Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/TKLI0t7uGbgzLab6ZkPqdpRBN5w.roa
File: TKLI0t7uGbgzLab6ZkPqdpRBN5w.roa (raw, json)
Hash identifier: 52/0esp1f4ADygZHBpOqgYXEV51hqeaAdrJyRro1p2w=
Subject key identifier: 4C:A2:C8:D2:DE:EE:19:B8:33:2D:A6:FA:66:43:EA:76:94:41:37:9C
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0194274844589101D894D083471792F2B1CB
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/TKLI0t7uGbgzLab6ZkPqdpRBN5w.roa
Signing time: Thu 02 Jan 2025 13:50:35 +0000
ROA not before: Thu 02 Jan 2025 13:50:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20513
IP address blocks: 194.71.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:44:58:91:01:d8:94:d0:83:47:17:92:f2:b1:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ca2c8d2deee19b8332da6fa6643ea769441379c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bb:76:52:ff:41:a1:b9:05:de:37:96:84:ec:
92:2d:99:dd:c7:a4:8d:35:e5:65:c1:a5:53:7a:5d:
c8:37:5d:af:f1:62:97:f4:a2:01:58:79:44:01:06:
cc:17:78:4b:df:70:bb:02:86:80:33:47:4a:01:ec:
ef:3b:8d:e8:a7:2b:3b:36:12:b0:cc:47:23:c0:16:
bb:d7:b7:4b:ab:8b:9b:cf:e2:ec:86:4f:35:16:87:
c9:b7:92:8a:86:ae:d0:40:23:c6:38:70:5c:8d:e0:
31:ef:82:58:ba:1c:ad:eb:73:89:68:cd:05:71:95:
93:04:8c:df:1d:f5:7a:f6:17:f9:27:c7:92:79:9f:
4d:a8:08:2c:c1:32:e1:fa:c5:ad:ff:6b:de:93:c3:
96:b7:ec:67:a5:27:26:0d:5c:2f:90:d0:b9:6f:b5:
bd:f4:48:bb:b9:f5:2e:46:d1:b5:9c:f2:73:2d:78:
e4:8c:de:1a:86:e0:db:6d:2a:0b:76:33:de:51:13:
dc:fc:2b:01:4a:8b:e8:c1:6f:fe:20:cb:b6:e4:f3:
04:ed:23:e8:c2:86:b4:e3:c0:14:98:f3:ea:b2:12:
56:59:56:5b:a7:f2:ee:47:f6:53:09:66:68:15:e3:
ca:b0:08:2a:b7:51:66:66:fd:e5:77:ab:24:11:d8:
8f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A2:C8:D2:DE:EE:19:B8:33:2D:A6:FA:66:43:EA:76:94:41:37:9C
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/TKLI0t7uGbgzLab6ZkPqdpRBN5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.71.188.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:96:5e:ae:b1:28:c5:3c:6b:a3:4c:d7:dd:4c:c7:76:11:98:
4d:b5:2d:57:a2:2b:4c:6c:b3:69:b4:c9:c3:fa:d0:da:65:9d:
47:f8:1b:73:04:bd:a9:59:06:ec:3a:37:7d:52:38:b5:4e:f9:
da:3f:0d:d3:fd:9e:69:05:1d:04:3e:30:66:a0:a5:c7:69:16:
7f:3f:95:63:2b:13:05:a4:92:a3:f2:89:af:fa:e3:68:28:3e:
76:39:ae:d6:85:ff:33:10:c2:7e:73:f3:6e:73:78:30:78:06:
21:f5:6a:f5:d4:13:ec:0b:09:1b:e3:a6:b2:85:7c:99:56:73:
61:f2:2d:4f:66:6a:e4:7e:dc:6b:73:a0:e3:b2:46:8e:ed:ea:
71:d5:25:bb:75:ad:86:59:cc:bb:63:68:59:3f:65:d1:53:1a:
c1:29:d0:e5:f8:72:d3:d7:57:93:f5:a3:07:da:01:a7:0c:8e:
8a:bd:e5:a3:84:a4:13:a8:d7:a2:29:91:24:3c:00:aa:9d:95:
b3:fc:88:63:24:a6:2f:79:d4:dc:d3:1e:09:17:b1:2f:88:53:
30:93:96:3c:14:6a:a8:29:99:86:96:1f:c3:92:ce:2c:d0:40:
16:4e:b4:c4:a9:97:1d:dc:c3:9f:d8:c4:ff:37:76:5f:2b:ca:
78:d5:b7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:11 2025 by rpki-client