Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/JlLzYa369BmhHhkMkkOAbFVKIEk.roa
File: JlLzYa369BmhHhkMkkOAbFVKIEk.roa (raw, json)
Hash identifier: VUooec9+T4XmPm3CalNwGe0fyN77tnkbi4PQVdbwdIo=
Subject key identifier: 26:52:F3:61:AD:FA:F4:19:A1:1E:19:0C:92:43:80:6C:55:4A:20:49
Certificate issuer: /CN=f1f4609d0d053aec0307da44b0e678c388f641a4
Certificate serial: 0194266B339615BEA044D2A16A65808E1921
Authority key identifier: F1:F4:60:9D:0D:05:3A:EC:03:07:DA:44:B0:E6:78:C3:88:F6:41:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/JlLzYa369BmhHhkMkkOAbFVKIEk.roa
Signing time: Thu 02 Jan 2025 09:49:07 +0000
ROA not before: Thu 02 Jan 2025 09:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214973
IP address blocks: 185.18.221.0/24 maxlen: 24
2a13:2c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:33:96:15:be:a0:44:d2:a1:6a:65:80:8e:19:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f4609d0d053aec0307da44b0e678c388f641a4
Validity
Not Before: Jan 2 09:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2652f361adfaf419a11e190c9243806c554a2049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1a:9c:bc:d5:ab:c8:50:07:73:fd:3c:26:79:
1a:f3:6c:82:78:41:8f:af:3b:32:a3:36:82:69:98:
b9:4e:d5:5b:f1:c2:05:a1:a3:70:e4:7e:c9:7d:83:
42:5d:2b:d8:37:45:a8:28:2d:cc:6c:6f:29:fd:93:
5d:83:e4:f1:c9:8b:23:45:a5:65:f2:87:a6:d0:0c:
b2:6e:99:0b:e7:4c:d5:51:c7:f5:92:d7:5d:3d:fd:
e0:a5:0f:d0:05:4e:27:b8:40:26:e9:7a:90:94:48:
68:f5:eb:ca:46:83:1f:e0:96:ad:58:4b:66:93:6a:
a0:a8:11:0b:f2:58:1a:df:66:82:39:37:10:a4:00:
45:b9:56:93:b0:dc:d7:f0:76:0c:e7:65:a5:eb:cc:
5f:46:49:87:93:a2:fd:96:c7:d4:82:5a:68:cc:7f:
b5:ac:d7:3b:23:34:32:75:3a:49:03:85:de:9a:ab:
af:8e:fd:8c:ed:07:e3:0d:11:13:64:e9:25:f1:f4:
80:a6:c9:e4:6f:84:6e:ef:33:2c:92:0a:4b:e7:dd:
65:8a:ad:ed:e5:f1:df:d1:0d:1b:ec:23:3a:38:7a:
58:07:ea:76:35:6f:04:c8:97:6b:54:ec:92:d5:53:
09:4b:d8:02:c4:5b:8e:04:1e:c7:ee:97:19:60:f8:
63:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:52:F3:61:AD:FA:F4:19:A1:1E:19:0C:92:43:80:6C:55:4A:20:49
X509v3 Authority Key Identifier:
keyid:F1:F4:60:9D:0D:05:3A:EC:03:07:DA:44:B0:E6:78:C3:88:F6:41:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/JlLzYa369BmhHhkMkkOAbFVKIEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.18.221.0/24
IPv6:
2a13:2c0::/29
Signature Algorithm: sha256WithRSAEncryption
71:b9:63:37:87:d6:64:c9:31:a6:5b:5e:4e:12:7b:b2:ea:35:
b9:2b:fb:9d:81:e5:f3:6d:c0:32:d4:c1:96:c5:7a:94:b0:93:
be:d2:2a:b3:30:4b:ba:88:34:1a:f8:c6:84:ba:fa:79:71:0a:
3f:42:c0:32:e8:55:f2:a4:db:47:7c:b6:92:0b:c9:11:f0:3d:
49:79:20:af:5e:fb:bb:9c:4c:01:3d:14:90:3e:b2:60:93:ef:
1e:ed:11:2b:ee:a3:0c:73:7f:29:ec:c9:c4:86:65:1f:ea:73:
6a:35:48:60:6d:61:3d:97:ce:fa:4c:1b:72:33:cd:78:26:cf:
6a:88:96:5f:69:4c:06:88:69:b7:a3:99:44:d8:4c:b5:49:3d:
46:26:35:0f:4b:e0:4a:fb:9d:a2:78:9c:da:74:29:60:96:6f:
6b:b7:c6:e6:cd:22:74:84:ff:b2:3b:3f:cb:0c:91:dc:8f:88:
a7:42:e6:00:64:28:ba:47:61:03:37:8b:0f:10:8d:1e:b9:7d:
fb:e6:6f:fc:c4:44:57:a2:3e:ef:7a:51:cd:dc:d0:ff:6c:52:
01:f1:5f:41:b9:34:5f:f1:68:2d:5d:9b:79:f9:16:73:9f:e0:
af:18:d5:2f:9b:94:7d:a6:a2:d5:86:37:55:95:db:18:ea:13:
26:44:78:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:44:29 2025 by rpki-client