Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/18TNS4gBaAj1nBKZLGQyvBGXDAA.roa
File: 18TNS4gBaAj1nBKZLGQyvBGXDAA.roa (raw, json)
Hash identifier: yG6kNp39rMwW08RfUJ3Cw47Eb4R/ZRHq/FbYcN4tnj0=
Subject key identifier: D7:C4:CD:4B:88:01:68:08:F5:9C:12:99:2C:64:32:BC:11:97:0C:00
Certificate issuer: /CN=b085804db153eb724c58557c79359c4408205550
Certificate serial: 0194266BD4559439CD2C8B5B9B2173619CBE
Authority key identifier: B0:85:80:4D:B1:53:EB:72:4C:58:55:7C:79:35:9C:44:08:20:55:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/18TNS4gBaAj1nBKZLGQyvBGXDAA.roa
Signing time: Thu 02 Jan 2025 09:49:48 +0000
ROA not before: Thu 02 Jan 2025 09:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51171
IP address blocks: 195.54.168.0/23 maxlen: 23
195.54.168.0/24 maxlen: 24
195.54.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 12:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:d4:55:94:39:cd:2c:8b:5b:9b:21:73:61:9c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b085804db153eb724c58557c79359c4408205550
Validity
Not Before: Jan 2 09:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7c4cd4b88016808f59c12992c6432bc11970c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1c:53:2f:34:c1:65:25:32:8c:67:5f:4d:05:
81:21:42:c4:8a:0a:2f:2b:8c:d6:03:ae:b7:ec:98:
26:d8:af:f4:94:77:80:b8:4f:3c:da:3a:ec:55:43:
a0:ce:ae:24:c6:86:a0:ea:0d:16:23:b3:3e:e9:07:
7a:92:e7:2e:5a:18:80:ce:5f:a0:b0:a6:46:28:0d:
6c:d8:6a:5a:2a:13:e8:06:7f:63:95:47:22:23:91:
20:df:4e:bb:b3:b1:1d:59:0b:93:ce:95:33:4c:31:
da:0c:81:0d:11:a8:45:31:7b:ee:59:c3:94:a5:f2:
9a:99:69:72:58:3c:4f:6d:cb:b7:4f:1d:8f:c0:f3:
ce:2b:df:6f:32:8d:96:e8:da:23:58:4d:99:b0:06:
5c:4c:88:6b:cf:36:32:c6:f4:25:1b:3d:c6:7e:07:
eb:dc:fb:31:a6:b3:cc:ab:f7:79:fc:bb:e1:b5:11:
d7:3b:a6:76:ad:ef:1b:71:29:bd:f1:19:3a:f7:92:
12:aa:05:26:65:c0:7d:cc:85:1f:b8:96:fa:fa:53:
39:76:2e:03:ac:15:9d:9a:e1:b9:d1:36:4b:24:20:
53:bd:a6:e8:7d:09:89:0b:53:4e:8b:f5:15:b6:1b:
b4:dc:94:c7:3e:f2:d6:74:02:08:91:07:ff:b6:f7:
54:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C4:CD:4B:88:01:68:08:F5:9C:12:99:2C:64:32:BC:11:97:0C:00
X509v3 Authority Key Identifier:
keyid:B0:85:80:4D:B1:53:EB:72:4C:58:55:7C:79:35:9C:44:08:20:55:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/18TNS4gBaAj1nBKZLGQyvBGXDAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.54.168.0/23
Signature Algorithm: sha256WithRSAEncryption
96:8a:98:02:6f:3b:7b:0a:ce:82:5e:d0:62:a0:8b:eb:ec:a1:
03:0d:f1:28:56:b8:84:c6:03:50:fb:db:71:c4:8e:9b:17:9f:
23:5b:52:3f:cf:9b:ef:e7:cc:6f:a5:64:89:c3:46:cd:11:19:
a2:44:91:16:48:ac:98:aa:10:21:09:49:79:b1:7d:46:41:57:
48:01:4c:80:46:ce:23:61:7d:95:50:f6:81:5c:1b:1c:46:8a:
77:7b:21:78:29:f5:cf:2f:7c:ee:b5:ff:9a:25:e7:a0:c2:c2:
cd:dc:83:ad:83:40:a1:d9:9c:05:19:f3:ea:39:18:64:92:7e:
a4:4d:f8:ef:83:18:4a:70:99:27:9c:90:e8:f3:3d:43:1a:52:
a4:b8:fb:85:cf:a6:28:4a:77:d9:ad:11:81:46:e2:12:53:24:
1a:e9:21:ec:fd:cc:72:76:f1:2b:ee:4f:bb:88:bb:c7:d8:89:
ea:5c:50:39:73:80:63:97:7b:73:e1:d7:55:da:aa:dc:6a:86:
eb:5a:f0:ba:28:8b:a1:2c:b2:1d:49:3d:91:38:ac:67:b2:d5:
6a:e9:74:35:f9:8c:94:73:51:b9:cc:51:e4:04:37:e4:d7:78:
4a:b0:e8:25:8e:59:07:e2:41:85:47:48:09:80:7d:bd:48:cc:
d2:0d:95:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 20:06:49 2025 by rpki-client