Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/Taew90LrITUNXWEUlG92GSZizj4.roa
File: Taew90LrITUNXWEUlG92GSZizj4.roa (raw, json)
Hash identifier: tCoLpi3SKQ5YEAOD+WHKJDrZxFw4R47l6+pDVHgYeLI=
Subject key identifier: 4D:A7:B0:F7:42:EB:21:35:0D:5D:61:14:94:6F:76:19:26:62:CE:3E
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 019427B564FAF57A028A6C7DD478D4829075
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/Taew90LrITUNXWEUlG92GSZizj4.roa
Signing time: Thu 02 Jan 2025 15:49:46 +0000
ROA not before: Thu 02 Jan 2025 15:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56769
IP address blocks: 31.15.20.0/24 maxlen: 24
31.15.21.0/24 maxlen: 24
192.162.66.0/24 maxlen: 24
192.162.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:64:fa:f5:7a:02:8a:6c:7d:d4:78:d4:82:90:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Jan 2 15:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4da7b0f742eb21350d5d6114946f76192662ce3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:34:91:0e:d9:a5:f4:8d:d6:82:19:bc:87:93:
2e:c0:a8:9b:1e:d1:b4:10:b3:4c:4d:6a:70:fc:bd:
d5:cf:6d:f7:a0:dc:c3:28:ac:b2:4d:3d:3a:4c:7b:
8d:7e:a2:9c:cf:ca:f3:06:a4:a4:27:4e:55:5e:b9:
40:0f:d4:05:a1:2e:7f:d8:a4:28:24:50:5b:48:aa:
cc:94:b0:7f:b1:5f:bc:ba:bf:e9:11:6b:d2:c6:04:
3e:c4:5b:b8:e3:1a:01:0b:6c:49:16:db:8f:b4:c9:
0f:38:26:2f:3c:5f:86:51:6d:62:40:4a:fe:13:2c:
17:7f:6e:e8:56:79:de:4d:23:23:cd:89:fa:7f:ff:
1c:90:83:b3:e5:8d:21:e8:e1:eb:9b:8f:2a:05:09:
eb:1f:6f:15:e5:9c:48:f9:a5:d5:a7:08:6c:ba:72:
2e:6b:a7:29:f7:45:1b:ec:56:56:ec:47:bf:df:23:
9f:7d:ff:69:76:e7:b7:f0:0c:51:31:18:4d:2b:aa:
8b:20:17:6e:a9:0b:6a:d2:b5:46:66:3a:4f:99:68:
ed:5e:67:ea:69:42:a7:af:70:2e:54:74:fd:8a:91:
47:f5:ed:d9:31:e6:19:63:06:d2:ae:19:3f:27:b9:
db:09:57:83:e0:7a:e9:b8:5e:2d:fd:85:02:3f:7e:
37:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A7:B0:F7:42:EB:21:35:0D:5D:61:14:94:6F:76:19:26:62:CE:3E
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/Taew90LrITUNXWEUlG92GSZizj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.15.20.0/23
192.162.66.0/23
Signature Algorithm: sha256WithRSAEncryption
54:71:d5:68:85:9b:26:c6:df:90:74:6e:b3:2f:48:28:7b:e6:
5f:1c:f9:12:4d:41:b1:20:24:3e:1d:26:db:f2:77:5e:ba:f3:
99:65:1f:19:d1:fc:d5:92:85:38:31:89:a4:a0:ba:a3:99:d9:
c2:7d:cc:00:37:29:79:48:a5:fd:67:73:e3:73:d4:f8:db:52:
83:02:fd:1e:19:19:23:ea:db:98:40:76:6a:a5:4d:a1:8e:7b:
b4:e9:a5:ab:be:26:53:c4:7d:a7:3b:c0:25:de:83:79:f9:97:
7e:e4:c4:af:49:23:bd:90:94:05:2b:55:32:05:17:e5:31:6e:
91:ca:00:71:b0:1d:e3:41:3e:62:ea:b9:43:df:42:cf:89:01:
9c:cf:9c:40:82:57:43:51:f7:e1:a1:7a:e6:d4:f7:c2:1a:76:
29:a5:c5:1a:c6:7c:0d:b6:d2:78:9e:4e:48:6c:ea:0c:a5:1a:
f3:e8:6e:0b:fa:80:60:5b:dd:86:2c:f9:39:65:2c:74:87:6d:
3a:6c:46:0d:c4:1c:34:71:28:38:d2:ee:9a:02:56:46:0a:21:
34:8c:68:c3:b5:34:64:04:2d:c7:4c:5d:d3:4d:72:36:c4:67:
3e:a4:ba:d4:7d:95:bf:cd:8d:8e:c0:62:95:01:3d:bf:ca:8e:
2c:ca:3c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:08:53 2025 by rpki-client