Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/TIACn4fsks199OFSe6FZXPXf_xA.roa
File: TIACn4fsks199OFSe6FZXPXf_xA.roa (raw, json)
Hash identifier: xLyn1suEwo08rzF/phsElDrmdMb09LuB3c8mbCPfp+E=
Subject key identifier: 4C:80:02:9F:87:EC:92:CD:7D:F4:E1:52:7B:A1:59:5C:F5:DF:FF:10
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0196B194A30D1A7090C91FA838BAA71A4706
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/TIACn4fsks199OFSe6FZXPXf_xA.roa
Signing time: Thu 08 May 2025 20:27:10 +0000
ROA not before: Thu 08 May 2025 20:27:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 79.172.208.0/24 maxlen: 24
79.172.228.0/24 maxlen: 24
87.229.8.0/22 maxlen: 22
87.229.11.0/24 maxlen: 24
87.229.14.0/24 maxlen: 24
87.229.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:94:a3:0d:1a:70:90:c9:1f:a8:38:ba:a7:1a:47:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: May 8 20:27:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c80029f87ec92cd7df4e1527ba1595cf5dfff10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f2:81:90:06:3d:98:49:8f:79:0c:be:49:01:
f1:ef:3d:b1:e0:e9:b5:6a:77:9f:3f:bb:d0:df:ba:
d5:2e:b5:e9:97:76:cb:a6:8a:b8:2e:2d:6a:a4:80:
f9:54:3b:0d:2f:74:6c:25:d3:92:58:78:e7:aa:12:
0d:36:d4:ac:24:57:35:08:91:95:35:13:d3:b1:56:
52:7e:5e:11:7a:40:74:84:b9:e9:a8:7c:81:6f:39:
3d:2b:5a:71:7b:ef:3c:fa:b4:cb:f4:c9:b1:e3:6b:
75:0e:e6:92:00:0c:51:74:bd:e6:e8:89:7e:a9:05:
fd:85:ae:2e:8c:aa:a8:85:e6:f7:f6:d7:30:c2:0e:
a7:55:1a:02:f3:7a:7b:d4:15:4d:82:20:d1:bf:87:
6b:4a:aa:de:25:29:de:ee:0f:cf:29:36:4a:c9:ff:
39:71:76:10:0b:14:d8:ee:19:f0:bb:95:2d:f4:c3:
d1:d6:6f:b1:0b:b8:7a:6b:4e:81:7b:cb:f6:42:41:
0e:cb:71:69:6d:61:56:f2:01:0d:ec:98:6b:bb:e2:
b0:56:1b:77:30:83:be:16:4a:f7:02:92:8b:da:80:
36:00:cc:b3:a2:ca:44:0a:8d:c6:41:02:4b:22:a8:
ff:7b:f9:9d:09:88:73:95:8f:ef:4e:52:d3:a6:ec:
13:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:80:02:9F:87:EC:92:CD:7D:F4:E1:52:7B:A1:59:5C:F5:DF:FF:10
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/TIACn4fsks199OFSe6FZXPXf_xA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.208.0/24
79.172.228.0/24
87.229.8.0/22
87.229.14.0/24
87.229.64.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:4c:a6:cb:99:69:dd:00:14:df:a6:2a:1d:ff:9b:b2:39:8b:
58:f6:e9:7e:71:a6:8d:25:39:da:17:d1:25:e3:93:d3:62:f3:
93:41:04:68:18:c8:d2:06:08:84:3c:ed:2c:b4:de:69:82:fe:
d3:28:e0:d2:3a:89:ec:08:30:4b:13:76:7d:09:fb:fe:6a:4e:
3e:d6:c8:10:13:8a:1d:d2:a7:4f:20:3f:c1:8d:ed:dc:1c:38:
8b:01:34:a1:c9:00:9d:ef:7a:f4:3d:ce:3b:fc:d5:c7:cb:0a:
b9:07:25:ad:d1:cb:be:1b:23:fb:fb:62:a7:0a:f3:b8:66:62:
2e:8b:11:9e:bd:f3:6a:1e:b0:da:f1:84:d0:c3:1d:ae:a4:43:
4b:5e:80:19:a2:f6:17:06:22:3b:88:65:07:15:7b:64:20:13:
ac:90:f2:28:d1:7b:85:78:de:6e:e5:2d:b0:a2:5c:4e:b9:18:
90:d2:58:e2:a7:55:58:2b:84:bc:31:5e:79:50:50:af:f0:26:
6a:c5:6b:ae:95:b4:fb:c3:fa:a9:b6:d6:79:77:f2:cf:21:ed:
7e:15:1e:08:25:f8:77:87:9e:b3:d3:02:1b:f5:a8:ad:38:3c:
a1:e8:3a:34:b7:e7:68:6c:72:87:9e:5a:c9:f1:50:b5:6a:82:
41:9c:a1:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:16:23 2025 by rpki-client