Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/TKLwlj_hhD4ChnDkZIEH511OIGQ.roa
File: TKLwlj_hhD4ChnDkZIEH511OIGQ.roa (raw, json)
Hash identifier: d5LelJw+wBPleYzumiiB1DR6XbgaSt39j02f16QfxpA=
Subject key identifier: 4C:A2:F0:96:3F:E1:84:3E:02:86:70:E4:64:81:07:E7:5D:4E:20:64
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 019421B1AD42125AB44DF57D42D14F311474
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/TKLwlj_hhD4ChnDkZIEH511OIGQ.roa
Signing time: Wed 01 Jan 2025 11:47:59 +0000
ROA not before: Wed 01 Jan 2025 11:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198100
IP address blocks: 62.72.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:ad:42:12:5a:b4:4d:f5:7d:42:d1:4f:31:14:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 1 11:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ca2f0963fe1843e028670e4648107e75d4e2064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d7:c8:69:9a:2e:31:e1:66:87:71:52:01:f9:
b5:6d:b3:95:ce:c7:12:71:11:4b:2e:6d:f6:0e:b5:
6c:fe:7b:c3:17:35:31:f4:25:86:12:33:25:ea:18:
05:46:2f:86:ef:4f:c0:35:04:d2:d1:e2:1f:11:ec:
7c:ad:b8:0d:13:ce:f5:f6:a9:72:8c:13:ab:3b:f0:
02:dd:7d:8d:55:87:e7:ea:11:da:4c:bd:b6:b5:9f:
cb:34:a2:8b:07:8b:b0:1a:7b:09:c7:2e:60:fc:fd:
e7:b2:ee:ff:9d:3f:59:c5:a6:b7:e6:05:1b:a0:09:
96:c5:7f:dc:3c:82:a8:66:30:ff:82:64:63:83:b2:
00:50:16:7f:0d:1f:ee:fc:4a:bf:4b:cd:cb:f1:df:
b0:66:79:05:45:cb:ff:0b:7c:c2:c5:9a:2f:5c:f0:
9c:42:f5:bf:1d:93:b3:84:f0:db:4e:1a:28:e4:7d:
ab:05:05:11:9d:26:39:1e:0a:78:f6:f8:70:65:4b:
bd:c6:60:e9:86:7e:3c:df:03:a6:49:b9:dc:f3:b1:
81:31:ac:c9:01:50:f2:08:f3:9c:83:be:65:a9:2b:
b4:e6:a5:ae:70:40:89:33:52:59:43:ae:cd:38:e9:
3a:78:ff:14:bf:18:55:9a:39:c4:ce:17:d6:78:ea:
0b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A2:F0:96:3F:E1:84:3E:02:86:70:E4:64:81:07:E7:5D:4E:20:64
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/TKLwlj_hhD4ChnDkZIEH511OIGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.163.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:10:63:78:d8:58:66:9c:d4:e6:cc:61:6b:39:89:9d:dc:bb:
5d:90:d0:fc:e0:47:7a:88:fd:24:5b:44:97:43:37:58:47:87:
18:ab:e3:d7:23:c8:4e:f0:6f:40:69:86:fd:c8:a2:fe:1f:03:
b2:c9:db:e5:6a:94:c9:fb:4b:22:b3:72:41:b2:2e:c4:fd:f8:
eb:97:5b:3b:dd:2e:85:5f:f9:22:b1:1e:96:47:f4:af:f6:b5:
d2:eb:74:a5:33:9b:73:62:27:bc:5d:74:6a:d8:db:ff:41:7b:
9e:de:ee:e3:e3:7e:79:6e:57:8b:30:f4:2e:08:39:d7:e1:04:
14:bd:72:8b:bb:30:7f:33:6e:c1:42:6e:da:69:57:1a:40:63:
33:fc:9c:95:9f:5a:e7:c3:5e:94:90:b0:b8:c5:73:64:6e:1a:
70:cb:96:9c:0b:c0:ea:41:b6:71:73:77:6f:a4:b5:29:7d:3d:
88:88:aa:09:34:c4:cf:d7:7a:50:fa:b9:0a:7c:fc:62:27:e3:
0a:ab:02:97:b7:75:7f:7c:83:8f:88:ea:87:fa:b2:5b:64:45:
15:54:38:fe:73:36:8e:eb:e5:cb:b2:af:c8:11:dd:09:56:85:
64:aa:48:93:78:4e:a0:50:04:66:64:be:7a:87:5b:95:60:4e:
2f:0c:fd:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:56 2025 by rpki-client