Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/TZLeuUkI4CjEnpLLtWGzEA-joRI.roa
File: TZLeuUkI4CjEnpLLtWGzEA-joRI.roa (raw, json)
Hash identifier: YPtfqltU/oN+o/HH/QLZS2oxA/bwOyzCiodegvrQed4=
Subject key identifier: 4D:92:DE:B9:49:08:E0:28:C4:9E:92:CB:B5:61:B3:10:0F:A3:A1:12
Certificate issuer: /CN=2f08df165d497d7a9b99e0e71f15ba07d184615a
Certificate serial: 019425FCC28907DD1C1DCFF651A6F453AC95
Authority key identifier: 2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/TZLeuUkI4CjEnpLLtWGzEA-joRI.roa
Signing time: Thu 02 Jan 2025 07:48:29 +0000
ROA not before: Thu 02 Jan 2025 07:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1239
IP address blocks: 193.36.179.0/24 maxlen: 24
193.36.185.0/24 maxlen: 24
193.36.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:c2:89:07:dd:1c:1d:cf:f6:51:a6:f4:53:ac:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f08df165d497d7a9b99e0e71f15ba07d184615a
Validity
Not Before: Jan 2 07:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d92deb94908e028c49e92cbb561b3100fa3a112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2e:77:cf:77:5e:57:ea:08:8a:30:4a:96:ed:
dd:06:78:26:32:a9:3c:e2:e6:f8:7e:92:ee:07:12:
1d:46:14:4c:df:62:30:b5:26:0b:4e:f3:a2:e0:e6:
77:ad:3f:20:c8:04:3b:c3:31:a9:3d:fe:80:5d:b2:
a2:c1:bd:33:ae:3e:3f:50:87:5a:57:66:9b:13:71:
35:8d:ae:53:33:50:1f:ae:29:c2:54:af:e6:fe:bf:
02:92:03:0e:5e:ef:64:48:ed:3d:ed:4c:d7:54:73:
ab:66:ab:bb:60:d3:85:3d:a9:dd:5e:05:04:00:42:
2f:07:17:14:ae:7c:bb:19:56:56:74:2b:5a:05:e9:
52:4e:1a:8f:ad:b0:50:b2:50:4c:30:14:b6:c5:3d:
ef:af:fd:c9:4f:e8:7a:1c:5b:e5:76:e7:35:8f:24:
67:c0:7c:61:de:53:17:41:b9:dd:a6:1c:e2:3b:45:
42:fd:f5:b7:d4:29:5f:d5:3f:86:87:18:e5:fa:57:
a4:60:57:52:d3:c2:49:56:1a:1b:4e:60:8d:be:ee:
84:c0:96:10:cd:24:27:59:a8:4f:53:70:e1:9f:49:
1a:68:41:cf:16:d8:29:3d:f6:bc:ce:db:9a:fd:5b:
d3:f8:9e:94:b7:13:88:5c:01:01:4f:e2:f0:5c:bf:
40:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:92:DE:B9:49:08:E0:28:C4:9E:92:CB:B5:61:B3:10:0F:A3:A1:12
X509v3 Authority Key Identifier:
keyid:2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/TZLeuUkI4CjEnpLLtWGzEA-joRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.179.0/24
193.36.185.0/24
193.36.187.0/24
Signature Algorithm: sha256WithRSAEncryption
78:9e:b5:79:5d:8e:c4:75:19:5a:55:4a:c1:70:7f:88:70:7d:
46:c0:aa:01:2a:0b:88:5c:78:a4:e2:1e:de:1c:25:13:4b:94:
65:91:37:3a:9f:36:0c:6b:7b:08:de:24:c5:d0:c3:2e:c4:ed:
c1:54:4f:e3:bb:9b:6f:52:b6:73:cd:ed:52:e6:d0:a5:6c:ce:
c8:ca:5c:48:a2:38:c8:af:e0:b9:8c:57:55:3a:e8:18:ac:56:
d7:91:bf:f1:c7:b6:68:55:b6:e7:b0:79:0b:96:53:c0:ec:c5:
dc:80:b6:50:b8:70:86:ad:d3:ff:60:df:f3:f3:ef:69:b5:fb:
7e:f4:a0:9c:a7:20:76:0f:5a:50:7f:39:71:c1:49:0e:56:7a:
67:46:ae:e9:c1:8f:da:82:25:ac:9e:ef:b0:28:f6:33:7d:07:
92:55:15:37:9d:ae:e0:55:44:8a:bc:a7:7a:53:46:ef:c8:6d:
33:32:a0:f1:9f:23:6f:36:43:c5:7c:1b:c6:5f:f4:41:de:38:
86:00:22:5a:16:38:57:e6:04:6b:ec:1e:e5:8d:23:28:6c:3d:
13:ae:3b:66:7b:80:a6:cf:81:2c:ea:ad:51:d4:81:9a:c8:68:
88:c0:74:c4:fd:da:6e:1f:41:84:44:69:58:58:8d:ac:66:9a:
55:6a:0b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:54:46 2025 by rpki-client