Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/jlBmv3dPRy-aCAm4zGP5hP0eED4.roa
File: jlBmv3dPRy-aCAm4zGP5hP0eED4.roa (raw, json)
Hash identifier: x5w57iUiMtF5F3KiCgNFCVpxtjw/vaZ568ZRMFNq7qU=
Subject key identifier: 8E:50:66:BF:77:4F:47:2F:9A:08:09:B8:CC:63:F9:84:FD:1E:10:3E
Certificate issuer: /CN=6accdb6c98d722b32dc900ee1dd66e51c4f428db
Certificate serial: 019422FC276AF15D25D5DAB66E1BE6C5AC6B
Authority key identifier: 6A:CC:DB:6C:98:D7:22:B3:2D:C9:00:EE:1D:D6:6E:51:C4:F4:28:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aszbbJjXIrMtyQDuHdZuUcT0KNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/jlBmv3dPRy-aCAm4zGP5hP0eED4.roa
Signing time: Wed 01 Jan 2025 17:48:57 +0000
ROA not before: Wed 01 Jan 2025 17:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204252
IP address blocks: 185.109.180.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aszbbJjXIrMtyQDuHdZuUcT0KNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:27:6a:f1:5d:25:d5:da:b6:6e:1b:e6:c5:ac:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6accdb6c98d722b32dc900ee1dd66e51c4f428db
Validity
Not Before: Jan 1 17:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e5066bf774f472f9a0809b8cc63f984fd1e103e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:42:4b:59:98:06:87:d6:99:59:82:f4:39:17:
c5:d8:d2:40:83:2e:8c:4a:74:5e:ef:f6:be:05:5b:
f1:f4:2a:2d:ed:78:9e:4f:a1:53:96:fb:49:95:d4:
e2:d5:36:45:41:6c:8a:39:45:10:41:6b:92:f5:3e:
18:a9:8b:44:b8:6d:f0:9f:f0:3c:c4:81:e5:b9:8f:
99:05:45:7a:b6:da:0d:90:64:88:1d:e4:5b:6c:f6:
7c:37:c8:44:23:3f:7b:15:4b:4c:85:c7:d6:5a:58:
88:9b:db:50:cf:5f:f0:f4:16:79:ad:c6:43:03:29:
c6:d1:49:f5:bf:49:87:5b:b8:fa:95:f3:9c:df:12:
a2:18:11:9b:c0:46:d5:86:94:25:82:c9:c1:7c:20:
ab:5b:eb:a4:58:89:dd:28:da:ef:e1:b1:1d:8e:2c:
81:5d:1c:7a:49:3b:42:f0:7d:b2:84:f0:65:09:e8:
f6:74:b1:c8:84:cd:f9:41:52:2d:b7:32:91:d6:e9:
63:9f:52:3d:7a:d9:8f:0d:e7:6c:76:a7:15:ed:7e:
14:58:05:aa:3f:91:0a:53:ed:bf:56:d9:45:d6:f8:
c3:13:21:bd:5a:e1:c0:c9:88:f8:67:6e:26:3c:a0:
dc:a5:ca:69:fd:5c:28:4d:99:30:22:32:c0:4c:1b:
d0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:50:66:BF:77:4F:47:2F:9A:08:09:B8:CC:63:F9:84:FD:1E:10:3E
X509v3 Authority Key Identifier:
keyid:6A:CC:DB:6C:98:D7:22:B3:2D:C9:00:EE:1D:D6:6E:51:C4:F4:28:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aszbbJjXIrMtyQDuHdZuUcT0KNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/jlBmv3dPRy-aCAm4zGP5hP0eED4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.109.180.0/22
Signature Algorithm: sha256WithRSAEncryption
bc:5f:a6:7f:d6:ba:a4:b1:59:0e:46:d1:dc:3a:ed:13:49:e8:
49:97:30:6e:aa:6a:0c:f6:39:34:41:ba:b7:2e:a9:04:fe:77:
b4:e4:fe:cc:e3:e8:d1:e0:d1:ff:03:df:d1:fa:03:49:c0:e4:
ae:dc:bd:3e:59:d0:1d:59:cb:d2:5f:94:35:b6:7f:1e:d0:6d:
eb:af:38:ba:e7:e4:eb:3c:f8:e6:00:97:97:b5:53:7c:61:47:
81:a9:81:a5:0c:aa:5f:2d:7a:01:54:6f:5c:3a:f5:3d:97:9d:
ef:9f:9c:71:e2:63:44:63:48:01:f2:7e:73:69:54:7d:ec:7e:
77:ec:04:26:0d:77:5a:f9:90:f2:36:48:72:69:b1:b0:1c:eb:
dd:3e:bf:f5:fd:6c:a6:32:f1:80:2e:51:28:ac:f2:e8:24:35:
0f:b6:63:31:d7:e3:f2:88:60:b9:5f:e8:cd:9d:5f:ee:3f:38:
d6:12:12:0b:3e:7c:f0:93:7b:b6:0e:cf:6f:67:e0:63:30:58:
c9:69:93:2b:4a:8f:77:47:c1:23:fd:97:5d:a6:f2:89:4b:d9:
f2:04:5a:2b:70:80:a3:b0:5b:c6:0a:02:61:bb:04:31:a5:e3:
2e:12:d7:f6:d3:2f:e2:12:0d:c8:a7:5b:d7:72:51:b3:8f:d1:
d5:a1:04:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:19:14 2025 by rpki-client