Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/491925-df90-4014-8caf-5aa367d6ab6e/1/JLn2-fTGyC2xpSevRCFHgEEXDMM.roa
File: JLn2-fTGyC2xpSevRCFHgEEXDMM.roa (raw, json)
Hash identifier: FRV3MQqTud+Qm1Qqb2d3CxKErVFv6q4kbbzR6kYGMOc=
Subject key identifier: 24:B9:F6:F9:F4:C6:C8:2D:B1:A5:27:AF:44:21:47:80:41:17:0C:C3
Certificate issuer: /CN=265e85f8262888b54a849bdcf4cec50316911a08
Certificate serial: 01942143DF9C7461B149E984D2F2538EA421
Authority key identifier: 26:5E:85:F8:26:28:88:B5:4A:84:9B:DC:F4:CE:C5:03:16:91:1A:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/491925-df90-4014-8caf-5aa367d6ab6e/1/JLn2-fTGyC2xpSevRCFHgEEXDMM.roa
Signing time: Wed 01 Jan 2025 09:48:03 +0000
ROA not before: Wed 01 Jan 2025 09:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199548
IP address blocks: 185.64.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/491925-df90-4014-8caf-5aa367d6ab6e/1/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/491925-df90-4014-8caf-5aa367d6ab6e/1/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:df:9c:74:61:b1:49:e9:84:d2:f2:53:8e:a4:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=265e85f8262888b54a849bdcf4cec50316911a08
Validity
Not Before: Jan 1 09:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24b9f6f9f4c6c82db1a527af4421478041170cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:b9:14:f7:c1:31:2f:8a:ee:a3:54:9a:e7:7b:
2b:d6:fc:3f:6b:23:3d:fc:5d:b2:42:b5:39:03:02:
ea:f5:1b:01:7d:2a:bc:0f:59:d3:0e:30:3e:ce:78:
9b:0c:88:39:af:d1:67:80:47:a3:6d:0a:1c:ca:80:
29:af:4e:5a:06:6c:ed:bb:5a:cf:f1:db:f8:2c:78:
55:ef:37:90:6f:28:df:b1:1a:c8:89:bd:51:3c:57:
60:14:46:33:53:8d:01:29:6e:24:b3:bd:86:a8:6a:
d5:37:65:f0:96:ca:56:81:2c:82:73:9d:e8:ae:82:
17:85:3e:a1:af:71:23:b0:e3:76:9d:86:5c:ba:e0:
5c:29:07:95:e4:1e:c1:86:6d:90:f2:82:ad:8f:cd:
e2:2d:50:af:e1:48:31:56:9e:ae:f6:9e:43:52:47:
bd:27:40:2d:e0:cf:1f:24:62:aa:31:fc:64:63:0a:
d5:dd:09:d1:80:24:1b:ac:f7:21:9d:f1:91:9d:82:
85:e7:08:b5:db:18:fb:1a:ff:64:9c:fc:bb:47:28:
69:1b:d5:f6:23:05:8f:f0:6d:23:74:56:7c:86:df:
dd:d9:f5:ca:d3:43:8a:9f:fd:cc:da:31:9c:83:f8:
ec:f1:ce:25:2a:63:9f:70:70:b8:d3:8b:23:6c:ee:
6c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B9:F6:F9:F4:C6:C8:2D:B1:A5:27:AF:44:21:47:80:41:17:0C:C3
X509v3 Authority Key Identifier:
keyid:26:5E:85:F8:26:28:88:B5:4A:84:9B:DC:F4:CE:C5:03:16:91:1A:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/491925-df90-4014-8caf-5aa367d6ab6e/1/JLn2-fTGyC2xpSevRCFHgEEXDMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/491925-df90-4014-8caf-5aa367d6ab6e/1/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.64.77.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:68:44:8c:ac:8b:37:f4:9d:69:54:58:7c:e6:28:f7:4e:3d:
ad:ed:2b:7b:c0:70:a8:85:48:35:46:8d:42:57:b1:a8:0c:74:
00:19:da:d9:6c:f0:5d:11:8a:5f:6b:77:31:2a:27:45:90:e3:
1a:af:1f:26:1e:a0:6f:4c:01:c1:26:f0:e3:66:bc:31:40:58:
74:d3:96:58:d7:43:3d:f1:34:8b:fa:02:2e:d6:78:d9:11:6b:
96:84:5b:a7:7d:3b:79:b7:fd:b7:45:5b:0b:ca:dc:fb:5e:f0:
30:bc:94:9f:15:cc:1f:b0:53:35:93:7a:ec:a7:a3:53:73:f8:
a4:6f:0a:58:b3:06:60:76:22:d8:b5:4a:37:82:2c:bd:54:67:
ef:06:ff:88:b6:25:a2:aa:c4:57:1d:d4:14:c4:2c:b0:97:1c:
56:0d:a7:43:b6:3d:c6:dd:ec:3e:bb:ae:a2:7d:d3:ca:67:ee:
60:b9:f4:94:3e:ad:98:04:b1:2e:80:9b:8f:63:4a:62:ab:a4:
e3:11:63:78:a4:98:50:da:57:33:e6:3b:ea:b1:65:39:f7:08:
70:ec:4e:16:a8:33:7f:18:24:ec:30:c8:5c:68:90:ab:5d:75:
67:df:d3:f9:f0:62:86:5b:a6:1b:c6:d5:8c:cb:f1:74:3f:68:
3e:cd:cf:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:54:16 2025 by rpki-client