Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/JlKwrg5m2lqERiKY6JmlhVBin6Y.roa
File: JlKwrg5m2lqERiKY6JmlhVBin6Y.roa (raw, json)
Hash identifier: BkRh9N3Osfkv0XYuGUi4VGfe9yFTNu672Q4bahAacS8=
Subject key identifier: 26:52:B0:AE:0E:66:DA:5A:84:46:22:98:E8:99:A5:85:50:62:9F:A6
Certificate issuer: /CN=b3749ea1b9979bff2cd3066948f835dd54cedec0
Certificate serial: 01942521B66B93626DB91EA46F40CDAF8C48
Authority key identifier: B3:74:9E:A1:B9:97:9B:FF:2C:D3:06:69:48:F8:35:DD:54:CE:DE:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/JlKwrg5m2lqERiKY6JmlhVBin6Y.roa
Signing time: Thu 02 Jan 2025 03:49:13 +0000
ROA not before: Thu 02 Jan 2025 03:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39591
IP address blocks: 185.181.140.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:b6:6b:93:62:6d:b9:1e:a4:6f:40:cd:af:8c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3749ea1b9979bff2cd3066948f835dd54cedec0
Validity
Not Before: Jan 2 03:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2652b0ae0e66da5a84462298e899a58550629fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:06:2a:fe:a3:f7:a2:6c:5a:89:dd:e7:a0:ab:
20:da:bc:21:6c:56:66:25:67:c1:b5:b3:86:aa:14:
dd:8d:5d:8b:5b:5b:fb:cf:d3:b1:45:eb:00:01:bf:
63:7b:c0:f5:68:c2:6d:60:c1:bb:1b:33:4a:73:fe:
ff:c9:c3:11:47:33:bf:fd:ea:36:97:51:1f:17:6c:
d2:b0:b7:4d:bc:85:3f:fc:ff:c6:3d:dd:3a:df:65:
01:73:7d:3e:2d:96:46:64:5a:90:ed:fa:2c:8f:4e:
41:02:4f:97:9f:d1:15:73:91:42:7a:66:bd:82:5c:
aa:38:56:90:e2:dc:a8:41:3d:a1:c9:27:ff:b6:ca:
c9:b4:4a:31:87:28:03:f6:04:d1:ce:05:88:23:52:
f4:ea:01:ad:12:6a:76:bc:61:71:5f:e2:b3:34:2e:
b2:da:5a:f6:35:a2:83:7d:9e:b3:53:91:00:00:44:
b3:9e:31:c8:57:98:58:67:49:0d:5a:5f:26:f8:25:
3c:eb:97:2c:b2:e1:17:90:b9:39:20:79:79:bd:a8:
ac:ef:6f:f1:4a:32:bf:e7:30:56:c6:c8:e5:71:68:
6b:9c:29:af:0a:79:7c:33:25:1f:82:4b:c8:6b:8c:
a8:dc:16:19:ea:b9:96:fc:fa:74:45:f9:8e:78:b1:
26:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:52:B0:AE:0E:66:DA:5A:84:46:22:98:E8:99:A5:85:50:62:9F:A6
X509v3 Authority Key Identifier:
keyid:B3:74:9E:A1:B9:97:9B:FF:2C:D3:06:69:48:F8:35:DD:54:CE:DE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/JlKwrg5m2lqERiKY6JmlhVBin6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.140.0/22
Signature Algorithm: sha256WithRSAEncryption
30:b6:e5:72:64:cf:8f:ec:7d:7f:e3:99:07:17:db:46:87:3f:
68:67:85:10:4a:f1:c1:a6:2b:6d:d8:bf:87:61:cf:5e:be:6d:
1a:a0:ac:9e:c2:ab:8e:fb:e7:c4:d3:00:ff:a4:0c:cc:c0:57:
be:92:8f:eb:52:5f:0b:02:2c:48:ef:2a:86:1b:16:30:62:b5:
d0:cc:c6:46:2f:0f:03:bd:77:b2:39:10:55:cf:9d:fb:c1:df:
03:35:f2:f3:f0:5d:18:d3:66:36:b8:1b:47:0c:19:10:6e:77:
40:a9:8e:41:6e:4e:ca:bf:9e:44:e2:22:cf:e6:09:bc:4e:84:
1d:9a:bb:03:32:17:fd:fe:70:47:c6:a9:28:c3:61:2b:f2:66:
3b:6e:1e:5d:98:00:79:31:e6:21:4f:38:de:ee:81:33:2d:31:
6a:10:cf:ec:59:89:c1:37:01:5b:f7:93:9d:7f:70:ec:c5:ff:
19:53:12:4f:08:aa:98:8e:f5:e0:2c:b8:f6:19:07:51:68:ab:
cc:11:99:67:09:94:79:a4:28:b4:ba:9b:e4:6d:f7:a6:c4:c3:
b2:57:33:f7:0a:da:80:4c:94:f6:fc:b9:43:17:a3:81:0f:53:
4a:37:21:3b:24:10:7d:ee:68:ea:84:ad:d8:9d:eb:13:21:f2:
90:c4:68:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 10:42:09 2025 by rpki-client