Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/Tf-xMXx1FGSa7W5MTFk1ptTbsJI.roa
File: Tf-xMXx1FGSa7W5MTFk1ptTbsJI.roa (raw, json)
Hash identifier: rPricXL6DKMNzIm/8wBOd/xDJhVzBjF0FcknH/0CxQI=
Subject key identifier: 4D:FF:B1:31:7C:75:14:64:9A:ED:6E:4C:4C:59:35:A6:D4:DB:B0:92
Certificate issuer: /CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Certificate serial: 01966C1272D0988D8B71D9E7D74C7A129569
Authority key identifier: 6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/Tf-xMXx1FGSa7W5MTFk1ptTbsJI.roa
Signing time: Fri 25 Apr 2025 08:31:10 +0000
ROA not before: Fri 25 Apr 2025 08:31:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8881
IP address blocks: 92.116.0.0/15 maxlen: 20
109.250.0.0/16 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6c:12:72:d0:98:8d:8b:71:d9:e7:d7:4c:7a:12:95:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Validity
Not Before: Apr 25 08:31:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4dffb1317c7514649aed6e4c4c5935a6d4dbb092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:13:93:fe:8b:e5:5f:9e:fb:9d:6e:e4:0e:f1:
16:84:87:16:f0:a2:00:8a:66:5b:57:12:8c:cb:7f:
1d:6a:bd:8e:61:11:b3:e7:8b:b6:f1:13:1b:81:09:
8d:da:33:93:34:85:de:52:ea:cd:93:b6:ca:dc:80:
06:f1:7e:c4:1a:45:f6:03:02:8a:8f:4a:00:77:89:
0c:ff:0f:7e:16:e6:69:ae:87:89:6c:36:cf:5e:20:
19:8b:70:a6:2b:9f:ba:d4:3c:5e:47:f2:0a:81:07:
f5:6b:82:b6:41:bd:ab:c9:a6:f2:df:67:10:ac:c1:
da:8e:9d:92:a5:d3:74:d3:c7:14:fb:9b:df:b9:f1:
8b:21:c6:95:ca:c6:a2:92:87:3e:83:0e:80:cf:c3:
13:84:db:ff:ca:97:fd:ab:9c:20:c1:36:2d:fe:3c:
c5:54:52:17:c5:d7:1b:cc:95:26:a8:c7:43:e7:ca:
a1:44:10:ea:17:a1:2d:f4:92:37:4a:b9:c1:56:ae:
d1:dd:2c:8c:f2:2f:5f:2c:a8:33:d2:ec:9e:71:c2:
af:6d:0e:76:83:20:d9:ce:52:4f:e7:8f:c9:37:53:
ca:58:8d:82:84:d8:fd:df:97:81:9d:77:9c:0f:2a:
49:e9:96:7f:1f:eb:7c:f7:a9:68:e1:e1:52:79:ac:
90:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:FF:B1:31:7C:75:14:64:9A:ED:6E:4C:4C:59:35:A6:D4:DB:B0:92
X509v3 Authority Key Identifier:
keyid:6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/Tf-xMXx1FGSa7W5MTFk1ptTbsJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.116.0.0/15
109.250.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9d:3c:86:d1:e3:85:03:15:cb:82:d5:f6:58:3b:fb:ce:2f:3b:
3f:ac:35:a6:21:de:7a:00:c6:0b:e4:7c:ad:3e:81:84:83:d7:
57:48:a3:3a:c7:6c:e1:e4:59:70:a2:79:7d:e6:85:50:68:f2:
6b:cc:f1:d9:63:59:b5:b7:19:1b:09:c9:d6:51:42:11:64:dc:
a4:62:67:99:b8:c2:f8:e8:2c:dc:65:fa:91:d2:27:d6:4f:b8:
32:73:55:f3:b6:cf:b1:fb:bc:31:a9:5c:3c:2b:bc:fd:ad:db:
f7:b5:d9:5c:ba:7c:7c:c3:cb:37:b0:1f:13:44:41:f5:95:0b:
b9:c6:1c:70:2e:48:6f:69:1c:3c:c2:fb:6e:10:0a:8d:61:10:
6a:aa:87:df:7b:43:1a:03:51:3c:6c:6e:44:c6:d9:87:52:cd:
8c:36:cf:05:3f:7a:b1:c3:61:fb:bf:78:98:89:7d:83:93:d6:
a7:cc:a7:fe:fb:38:65:6d:16:99:90:50:68:61:df:44:b6:4e:
af:f3:2d:ad:9a:1a:d2:b7:35:71:0f:05:ae:3a:24:38:84:aa:
16:79:c3:43:33:da:21:19:7d:04:3c:45:8a:d2:e4:b5:37:db:
07:00:f6:35:a4:d2:79:1d:60:6b:00:1b:59:52:d5:ab:34:02:
f2:54:b4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:39:47 2025 by rpki-client