Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/tPfqUbopBFQbBdX02jX2a3pGE5U.roa
File: tPfqUbopBFQbBdX02jX2a3pGE5U.roa (raw, json)
Hash identifier: iYgcgk+sZG1Q+yO+oyQmYDmVBD8gFKtXK51vp12qGqA=
Subject key identifier: B4:F7:EA:51:BA:29:04:54:1B:05:D5:F4:DA:35:F6:6B:7A:46:13:95
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 01964E14D5AB157EF7D8CE9B2CE245620023
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/tPfqUbopBFQbBdX02jX2a3pGE5U.roa
Signing time: Sat 19 Apr 2025 12:45:10 +0000
ROA not before: Sat 19 Apr 2025 12:45:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 109.122.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 10:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:14:d5:ab:15:7e:f7:d8:ce:9b:2c:e2:45:62:00:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Apr 19 12:45:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4f7ea51ba2904541b05d5f4da35f66b7a461395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:73:78:77:4e:19:12:f5:db:9f:d4:2a:8a:eb:
9f:98:a4:43:58:37:65:1f:60:45:03:d7:98:67:e0:
08:3e:46:8c:ba:5b:ba:8f:a2:39:23:9d:77:9a:18:
3a:bb:9d:f4:1f:2e:78:46:db:ad:c0:4f:01:b3:31:
78:f6:cf:ab:11:01:5d:e8:f2:ac:93:e2:4f:2b:88:
cc:24:f5:7f:65:ae:23:af:66:1d:72:3d:2e:15:e0:
61:54:0d:24:5a:e4:34:4c:61:da:41:be:a8:19:1b:
df:1d:5d:26:4e:14:72:bc:87:a5:b4:9b:26:c8:25:
e1:f0:b4:1b:af:cb:30:24:df:dc:af:b0:da:a4:ab:
02:cc:e4:0b:ab:42:d6:51:5b:a4:1c:d6:2f:34:0d:
7d:d9:d7:6c:c7:e0:9d:62:fd:06:5a:76:a0:20:1f:
a4:f9:ec:fc:19:61:c0:40:80:0c:a1:2c:4c:90:5f:
32:08:7a:b0:78:bf:20:c5:82:65:14:c6:b7:02:56:
4e:dc:58:cc:99:7b:29:ee:df:b2:3c:7f:49:8c:b2:
c3:d5:80:c5:b6:0d:7d:a5:da:01:ee:0c:d5:fc:84:
48:a5:7d:91:02:f6:1a:18:23:da:5b:66:7f:64:32:
ca:05:12:58:72:33:2d:f5:95:de:45:ce:90:66:81:
ce:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F7:EA:51:BA:29:04:54:1B:05:D5:F4:DA:35:F6:6B:7A:46:13:95
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/tPfqUbopBFQbBdX02jX2a3pGE5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.249.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:4b:54:e8:00:3b:a3:21:c1:a0:06:3f:08:8f:6d:ee:41:96:
c8:d5:3e:ee:05:3d:60:e9:cb:f6:f6:ef:31:40:f5:33:0a:7c:
cc:cd:4b:88:ed:88:58:9b:2f:22:bf:d0:a2:22:b6:16:ba:90:
dd:18:e1:1c:6c:80:46:d5:21:62:0d:e9:04:29:5e:3a:8d:3d:
4f:cf:5c:79:3d:be:7a:34:4b:70:16:cf:5c:2f:0c:53:c8:23:
3a:98:26:5e:2f:26:a6:20:0d:52:14:1a:c7:10:9f:09:ea:36:
7e:f7:2b:10:14:a3:09:ba:23:95:36:cf:f8:45:0c:c9:e3:13:
46:17:aa:4d:6b:8e:61:e6:d8:24:fc:00:91:62:e9:da:55:17:
dd:c9:1e:64:12:23:8f:9a:8f:cd:fa:8d:06:5e:36:dd:e4:a1:
27:16:e6:c1:1a:2c:a1:61:74:03:e1:e1:29:45:1b:ec:fe:14:
5b:5c:a7:ee:2f:da:a9:8d:eb:da:d9:61:0d:cf:2c:75:73:52:
e7:21:21:c7:7c:14:20:53:d8:ef:5c:01:2c:97:4c:db:c6:81:
de:36:ef:31:b3:26:66:0b:58:57:9b:12:34:ca:89:a4:1d:1f:
33:de:4c:4d:65:44:41:4c:cd:3a:97:96:75:22:eb:07:cf:86:
8e:2d:85:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:04:16 2025 by rpki-client