Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Tz8QjBgBmzpa68NzWLRe2iAGU-U.roa
File: Tz8QjBgBmzpa68NzWLRe2iAGU-U.roa (raw, json)
Hash identifier: juEtxBf0oAaQHOnDE0wzOzsnnb3wMIZXnN/0qajABas=
Subject key identifier: 4F:3F:10:8C:18:01:9B:3A:5A:EB:C3:73:58:B4:5E:DA:20:06:53:E5
Certificate issuer: /CN=36aafa5c3f2f8e4a083f81f0cb87bc7aea44891f
Certificate serial: 019426D8C718259B960541A8DCFF4E5B7FA0
Authority key identifier: 36:AA:FA:5C:3F:2F:8E:4A:08:3F:81:F0:CB:87:BC:7A:EA:44:89:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Tz8QjBgBmzpa68NzWLRe2iAGU-U.roa
Signing time: Thu 02 Jan 2025 11:48:48 +0000
ROA not before: Thu 02 Jan 2025 11:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51458
IP address blocks: 45.155.176.0/22 maxlen: 24
91.217.168.0/24 maxlen: 24
2001:67c:2844::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:c7:18:25:9b:96:05:41:a8:dc:ff:4e:5b:7f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36aafa5c3f2f8e4a083f81f0cb87bc7aea44891f
Validity
Not Before: Jan 2 11:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f3f108c18019b3a5aebc37358b45eda200653e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1f:ae:4c:b0:5f:2a:31:73:ea:76:b4:20:82:
f6:61:cd:7d:4a:b3:ae:0a:50:d3:35:98:bf:d7:62:
16:81:61:e8:f6:a6:81:db:78:1e:97:f8:94:0b:45:
7a:6b:ae:8e:20:97:67:71:8e:0a:18:13:66:3d:54:
13:70:e4:ab:ed:46:03:b1:5e:ac:bf:5b:5f:60:73:
8c:ff:f2:1b:fc:97:ee:7e:76:0a:ef:57:23:76:b2:
5f:41:05:c9:b0:b2:3c:83:34:c8:47:8d:97:71:26:
04:ad:38:bd:ff:e7:08:86:c8:cc:9e:45:fe:f9:bc:
10:53:a6:53:ac:3e:06:d2:3e:db:68:e3:dd:e0:99:
7f:c1:d2:4d:bf:b9:ab:13:47:be:ee:c0:10:b7:9d:
b5:fa:c7:48:b4:49:0b:f6:5b:9e:98:ce:a8:d4:42:
2e:55:85:61:13:21:dc:33:a8:08:96:e6:14:45:dc:
69:ea:82:2d:53:2a:86:88:a7:87:a0:19:a1:fe:91:
53:8a:13:85:2b:88:46:64:73:53:90:aa:25:a7:26:
66:1d:53:2f:81:28:d2:b9:de:c9:30:30:9d:cd:6b:
79:2c:09:04:f8:03:1f:16:45:9f:14:7d:64:25:57:
e6:c4:9e:36:8b:5d:a6:3a:2e:35:b5:2e:99:98:23:
ca:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:3F:10:8C:18:01:9B:3A:5A:EB:C3:73:58:B4:5E:DA:20:06:53:E5
X509v3 Authority Key Identifier:
keyid:36:AA:FA:5C:3F:2F:8E:4A:08:3F:81:F0:CB:87:BC:7A:EA:44:89:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Tz8QjBgBmzpa68NzWLRe2iAGU-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.176.0/22
91.217.168.0/24
IPv6:
2001:67c:2844::/48
Signature Algorithm: sha256WithRSAEncryption
06:6c:51:de:44:c3:04:3a:14:f5:15:04:ba:ba:f3:5c:34:0f:
de:60:7c:62:06:80:0f:53:2a:d3:13:3c:61:7b:65:39:8a:cf:
8e:c5:4b:8c:42:d0:19:6a:ce:a5:bd:7d:98:9c:6a:87:18:3c:
df:df:96:21:48:fb:bb:78:10:6d:a4:f2:dc:98:0a:48:5d:13:
d9:e7:a1:bd:bd:87:af:a7:3c:14:b2:aa:fd:47:09:d3:a2:9f:
65:bd:6f:d4:8e:dc:b1:de:fe:a2:69:5e:99:f9:1b:74:1e:0f:
a8:ee:b0:1a:54:94:08:80:df:3b:b5:ba:61:37:60:34:d6:59:
ca:9a:44:a5:16:c8:ef:71:28:b7:fa:95:29:f4:d2:2b:30:90:
76:80:be:ae:b3:14:47:02:d5:b6:de:f8:a9:c6:25:9c:1f:39:
6c:55:a9:d5:15:4f:10:2e:6d:c0:f8:1c:f7:24:48:f6:e5:7b:
88:ac:7d:bb:81:d7:f8:3f:46:c9:b1:07:41:4c:c9:17:9a:c4:
2b:e4:9f:e7:6b:af:b5:28:e9:83:8b:ff:01:b2:10:c9:34:96:
e0:81:59:38:7e:bc:89:36:0c:1e:1f:2c:cc:16:d8:4a:85:bd:
ef:a3:22:3e:0c:f7:58:b7:3a:18:f3:97:cd:3b:f5:6a:98:81:
cc:f6:13:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:51:05 2025 by rpki-client