Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/tjlBefyTUPW2ocj52DG8SScrNVs.roa
File: tjlBefyTUPW2ocj52DG8SScrNVs.roa (raw, json)
Hash identifier: i2v8f90/aacPA+KsrniOR03Tuhb0f1sC6zK1p2LnGA8=
Subject key identifier: B6:39:41:79:FC:93:50:F5:B6:A1:C8:F9:D8:31:BC:49:27:2B:35:5B
Certificate issuer: /CN=25292652a9ecd9c6bdc8264b9948df6212207624
Certificate serial: 0194244521966985CE39E388296CC6E84711
Authority key identifier: 25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/tjlBefyTUPW2ocj52DG8SScrNVs.roa
Signing time: Wed 01 Jan 2025 23:48:17 +0000
ROA not before: Wed 01 Jan 2025 23:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201698
IP address blocks: 185.64.156.0/22 maxlen: 22
2a04:f8c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:21:96:69:85:ce:39:e3:88:29:6c:c6:e8:47:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25292652a9ecd9c6bdc8264b9948df6212207624
Validity
Not Before: Jan 1 23:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6394179fc9350f5b6a1c8f9d831bc49272b355b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a3:88:30:bc:17:60:fd:de:9c:f6:7d:d8:e3:
78:d8:07:6b:2f:e3:55:6b:9c:a4:38:84:fd:fc:2a:
de:a0:4a:c8:15:b9:df:d8:be:ba:89:97:4d:dd:d1:
df:9d:90:16:44:0f:bf:a3:8f:68:72:41:75:b3:dd:
f7:10:18:2d:07:5d:60:99:5d:49:dc:34:51:32:98:
58:0c:bf:b5:5c:75:7c:d6:a5:73:f0:36:9d:16:54:
c1:83:20:77:7f:fd:df:40:86:fb:58:59:4a:0e:c0:
f6:9e:fa:23:ed:a3:81:20:83:31:8d:8d:a3:57:86:
bf:91:3d:85:e0:8d:c4:1e:0a:4c:e1:67:f1:3c:76:
ee:13:b3:1b:13:8c:03:c9:6b:53:14:3a:1a:bc:42:
8a:0c:6a:a8:59:5a:96:32:5f:7d:1e:26:39:9c:cb:
b2:d3:e2:61:a3:81:ec:9a:ea:17:32:a2:d5:55:32:
e7:73:97:78:15:99:c8:15:36:e7:b9:08:29:8e:9f:
06:27:9b:59:63:50:96:73:7d:87:b1:18:1c:cc:70:
9e:6a:73:8d:7f:65:8f:1b:2e:f9:14:ce:d5:70:9c:
7a:b1:19:78:34:9a:c4:12:5d:17:13:ed:47:a3:ea:
62:3e:0c:5b:e4:25:f5:75:a4:4c:0d:c1:3d:c3:9a:
ba:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:39:41:79:FC:93:50:F5:B6:A1:C8:F9:D8:31:BC:49:27:2B:35:5B
X509v3 Authority Key Identifier:
keyid:25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/tjlBefyTUPW2ocj52DG8SScrNVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.64.156.0/22
IPv6:
2a04:f8c0::/29
Signature Algorithm: sha256WithRSAEncryption
94:fb:62:66:1e:f5:d5:dc:09:da:1d:87:10:bc:34:20:e1:35:
08:1a:47:c8:3b:53:82:99:9e:0d:44:e4:ec:4f:93:6a:6d:15:
c8:5a:af:7a:28:f6:55:11:16:8b:fd:df:d7:5b:dd:a2:93:cf:
65:04:cc:1c:d0:c9:b1:71:ed:d2:2e:11:fe:f1:07:bc:68:e2:
af:47:ba:ec:98:a0:6c:2b:ec:29:5b:ad:76:41:7b:3b:28:ca:
45:88:cc:00:c5:d8:be:ec:ba:30:09:da:bb:f6:e4:6d:e3:7a:
01:e2:9a:83:99:1f:cc:4b:52:a7:4e:88:ea:42:46:b1:f2:14:
52:c1:c6:ea:ef:d7:49:16:9c:f5:1a:07:04:d4:ab:46:d2:d1:
a7:43:05:a8:92:88:f6:47:f9:fe:7c:f0:03:29:2c:24:bb:29:
33:d8:18:7b:0c:e7:93:9d:08:d2:0b:36:dd:fd:07:c2:3e:b3:
e2:02:d5:11:a7:31:0c:96:46:21:01:42:3b:8d:38:08:cb:0a:
eb:2f:c8:cb:63:1d:6a:d4:57:08:ae:61:e0:d9:38:03:85:10:
f3:99:67:6e:f4:57:b6:0b:9a:d2:8a:48:48:31:46:25:ac:ed:
de:1d:24:72:b9:b8:45:9b:ee:d9:e8:82:30:9b:8a:c2:ff:cf:
9e:22:40:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:39 2025 by rpki-client