Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/tjboCeupGoWMhzNMAbe1acyZSfo.roa
File: tjboCeupGoWMhzNMAbe1acyZSfo.roa (raw, json)
Hash identifier: 4a1e4ZJ2rm6Y1i2yYMJDPx5U9pmumE35uvRPVX+uXuM=
Subject key identifier: B6:36:E8:09:EB:A9:1A:85:8C:87:33:4C:01:B7:B5:69:CC:99:49:FA
Certificate issuer: /CN=f674f0c8d16cbb510bba1fe3ac4685eee356f8e7
Certificate serial: 01941FFA8A656412E237C09E3AE830C690C4
Authority key identifier: F6:74:F0:C8:D1:6C:BB:51:0B:BA:1F:E3:AC:46:85:EE:E3:56:F8:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/tjboCeupGoWMhzNMAbe1acyZSfo.roa
Signing time: Wed 01 Jan 2025 03:48:20 +0000
ROA not before: Wed 01 Jan 2025 03:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215667
IP address blocks: 2a05:fd00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:8a:65:64:12:e2:37:c0:9e:3a:e8:30:c6:90:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f674f0c8d16cbb510bba1fe3ac4685eee356f8e7
Validity
Not Before: Jan 1 03:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b636e809eba91a858c87334c01b7b569cc9949fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c5:24:91:38:70:f5:40:23:41:0d:7c:cc:f6:
62:99:5b:9d:b0:05:3b:d6:c3:24:0d:56:d1:d6:e2:
ad:22:c6:97:c8:b3:c6:22:c1:d4:1d:17:f7:8b:0a:
b0:e6:59:35:0b:af:fb:6e:4d:e1:23:99:5c:7e:64:
b7:3d:07:74:84:46:2c:75:34:9b:1c:94:ab:b5:68:
21:c7:00:90:fd:94:a3:8a:11:22:1d:f0:b3:4e:24:
7a:a7:aa:ce:db:89:16:8a:a1:46:2e:4d:cc:63:c4:
30:8c:45:75:c7:b2:75:99:53:77:63:57:86:a9:2b:
94:e8:8a:74:ae:f2:5f:e8:09:87:0b:b6:f0:dc:8e:
79:76:a5:07:51:f6:1c:8b:97:a0:c5:c6:25:0a:99:
11:b4:1c:cf:a9:56:c8:49:aa:1a:20:8c:0f:fc:88:
ae:80:1a:fe:bf:68:6a:9d:c3:31:13:7f:fc:4e:5f:
67:45:0e:6a:db:fe:98:3a:57:0c:74:e8:40:cc:a4:
27:01:2c:3b:d3:03:3f:21:4b:93:28:0e:b8:b0:42:
4d:ad:73:7e:fa:ba:28:f5:c1:41:18:44:b5:9c:e3:
2e:89:78:5e:fd:29:1e:45:4c:6f:8b:83:ee:8e:fa:
ee:c5:0a:b6:5b:5a:93:51:cc:3f:b0:93:b7:b4:8e:
68:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:36:E8:09:EB:A9:1A:85:8C:87:33:4C:01:B7:B5:69:CC:99:49:FA
X509v3 Authority Key Identifier:
keyid:F6:74:F0:C8:D1:6C:BB:51:0B:BA:1F:E3:AC:46:85:EE:E3:56:F8:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/tjboCeupGoWMhzNMAbe1acyZSfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:fd00::/29
Signature Algorithm: sha256WithRSAEncryption
03:71:1b:c9:c5:1b:92:7f:5c:6a:3c:56:b3:86:cb:d2:9f:16:
da:e1:2f:2b:16:87:53:24:ce:ec:92:fe:69:03:c0:92:ce:b2:
89:55:44:7b:e4:45:e9:95:9b:db:fe:4a:c7:82:33:7c:17:ca:
42:dd:fe:2b:4e:5f:cb:b5:72:48:06:e4:da:6b:83:38:f4:3e:
34:1e:c8:fa:a4:56:a4:c4:b2:9a:7f:f3:6f:29:3d:e8:95:fd:
0c:72:93:ad:5e:37:ae:9f:29:26:7b:db:53:8c:78:44:54:2b:
8b:45:51:b6:d6:f2:b2:26:5e:78:9c:df:67:58:f5:6f:19:e2:
04:fb:4a:61:c3:24:04:93:84:d9:88:dc:c2:95:9c:0c:26:2f:
b9:da:da:7d:fa:7a:1a:6d:7d:92:d6:43:67:54:a6:5e:46:49:
ab:68:a7:6d:7f:c4:08:7a:f1:39:96:fc:5d:f6:8a:88:10:c0:
19:21:be:96:43:06:2e:da:0d:e9:a5:47:df:b0:0d:3f:4d:3c:
ca:93:f7:88:45:1a:96:51:5d:d9:e8:2e:c0:3d:e7:36:2d:49:
12:dc:1e:ee:f4:33:4e:f0:2d:7f:93:cf:2e:0d:81:34:8f:01:
cb:98:6e:f6:41:09:66:35:f2:6b:79:4b:10:08:33:22:ac:a1:
38:3e:bb:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:55:39 2025 by rpki-client