Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/TYH4Ce0-k-wvqgRH0i5li3BgriI.roa
File: TYH4Ce0-k-wvqgRH0i5li3BgriI.roa (raw, json)
Hash identifier: Q3Et9vzkH2i83UUu897K4DdPhoe5uvwQSHH8BVd+9Y4=
Subject key identifier: 4D:81:F8:09:ED:3E:93:EC:2F:AA:04:47:D2:2E:65:8B:70:60:AE:22
Certificate issuer: /CN=912f169fc744cbe895a9f85edab796d4ac700029
Certificate serial: 01942444B1D8A77BEF1CC48E52A8DDC3C51F
Authority key identifier: 91:2F:16:9F:C7:44:CB:E8:95:A9:F8:5E:DA:B7:96:D4:AC:70:00:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kS8Wn8dEy-iVqfhe2reW1KxwACk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/TYH4Ce0-k-wvqgRH0i5li3BgriI.roa
Signing time: Wed 01 Jan 2025 23:47:49 +0000
ROA not before: Wed 01 Jan 2025 23:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43594
IP address blocks: 95.215.124.0/22 maxlen: 22
95.215.124.0/24 maxlen: 24
95.215.125.0/24 maxlen: 24
95.215.126.0/24 maxlen: 24
95.215.127.0/24 maxlen: 24
185.184.232.0/22 maxlen: 22
185.184.232.0/24 maxlen: 24
185.184.233.0/24 maxlen: 24
185.184.234.0/24 maxlen: 24
185.184.235.0/24 maxlen: 24
2a0b:4380::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kS8Wn8dEy-iVqfhe2reW1KxwACk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 23:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:b1:d8:a7:7b:ef:1c:c4:8e:52:a8:dd:c3:c5:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=912f169fc744cbe895a9f85edab796d4ac700029
Validity
Not Before: Jan 1 23:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d81f809ed3e93ec2faa0447d22e658b7060ae22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b9:58:35:0d:17:ef:77:f7:14:c0:c8:00:c6:
9b:be:ea:9f:2d:eb:27:c7:1b:08:4d:9f:bf:14:9c:
53:36:c1:b4:84:d3:97:8c:07:99:08:2f:49:e7:29:
6d:cb:17:44:99:33:cd:38:36:0d:f0:fd:ad:d1:e9:
b2:55:f3:09:06:e5:41:a3:4a:9d:3a:f9:28:4a:f8:
d8:2a:ad:2c:1c:ff:0e:4c:7e:e5:1d:bb:c7:d2:65:
51:cd:12:c2:7e:3a:89:2c:27:73:d2:13:d0:48:24:
aa:14:5f:f7:a2:0c:9f:88:27:47:4c:48:a8:10:56:
78:c9:a3:50:d5:30:54:2f:14:bd:a4:0b:78:37:6d:
8c:70:99:bd:26:46:fc:14:2a:25:a2:d1:00:f1:64:
5f:70:c6:0d:ba:cb:9f:84:df:16:9c:c8:be:6f:3b:
71:59:63:9a:3d:a7:56:1b:6a:90:1a:c3:06:6b:69:
fe:16:fe:7d:95:b9:b2:37:8e:47:29:d4:46:77:0a:
da:88:52:9a:d0:a8:41:54:12:0d:c1:51:fa:d1:39:
32:86:88:25:19:7c:fa:51:41:6a:f2:b7:4a:6e:f4:
f9:51:95:c4:79:26:d8:28:fc:37:50:ed:f2:f0:58:
61:39:2b:15:f6:70:d2:bc:90:0e:73:19:6a:59:e9:
2c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:81:F8:09:ED:3E:93:EC:2F:AA:04:47:D2:2E:65:8B:70:60:AE:22
X509v3 Authority Key Identifier:
keyid:91:2F:16:9F:C7:44:CB:E8:95:A9:F8:5E:DA:B7:96:D4:AC:70:00:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kS8Wn8dEy-iVqfhe2reW1KxwACk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/TYH4Ce0-k-wvqgRH0i5li3BgriI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.124.0/22
185.184.232.0/22
IPv6:
2a0b:4380::/32
Signature Algorithm: sha256WithRSAEncryption
1e:d8:aa:a7:d0:e6:09:11:12:36:cd:d7:2a:49:82:81:a1:23:
b7:c0:e8:fb:88:9b:34:54:e4:27:23:9b:04:66:55:3d:2c:90:
6b:b9:1e:28:3e:9c:c1:52:fa:99:52:99:59:2a:dd:33:b5:68:
41:c3:60:2e:ec:d8:d0:8b:c2:2b:4c:b7:5d:13:a9:db:e5:24:
7c:af:b1:76:c4:50:02:cf:f7:26:ba:47:34:54:5f:80:42:cd:
1f:52:31:11:c1:61:88:4e:33:ae:42:fa:28:9e:ef:51:d1:c1:
de:65:31:c7:7b:ba:ed:e0:31:0e:f8:a6:d7:68:9c:ab:5d:ba:
90:22:8d:62:d6:9c:d1:7d:66:9c:42:aa:c1:9c:60:52:91:b8:
b8:e0:e9:ce:51:1b:67:4a:c1:43:b1:17:14:b9:ec:15:0d:4e:
ad:d6:8a:a2:67:e1:ec:75:0f:b8:74:df:ed:29:10:ea:d0:10:
21:3b:1e:98:74:22:65:f2:7c:56:6b:78:d0:4a:b5:77:04:b6:
93:72:22:93:5c:52:c9:d3:1d:c2:74:b8:0e:48:80:35:69:4b:
3e:bc:1d:7f:4b:12:b7:09:7e:0b:5e:a4:e8:ac:f1:0d:10:40:
ce:73:f8:0d:9d:2a:80:51:69:f7:81:09:c5:33:a4:b4:c0:4e:
e2:79:55:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:32:15 2025 by rpki-client