Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/tdrOV3y46CrlF70UMGPfRoCn2j8.roa
File: tdrOV3y46CrlF70UMGPfRoCn2j8.roa (raw, json)
Hash identifier: nIA0fLDpgoUGtNCZuxY6Jfjz2U/gZnlLBrv5XztTHEI=
Subject key identifier: B5:DA:CE:57:7C:B8:E8:2A:E5:17:BD:14:30:63:DF:46:80:A7:DA:3F
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 01965E0557D2CC9F1967E87A38ACB91FB896
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/tdrOV3y46CrlF70UMGPfRoCn2j8.roa
Signing time: Tue 22 Apr 2025 15:02:10 +0000
ROA not before: Tue 22 Apr 2025 15:02:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 194.238.80.0/22 maxlen: 24
194.238.84.0/22 maxlen: 24
194.238.88.0/22 maxlen: 24
194.238.92.0/22 maxlen: 24
213.18.192.0/22 maxlen: 24
217.179.80.0/22 maxlen: 24
217.179.124.0/22 maxlen: 24
217.181.80.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:05:57:d2:cc:9f:19:67:e8:7a:38:ac:b9:1f:b8:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Apr 22 15:02:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5dace577cb8e82ae517bd143063df4680a7da3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:50:43:0b:3d:fe:aa:49:c4:66:3c:e9:01:ea:
d6:18:d8:90:a9:3e:8e:7d:34:37:9d:c1:41:33:99:
2d:c7:7a:b1:f5:20:14:28:fd:1e:de:4e:e7:10:9a:
9d:1c:b4:9b:83:e2:83:43:ed:3e:cd:5b:d3:d2:78:
74:da:20:a2:0a:fc:f5:61:ac:36:ae:63:df:6e:51:
19:4b:cb:2a:85:50:62:52:3d:35:2b:47:35:0f:c0:
db:65:09:b3:40:32:b4:66:d9:b7:99:fb:df:1e:f8:
04:c5:59:16:36:83:fe:7a:bd:cc:4a:d7:0e:dc:22:
a2:0a:fa:8b:b8:4c:62:42:47:7c:b3:e4:9c:fb:47:
ef:ab:a1:76:8a:fd:4c:eb:d7:40:fe:22:a5:60:d0:
3a:6d:e7:cb:38:61:f9:7d:ca:16:c6:4c:f5:e1:ca:
77:cf:f4:04:04:0d:16:cd:96:1c:e6:0a:fc:a2:d5:
f3:34:5a:3f:38:f0:b3:c9:c3:c9:f3:8b:97:68:c0:
fa:54:b1:8b:d9:17:77:5d:76:73:d6:5e:27:e7:7f:
1f:17:57:a6:8f:c3:4b:71:ab:70:82:c0:c0:2b:9d:
17:47:80:0b:32:de:6f:25:09:a0:2c:3e:85:b2:71:
04:38:63:46:d8:82:f1:79:b4:b1:26:52:9d:c6:14:
c6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:DA:CE:57:7C:B8:E8:2A:E5:17:BD:14:30:63:DF:46:80:A7:DA:3F
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/tdrOV3y46CrlF70UMGPfRoCn2j8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.238.80.0/20
213.18.192.0/22
217.179.80.0/22
217.179.124.0/22
217.181.80.0/21
Signature Algorithm: sha256WithRSAEncryption
77:c2:c8:6f:89:19:86:55:ee:b5:9c:fe:69:d0:50:2c:58:d7:
14:30:d5:83:0e:12:82:08:70:36:06:7a:94:46:0e:e6:d6:6a:
78:8c:c6:f5:95:73:a5:1f:40:8e:05:d1:12:88:c1:7d:a9:18:
6b:4f:87:37:fe:84:f3:75:53:ba:88:e5:60:9b:77:ad:38:62:
bb:d0:5a:2e:36:20:20:e9:5f:fd:d3:4f:43:69:28:f8:6b:17:
8c:39:0b:17:24:b2:fa:d5:9b:70:f6:28:04:f9:ff:d4:fd:91:
b5:e0:0e:cb:4c:22:e6:44:bc:17:49:03:f7:93:8c:44:8a:0a:
28:9f:55:fc:64:ca:a3:0b:4c:df:1c:22:2e:db:ed:1f:47:19:
e1:4f:33:6a:e2:cb:be:05:07:43:79:0e:ca:94:5d:3f:7e:aa:
fd:d5:ad:c4:86:b9:72:37:68:c9:e1:7c:e1:60:68:7d:bd:f6:
5c:31:77:39:db:d8:77:d1:e8:d0:81:3b:e6:2c:f2:7a:ce:e5:
21:de:f9:f5:7b:11:ef:38:22:8a:f9:fc:c0:a3:1b:55:f7:de:
0d:47:6b:75:cd:50:1d:e5:a3:05:59:bb:25:07:51:5c:71:8d:
f1:e8:8f:be:85:ef:36:71:b7:51:49:dd:31:61:64:cd:ff:c8:
36:81:55:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:04:16 2025 by rpki-client