Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/1tlTabk8kx23vgEK55RHhqMUGAo.roa
File: 1tlTabk8kx23vgEK55RHhqMUGAo.roa (raw, json)
Hash identifier: ZiPvgitC32adDyXcop28a7N8FTyvMG9u4rZhMBMC7pc=
Subject key identifier: D6:D9:53:69:B9:3C:93:1D:B7:BE:01:0A:E7:94:47:86:A3:14:18:0A
Certificate issuer: /CN=8df51d0670715eb69efa2fbff1998c3bdbd8a9f5
Certificate serial: 0196862FA1A18A19E039A3EB8331F6E23397
Authority key identifier: 8D:F5:1D:06:70:71:5E:B6:9E:FA:2F:BF:F1:99:8C:3B:DB:D8:A9:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfUdBnBxXrae-i-_8ZmMO9vYqfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/1tlTabk8kx23vgEK55RHhqMUGAo.roa
Signing time: Wed 30 Apr 2025 10:13:10 +0000
ROA not before: Wed 30 Apr 2025 10:13:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8838
IP address blocks: 194.50.108.0/24 maxlen: 24
212.42.0.0/19 maxlen: 19
2a03:8840::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jfUdBnBxXrae-i-_8ZmMO9vYqfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:2f:a1:a1:8a:19:e0:39:a3:eb:83:31:f6:e2:33:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8df51d0670715eb69efa2fbff1998c3bdbd8a9f5
Validity
Not Before: Apr 30 10:13:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6d95369b93c931db7be010ae7944786a314180a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:34:8d:11:b4:11:74:c8:4b:aa:82:b7:06:32:
c7:51:50:da:f5:17:d8:31:dc:42:6e:3b:85:23:0b:
3d:1e:56:bb:ea:ca:8c:08:af:ce:55:2e:ad:03:c2:
fc:ee:0d:1b:cc:89:f1:e1:60:69:3a:b3:e0:1b:01:
c9:29:85:45:43:7e:ec:5f:53:b7:2d:c3:29:9d:9a:
67:ed:aa:fb:b3:4d:16:34:bf:0c:6d:a2:61:70:f9:
ce:eb:e4:35:f1:77:44:39:c3:92:2c:1e:33:c1:eb:
65:f3:02:73:db:9e:94:28:56:49:5f:0a:78:65:35:
57:2f:c4:d2:d7:29:f0:8e:33:81:fc:e6:bd:49:25:
72:ea:cf:a9:f4:4e:87:83:67:eb:0a:01:e9:da:fc:
cd:0f:ae:c9:40:67:0c:50:da:f6:0c:ee:b3:c8:1a:
40:13:44:9b:47:0d:ac:d1:b2:72:fc:b8:07:cb:c5:
f4:37:13:6e:34:ef:87:3a:69:b1:a7:b8:5d:d5:19:
e6:b3:93:20:59:9c:bf:85:72:6e:dc:bd:be:5f:e2:
d0:7b:66:16:9e:1a:ac:cb:6e:c7:33:31:32:11:1b:
2a:7d:cd:15:56:af:e3:68:c8:65:d7:e2:ce:e8:83:
ba:c7:d6:92:b7:8a:cb:43:c9:17:95:be:9e:00:6b:
48:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D9:53:69:B9:3C:93:1D:B7:BE:01:0A:E7:94:47:86:A3:14:18:0A
X509v3 Authority Key Identifier:
keyid:8D:F5:1D:06:70:71:5E:B6:9E:FA:2F:BF:F1:99:8C:3B:DB:D8:A9:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfUdBnBxXrae-i-_8ZmMO9vYqfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/1tlTabk8kx23vgEK55RHhqMUGAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.108.0/24
212.42.0.0/19
IPv6:
2a03:8840::/32
Signature Algorithm: sha256WithRSAEncryption
6e:9c:88:a6:81:2a:2f:24:88:f1:0c:73:c3:1d:9a:48:f2:12:
4a:3b:8b:5d:6c:7d:30:22:ee:6a:b4:3b:be:d6:ff:f1:ee:8f:
ff:e8:3b:79:8b:94:45:3f:2c:40:12:98:bd:34:6b:2f:8d:a4:
4f:b8:f2:20:65:28:b1:ce:68:3a:df:7c:c7:92:8e:78:e5:15:
80:fd:99:13:ea:16:88:91:f2:ed:b9:f8:5f:29:de:37:99:6b:
1f:b4:11:60:a6:5d:7b:12:6f:a5:b4:99:19:d8:bd:65:fb:86:
4a:7b:8e:d6:78:ef:1e:da:67:de:9e:89:7e:91:39:3c:d1:62:
5d:27:84:23:0a:5b:5e:c2:87:b6:32:a5:24:de:7e:2e:95:1f:
74:d2:1d:41:5d:f4:fd:11:d5:ef:2b:d6:6a:47:2b:45:99:f3:
7d:28:50:f3:fc:ef:00:29:f0:f2:3b:01:52:52:cb:29:57:30:
9f:8e:56:96:64:8e:58:b7:23:d1:af:98:4e:a5:ec:4f:cb:5b:
0e:fd:bf:cf:ac:d7:4c:fa:f1:b8:e3:42:92:e5:17:cc:02:cc:
c0:58:9e:40:1d:1e:25:32:e1:09:88:0c:91:c2:ef:99:b8:9e:
5e:3d:71:ba:ed:ef:60:49:ce:5f:2c:1a:b1:3d:da:a1:07:c3:
59:5a:a9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:11:28 2025 by rpki-client