:
bb:2a:e2:75:73:c4:14:70:6b:85:81:94:d1:f6:ce:
c0:2b:62:62:b6:00:71:b3:9d:aa:c0:d5:fc:90:89:
6b:d5:bf:c5:3f:65:9a:3f:c1:aa:ce:04:b5:a7:45:
38:23:95:4d:df:77:72:b0:ff:f2:da:15:a1:ee:aa:
32:36:44:cd:f8:77:11:83:4b:2b:03:9c:bf:a4:78:
7f:e3:f4:6b:1f:25:d1:0d:d7:a7:2c:ce:b3:6a:aa:
dc:65:6f:ce:41:cd:5b:df:02:94:1d:29:98:8c:88:
20:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6D:A7:B2:A4:76:E8:39:7D:2D:E5:7A:0B:2B:7F:24:7A:FE:BF:C6
X509v3 Authority Key Identifier:
keyid:F2:2D:5F:17:63:6A:1F:14:EF:A8:A0:E4:09:9B:3D:33:5F:F8:4D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/Tm2nsqR26Dl9LeV6Cyt_JHr-v8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.211.0/24
Signature Algorithm: sha256WithRSAEncryption
07:c5:81:da:26:96:23:46:1d:b4:1b:32:4c:3e:d5:ee:90:3a:
f2:c4:18:af:a7:bb:1a:43:21:66:5f:00:73:ca:b2:37:bd:06:
84:a3:6c:fe:be:20:f4:e3:1b:f9:fa:14:ec:93:a0:a6:a3:53:
58:8d:af:97:e5:a7:2f:0e:09:4a:e2:49:e9:14:f3:b7:c4:8e:
3b:e8:73:fd:a5:7e:f6:6c:d2:8b:65:44:e0:96:00:74:59:69:
29:0f:63:03:f9:0e:c5:9b:69:ae:5e:fe:c4:d1:ec:7b:6a:06:
a6:be:d1:2b:eb:83:60:83:ab:f0:a8:89:e2:d4:d3:5d:72:25:
7d:89:52:41:b3:db:01:af:2c:74:07:53:f0:b6:de:da:1b:4e:
1d:48:81:0f:e7:44:08:c0:70:80:8a:26:b2:0e:16:ee:d8:73:
e5:63:1e:fe:03:c0:04:88:8f:ae:ac:6c:27:98:58:67:b1:18:
66:13:da:02:ba:7d:ef:7a:c6:58:2e:cd:98:0a:92:30:47:60:
f6:ee:f8:11:29:a0:7a:0a:96:ef:04:b5:d8:1f:19:1d:60:68:
9f:82:2b:40:4d:57:2e:67:7d:52:07:4e:08:aa:f6:2d:23:cd:
31:be:33:e8:16:f0:6d:d2:4c:11:c8:d0:28:11:b5:86:fa:2b:
4a:0f:12:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:12:34 2025 by rpki-client