Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/tuxjTLNpiLovgNr6wihYgPsbhOo.roa
File: tuxjTLNpiLovgNr6wihYgPsbhOo.roa (raw, json)
Hash identifier: hMN/hBLqXptzsiAo7RHoc7oNnmZnnDQIRfswZh8ra0A=
Subject key identifier: B6:EC:63:4C:B3:69:88:BA:2F:80:DA:FA:C2:28:58:80:FB:1B:84:EA
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0194258F9E8D7605EA72D36C0D4C482AEBD1
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/tuxjTLNpiLovgNr6wihYgPsbhOo.roa
Signing time: Thu 02 Jan 2025 05:49:16 +0000
ROA not before: Thu 02 Jan 2025 05:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62019
IP address blocks: 2.58.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 13:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:9e:8d:76:05:ea:72:d3:6c:0d:4c:48:2a:eb:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 05:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6ec634cb36988ba2f80dafac2285880fb1b84ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:95:54:ed:33:dd:84:56:59:9c:9f:9e:97:b5:
dc:3f:04:42:22:e3:7c:06:10:7a:9e:d8:78:f7:2e:
bb:64:6e:dd:50:4d:bd:d8:fd:90:7c:c7:1a:d0:44:
03:a9:40:3d:73:18:2b:ab:73:a1:f6:84:01:31:4f:
13:5c:e5:18:41:59:e8:fd:d9:ca:3b:ac:8d:f5:e6:
33:af:56:a6:fb:c9:1b:1d:88:75:5a:97:9f:1c:33:
df:8b:f7:b1:f8:4a:50:2b:be:26:7b:8a:6b:c0:f9:
a7:09:1a:ee:1e:47:c9:28:25:e7:5b:df:f7:8f:33:
a4:cf:74:f9:c8:e9:b6:12:86:11:54:ca:a9:75:09:
e6:b5:2a:dd:79:55:d6:3a:43:b9:36:c4:d9:c5:3c:
15:8d:43:7f:30:bb:53:ff:39:9e:d5:35:64:59:3f:
45:3c:77:31:2b:fa:17:69:78:38:0d:2b:37:f2:ef:
04:57:3b:3d:e5:cc:8a:d4:ba:c6:d2:53:bd:60:79:
4a:1a:7f:48:d7:a1:45:0b:6c:9f:2f:c0:39:b9:07:
95:7f:66:d5:74:b5:2d:e0:6c:58:a5:a7:0d:80:a8:
52:6e:7b:54:2e:10:dc:36:d9:b5:a2:7c:01:5c:36:
47:3f:66:c5:69:fd:e0:bc:12:fb:51:04:f2:99:d4:
1d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:EC:63:4C:B3:69:88:BA:2F:80:DA:FA:C2:28:58:80:FB:1B:84:EA
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/tuxjTLNpiLovgNr6wihYgPsbhOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.97.0/24
Signature Algorithm: sha256WithRSAEncryption
28:96:2d:38:1f:c3:06:b0:1d:46:6b:2b:a9:cb:4a:84:7a:41:
21:15:fd:74:35:12:b0:e1:e1:14:67:cd:21:0f:fc:5d:47:d8:
ed:37:a1:a8:1c:5a:36:89:09:ba:a8:8e:24:f2:6e:66:23:19:
52:db:de:30:a9:a8:fa:29:ad:e2:b4:38:99:14:82:12:f5:e4:
da:3c:ad:7a:71:66:a5:fc:53:40:3d:2a:75:30:a7:30:5b:41:
b9:20:69:56:11:e6:0f:d5:ef:a0:e0:02:33:3b:03:27:21:d2:
d8:ec:09:77:6b:07:30:ca:d9:85:69:45:2d:0a:17:3e:67:ce:
0d:9f:46:24:40:a2:a4:26:c0:76:ae:98:7a:f1:fc:b1:1e:fd:
cd:34:68:7d:82:3c:b2:d3:49:82:40:1d:a6:a6:4f:15:d9:74:
3e:01:62:56:34:9c:32:ae:04:98:1a:35:b4:29:97:07:c7:3a:
f5:28:b5:60:de:a5:59:fb:47:94:c3:5b:53:da:ad:b0:98:7c:
0d:4e:ea:e8:33:32:bc:de:a4:5d:7e:a6:e6:1a:42:fa:b3:7d:
54:b9:84:e3:ef:03:14:41:5c:f4:00:32:d7:18:05:87:78:92:
b5:6b:70:f3:b3:36:4b:a8:21:ac:d0:50:eb:d3:e2:6b:93:83:
85:96:20:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:32:07 2025 by rpki-client