Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/TjYZVXxKOa8EVyxrnZD7NzmCZdo.roa
File: TjYZVXxKOa8EVyxrnZD7NzmCZdo.roa (raw, json)
Hash identifier: /JIVtM3Gao9wCw2j1cR6n7NvExz/Ot1NMbQjW5Wq054=
Subject key identifier: 4E:36:19:55:7C:4A:39:AF:04:57:2C:6B:9D:90:FB:37:39:82:65:DA
Certificate issuer: /CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Certificate serial: 01942747A6871666F13287AAE4D6BBB6DFE8
Authority key identifier: 0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/TjYZVXxKOa8EVyxrnZD7NzmCZdo.roa
Signing time: Thu 02 Jan 2025 13:49:54 +0000
ROA not before: Thu 02 Jan 2025 13:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64267
IP address blocks: 185.162.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 01:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:a6:87:16:66:f1:32:87:aa:e4:d6:bb:b6:df:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Validity
Not Before: Jan 2 13:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e3619557c4a39af04572c6b9d90fb37398265da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a2:80:b0:9b:78:19:d5:b0:e8:ab:2a:22:ab:
f2:30:8c:31:3d:3d:93:da:9c:e2:b2:84:5e:10:97:
62:3d:df:30:00:a4:d5:d4:c9:c6:a4:18:a7:07:94:
05:af:55:00:b9:f8:ea:e1:4c:84:93:1c:3a:26:02:
18:67:15:fe:8d:38:ef:62:bc:26:fe:0d:06:b1:92:
0f:b1:5a:98:c7:26:ee:a1:5f:70:2f:da:27:c1:e0:
5f:56:d2:8f:a3:52:92:1e:f0:0a:32:34:eb:44:2a:
9a:a3:8f:0d:34:2a:a3:9b:39:63:94:9e:e9:95:97:
ad:48:e0:a0:6e:5c:70:23:25:79:ab:1d:3b:72:de:
17:ff:6e:4d:08:48:f4:96:33:32:aa:f2:76:d9:ae:
33:7d:7c:26:0f:08:ed:b3:10:08:9a:e3:60:5f:bf:
34:73:e2:fb:d7:13:57:92:36:1f:f1:e7:fc:5b:6a:
a3:0f:76:fb:78:ad:a0:e1:55:0d:49:c0:00:6b:f4:
b3:de:1e:a5:4e:e9:58:c7:ec:25:58:25:f8:92:3d:
47:33:cc:55:9c:f4:9e:b4:da:a0:3b:b0:4d:76:9a:
a3:bd:3e:1f:ae:89:ee:66:5d:52:62:c8:26:9b:c5:
99:2e:a5:02:02:b5:06:40:c0:89:9f:b9:05:75:24:
85:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:36:19:55:7C:4A:39:AF:04:57:2C:6B:9D:90:FB:37:39:82:65:DA
X509v3 Authority Key Identifier:
keyid:0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/TjYZVXxKOa8EVyxrnZD7NzmCZdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.177.0/24
Signature Algorithm: sha256WithRSAEncryption
48:3c:28:fb:85:24:69:f7:f1:ca:e3:a3:9b:94:17:b5:96:60:
17:cb:29:e0:85:f2:4d:46:91:00:ab:04:cf:cb:32:21:ac:d8:
0e:a2:92:db:de:05:5c:15:2c:56:1b:c9:2f:5f:1c:06:ac:52:
ba:e3:7f:3e:96:e9:a8:28:b6:58:66:53:38:6d:e3:79:6c:53:
7b:25:24:b7:5c:61:e3:2b:3f:3f:6b:b5:7f:ce:e4:85:94:cc:
7b:f6:12:a6:f4:98:7b:67:76:3b:d6:1f:7b:ab:86:50:b5:72:
05:fc:aa:43:17:e6:d1:6f:a9:ba:e7:31:70:3e:c6:99:a0:57:
10:61:11:f8:c1:95:12:d0:b0:be:3c:fe:dd:e5:d1:67:e5:8f:
2d:b1:45:db:56:90:1a:3c:f5:ee:11:64:d4:92:a3:dc:76:f3:
96:b4:7c:6f:7c:c7:38:20:c0:18:a0:9d:2b:12:9f:84:d4:04:
18:6e:0a:74:dd:8d:2e:b6:51:d9:d5:20:db:a0:74:ee:93:dd:
77:e0:f5:6b:15:84:89:af:d9:6f:a6:db:55:e5:30:ff:57:91:
a2:f6:de:6d:56:d6:e4:d2:bb:ac:a2:f6:17:5a:79:d2:af:1f:
15:a8:03:5a:9e:de:cf:37:c1:a6:60:aa:b3:a7:a4:28:60:f1:
9f:37:83:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:09:01 2025 by rpki-client