Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/tnLXZpAcdsupjiIll_iKlzExQoQ.roa
File: tnLXZpAcdsupjiIll_iKlzExQoQ.roa (raw, json)
Hash identifier: mDoarqNRra8hpVT2LOO1TVGYi/0LvJxSxAQ/O0wAR7o=
Subject key identifier: B6:72:D7:66:90:1C:76:CB:A9:8E:22:25:97:F8:8A:97:31:31:42:84
Certificate issuer: /CN=8e303cc2af838789652771c345e07df3e80d544f
Certificate serial: 01942747409DC6C31E400A8CF51F6E4DA54E
Authority key identifier: 8E:30:3C:C2:AF:83:87:89:65:27:71:C3:45:E0:7D:F3:E8:0D:54:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjA8wq-Dh4llJ3HDReB98-gNVE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/tnLXZpAcdsupjiIll_iKlzExQoQ.roa
Signing time: Thu 02 Jan 2025 13:49:28 +0000
ROA not before: Thu 02 Jan 2025 13:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21155
IP address blocks: 193.186.36.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjA8wq-Dh4llJ3HDReB98-gNVE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:40:9d:c6:c3:1e:40:0a:8c:f5:1f:6e:4d:a5:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e303cc2af838789652771c345e07df3e80d544f
Validity
Not Before: Jan 2 13:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b672d766901c76cba98e222597f88a9731314284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b3:d7:17:c1:5d:a1:80:3e:0f:f8:66:5d:6a:
63:50:e7:8c:9a:a5:d4:9d:74:91:81:cb:85:98:6f:
bb:dd:fd:a9:ae:d7:11:3f:da:e9:88:02:f0:b3:54:
08:85:f3:71:58:dd:f2:fc:e8:0d:1b:c9:64:c7:25:
2d:ef:4e:96:bf:43:ef:d7:5a:7c:81:61:11:4b:d7:
d3:cb:b7:4e:84:0a:4a:6c:10:a3:f2:5d:51:ed:b5:
7c:54:6c:59:fd:ae:b6:49:d4:cb:f6:fc:e3:eb:97:
97:69:b3:87:f7:f7:79:50:bc:2f:df:05:21:86:2b:
96:23:12:b2:df:1a:2c:06:fe:bd:12:26:8e:9f:52:
1f:fd:f2:3b:b9:63:04:ed:f6:97:86:0c:a4:d5:e9:
19:cc:30:98:3c:67:89:98:35:41:1b:d2:63:a1:4f:
bb:fb:29:3c:a0:4c:49:04:ab:09:b5:85:cb:a2:54:
9d:a2:38:62:fb:b4:5a:13:ff:44:c6:cf:f7:02:ab:
a4:5a:52:8f:c4:9d:8a:1a:61:f9:fb:3b:6a:74:90:
70:ad:a2:13:71:9b:04:fd:1d:7d:c8:62:1d:4c:88:
8f:33:de:94:70:0b:46:10:93:81:b8:7b:c8:ce:ea:
9b:54:58:41:bf:74:05:f7:43:95:dd:82:97:bb:fa:
8b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:72:D7:66:90:1C:76:CB:A9:8E:22:25:97:F8:8A:97:31:31:42:84
X509v3 Authority Key Identifier:
keyid:8E:30:3C:C2:AF:83:87:89:65:27:71:C3:45:E0:7D:F3:E8:0D:54:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjA8wq-Dh4llJ3HDReB98-gNVE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/tnLXZpAcdsupjiIll_iKlzExQoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.186.36.0/23
Signature Algorithm: sha256WithRSAEncryption
ba:fe:c3:e8:ad:55:0d:92:df:0d:dc:f2:58:e0:2d:a9:25:cc:
9d:e5:f5:75:e5:27:a5:27:86:0c:63:87:90:b1:69:f9:11:73:
76:ac:ed:31:d4:8c:a1:93:96:c8:a0:0c:8c:b5:9c:d7:2d:e1:
c8:24:09:be:e8:78:17:24:30:3d:e8:a6:10:54:f9:4a:35:d8:
3a:3e:f4:1a:42:97:89:9d:1e:c5:82:65:b7:6b:bf:8e:f8:22:
b2:ab:4f:36:dd:83:0b:8d:9e:bd:78:d6:c9:be:e7:41:81:0f:
78:14:c2:25:7c:72:1c:17:b0:c5:f3:b9:5c:9e:79:8d:f9:0c:
e8:44:f0:b2:f1:75:38:c4:ff:2f:b7:ec:68:5e:48:9f:54:cb:
ed:3b:9a:fe:9e:91:39:17:d8:a8:0f:c1:be:d9:e0:50:59:9d:
83:5c:42:6c:8f:a9:24:be:25:5d:54:4a:6b:a1:8e:06:d0:3c:
5c:48:32:0b:e1:ec:bb:8f:80:ae:40:12:0e:be:3d:e1:ee:99:
c0:f8:19:80:3b:82:ef:18:e9:f9:f6:f6:5d:49:a2:d7:b3:81:
63:ac:dc:9f:a4:b4:e7:3b:86:6b:c6:e7:bb:74:dc:61:b1:d9:
41:4a:72:de:85:e3:e2:6c:7b:75:20:ae:f6:e3:c4:b2:39:99:
14:53:95:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:57 2025 by rpki-client