Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/Jg3tAly607eUyr5ul8qsb9iYCbk.roa
File: Jg3tAly607eUyr5ul8qsb9iYCbk.roa (raw, json)
Hash identifier: E+on8KClaRu9XGuipMYBlTB9A2oc11upYWwt1aQCGuI=
Subject key identifier: 26:0D:ED:02:5C:BA:D3:B7:94:CA:BE:6E:97:CA:AC:6F:D8:98:09:B9
Certificate issuer: /CN=6c890ef6a88ab33fa5a206760768dd3251c238af
Certificate serial: 0194228DE66C2C97C380E4A364A3B0936D62
Authority key identifier: 6C:89:0E:F6:A8:8A:B3:3F:A5:A2:06:76:07:68:DD:32:51:C2:38:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bIkO9qiKsz-logZ2B2jdMlHCOK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/Jg3tAly607eUyr5ul8qsb9iYCbk.roa
Signing time: Wed 01 Jan 2025 15:48:32 +0000
ROA not before: Wed 01 Jan 2025 15:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41652
IP address blocks: 185.212.224.0/22 maxlen: 22
2a0b:7cc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bIkO9qiKsz-logZ2B2jdMlHCOK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:e6:6c:2c:97:c3:80:e4:a3:64:a3:b0:93:6d:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c890ef6a88ab33fa5a206760768dd3251c238af
Validity
Not Before: Jan 1 15:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=260ded025cbad3b794cabe6e97caac6fd89809b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1b:4c:63:07:b3:58:de:73:ac:c6:97:96:c3:
df:29:07:d6:93:d1:0f:e2:27:d6:9b:93:d0:78:bd:
a5:2f:ec:49:89:ea:67:c2:ee:f2:b4:c5:89:9b:67:
ca:92:8d:11:cb:82:71:fe:c5:14:ad:2a:f8:99:d4:
3c:f7:81:70:04:f6:c9:c0:f1:ab:fc:6c:61:88:fd:
5e:36:24:75:27:97:5d:ef:92:c9:b4:df:32:4d:1b:
5e:f3:5c:23:34:c3:ec:03:a1:74:5f:f8:b1:64:60:
b3:6f:49:16:69:a1:cc:cf:fd:5e:60:f9:f7:1f:6f:
8a:2e:b4:ef:c4:c6:2a:d1:74:45:40:c8:c4:72:84:
9a:30:90:3c:a3:45:46:c9:47:7a:54:c2:ec:cb:b6:
02:04:1a:bd:e5:23:dc:a7:ea:91:39:44:3d:c0:9d:
fe:87:4b:12:17:7c:ff:2e:ec:04:44:c5:94:48:2f:
7a:6a:4f:9f:86:dd:f7:c2:ae:84:7a:de:94:8d:b5:
cd:08:2e:aa:20:7a:88:10:90:a2:35:13:45:a0:d4:
99:13:c7:a4:82:3a:0a:c9:bf:60:65:f2:67:f7:ea:
4d:ff:61:f2:06:cc:82:bf:62:47:87:ee:78:2e:e3:
8e:dc:c9:85:ae:20:15:26:9a:5e:e7:31:58:7e:06:
2e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:0D:ED:02:5C:BA:D3:B7:94:CA:BE:6E:97:CA:AC:6F:D8:98:09:B9
X509v3 Authority Key Identifier:
keyid:6C:89:0E:F6:A8:8A:B3:3F:A5:A2:06:76:07:68:DD:32:51:C2:38:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIkO9qiKsz-logZ2B2jdMlHCOK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/Jg3tAly607eUyr5ul8qsb9iYCbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.224.0/22
IPv6:
2a0b:7cc0::/29
Signature Algorithm: sha256WithRSAEncryption
9f:f5:7a:1f:38:06:7d:66:b7:3f:f8:d4:c8:ed:31:e0:8e:8a:
a6:85:2a:af:38:ae:96:63:b8:60:4d:ef:87:87:fb:c5:aa:21:
7c:87:5b:fb:4e:b3:96:23:de:38:a7:bb:3f:c8:5e:55:e0:fb:
ba:74:46:f3:7a:6b:01:1b:b1:7c:7c:f8:c5:de:b6:34:43:a2:
15:e7:df:32:31:ee:d4:21:6d:3b:6f:71:3f:e3:2b:d1:4c:ec:
d0:04:7c:cf:ab:c2:57:76:43:c6:c5:c5:bb:dc:22:6b:4e:40:
98:5f:a5:e9:92:34:e5:33:36:ca:e5:67:25:40:e4:a6:88:e4:
0d:9b:b8:32:43:57:ea:31:3b:93:8a:ac:52:c4:5d:80:60:2b:
09:df:0e:55:e2:62:be:30:12:50:1b:9c:70:9e:3f:21:a1:80:
98:8a:75:d7:52:33:cc:46:d2:83:ac:82:38:9f:fe:29:8b:b4:
ef:95:a1:e3:c0:87:d0:0d:f1:fc:74:ec:c6:9e:4e:25:51:aa:
6e:19:d3:d4:11:64:b4:eb:cf:30:77:ed:c3:cb:95:b9:d8:2d:
be:8a:1e:1e:94:90:7e:e0:b2:96:96:10:71:15:71:fb:4e:5a:
61:10:a2:e9:27:88:01:d7:d4:9a:de:e0:5b:64:2a:8e:79:5f:
af:a6:c4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:02:08 2025 by rpki-client