Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/JkkdgtULLN5YFOoQYdjnkQtxRiA.roa
File: JkkdgtULLN5YFOoQYdjnkQtxRiA.roa (raw, json)
Hash identifier: WC9ErWl9RKhrEYqpczI/9k3EhKFlr59+yinuHTpWjE8=
Subject key identifier: 26:49:1D:82:D5:0B:2C:DE:58:14:EA:10:61:D8:E7:91:0B:71:46:20
Certificate issuer: /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Certificate serial: 0194221F6DCF9EA9D22632AA3DD1EF047CE8
Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/JkkdgtULLN5YFOoQYdjnkQtxRiA.roa
Signing time: Wed 01 Jan 2025 13:47:52 +0000
ROA not before: Wed 01 Jan 2025 13:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20765
IP address blocks: 185.126.35.0/27 maxlen: 27
185.126.35.32/27 maxlen: 27
185.126.35.64/28 maxlen: 28
185.126.35.80/28 maxlen: 28
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:6d:cf:9e:a9:d2:26:32:aa:3d:d1:ef:04:7c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Validity
Not Before: Jan 1 13:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26491d82d50b2cde5814ea1061d8e7910b714620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cf:05:09:e2:0f:05:e2:4f:76:06:e2:2d:ff:
6d:72:3b:1c:b7:aa:41:c8:6a:7f:2b:7f:a9:56:cb:
a8:44:1d:dd:26:37:26:0b:cb:e4:d3:e0:7f:93:33:
29:f9:23:a8:a8:9e:2d:40:73:e9:9a:98:77:44:3c:
2a:63:45:64:c3:d9:bd:2d:d7:cb:29:01:f4:c5:26:
90:05:20:fd:9b:7f:63:d6:ea:aa:34:52:64:fc:42:
ae:31:c8:14:b7:26:61:3c:d4:cd:f1:67:d7:72:db:
0c:7b:8f:32:a3:2e:ea:0f:de:d2:93:17:5d:64:57:
32:81:4b:5c:44:e0:67:c7:ea:82:27:7a:ea:21:5c:
aa:95:12:0d:e2:a0:42:9b:11:2d:2e:4b:96:d3:3a:
9b:86:33:9e:e3:d3:20:d9:5a:91:65:fd:a5:fa:e7:
a7:f5:3d:b7:bc:95:b1:3e:14:60:69:b5:f4:8a:39:
23:2f:ae:2e:79:76:9f:b5:71:4a:25:39:72:29:bc:
98:51:5b:ba:b3:47:1d:c5:0b:4a:15:71:03:52:d8:
77:4e:f7:b0:30:9e:1a:48:be:71:c4:a9:3d:c0:07:
1e:95:d6:c4:de:bc:4d:2f:52:d9:04:b4:19:1b:dd:
d7:44:c3:ad:70:d7:65:6c:af:2e:20:3e:87:87:cf:
7e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:49:1D:82:D5:0B:2C:DE:58:14:EA:10:61:D8:E7:91:0B:71:46:20
X509v3 Authority Key Identifier:
keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/JkkdgtULLN5YFOoQYdjnkQtxRiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.35.0-185.126.35.95
Signature Algorithm: sha256WithRSAEncryption
03:0e:ac:a1:0d:d6:f5:18:5c:21:23:e0:7f:64:2d:a0:77:27:
88:da:84:48:e9:68:df:e7:c9:5c:f8:d0:8e:14:db:e2:1f:6a:
8f:61:ba:c7:8f:6e:1a:b2:fa:b6:b4:47:03:08:30:ca:c3:50:
04:5c:b8:a1:f3:e4:1e:a4:48:cb:f6:7c:70:d5:a1:0e:e7:53:
bf:f8:59:78:59:68:50:85:58:bb:70:65:e8:5c:ff:7f:9c:8f:
84:32:1c:ac:33:57:61:76:9d:cf:ab:54:98:65:88:55:70:09:
80:ba:3a:35:cf:1d:ea:9f:05:e1:1e:0c:ca:65:13:c6:78:f7:
59:c7:a0:b6:7b:73:e5:a0:dd:82:32:19:9f:c8:b2:bf:54:79:
7d:d9:95:62:74:e1:8e:29:94:f1:9b:83:72:37:c9:a5:93:b3:
22:67:ce:34:3b:8d:42:ac:82:37:de:18:f6:4b:9e:b7:36:29:
41:52:8b:a7:57:a1:c5:94:90:1e:7f:08:66:73:71:a7:a9:15:
86:da:be:15:c1:cb:75:e9:b7:72:f1:9e:cd:7e:f2:db:1d:4e:
c7:92:c8:0c:5e:e7:2e:72:4c:c8:ba:fb:82:5c:c7:c8:13:c8:
03:a4:79:ac:3f:9e:cf:54:87:a4:4a:75:12:d5:ae:21:f3:6d:
21:d2:14:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:19:10 2025 by rpki-client