Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/1baR2TH2bkZJjYvndMUokyAPqQA.roa
File: 1baR2TH2bkZJjYvndMUokyAPqQA.roa (raw, json)
Hash identifier: E0FwqtUkTcGf61m3Plhzzdm2PvOTZwBlWw4O6jp45Sw=
Subject key identifier: D5:B6:91:D9:31:F6:6E:46:49:8D:8B:E7:74:C5:28:93:20:0F:A9:00
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 019421B239249EBD3C900C7C26C582257F47
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/1baR2TH2bkZJjYvndMUokyAPqQA.roa
Signing time: Wed 01 Jan 2025 11:48:35 +0000
ROA not before: Wed 01 Jan 2025 11:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62236
IP address blocks: 178.219.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:39:24:9e:bd:3c:90:0c:7c:26:c5:82:25:7f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Jan 1 11:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5b691d931f66e46498d8be774c52893200fa900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2a:2f:0b:3d:91:fa:16:b7:8b:60:21:42:9a:
cd:80:e0:c4:05:16:97:52:f1:66:00:ec:3d:a5:4e:
ad:e0:e2:ce:48:e8:06:25:74:40:4a:67:2f:98:f8:
21:39:50:64:33:36:53:10:49:d6:5a:29:5d:b5:8a:
8b:a7:48:11:0b:bc:92:0b:4f:c7:77:6a:70:ba:8e:
6a:37:05:5c:ce:b7:1a:46:d9:2d:42:dc:8d:00:e3:
bd:54:3d:d6:09:bc:f5:8b:5d:dc:e3:34:c0:8b:d0:
43:0c:8e:95:ba:09:42:b1:09:54:f6:c7:bd:dc:37:
cd:0b:62:9e:6a:6d:99:9a:db:2e:14:92:cf:0d:71:
6d:e0:5c:fb:65:ec:c7:94:3f:ae:fc:f6:25:62:9e:
8f:c0:f7:bd:41:aa:f4:14:07:a1:29:84:e0:8d:78:
7a:de:81:be:11:60:ba:3e:9b:e2:16:96:14:fc:1c:
f5:17:92:4b:b2:e1:4e:62:87:85:37:b5:4c:f7:c2:
66:f3:0a:bc:b1:a7:9b:d0:17:87:da:93:c8:e9:ed:
4a:fd:f9:8c:62:c0:cd:9b:2d:bd:71:3f:c1:09:e9:
11:db:1f:f4:66:65:c6:04:9f:87:3e:76:51:97:e9:
91:07:da:41:e6:65:f4:26:99:8e:7c:f3:c3:53:ff:
52:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B6:91:D9:31:F6:6E:46:49:8D:8B:E7:74:C5:28:93:20:0F:A9:00
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/1baR2TH2bkZJjYvndMUokyAPqQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.219.155.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:be:bd:47:f2:7e:29:d8:f7:6f:14:74:2e:4d:7b:a4:de:18:
b4:32:f3:ea:6e:69:f2:da:67:25:5f:46:a5:d2:7a:b1:f5:ff:
79:a8:d1:8c:8d:59:bb:2b:05:7b:41:d9:b0:82:51:a3:8f:70:
4a:0b:8a:8b:ea:d6:0c:98:30:5c:d1:25:20:c5:53:a2:8f:8b:
0c:65:e3:77:37:f6:e9:0e:db:97:46:1d:4a:70:87:c2:c3:78:
08:01:0c:81:97:7d:e4:68:25:1f:eb:68:ca:8f:84:ad:e9:d8:
be:d5:4d:4a:6f:00:b7:c5:5e:63:48:6b:eb:11:b8:21:94:f4:
98:d0:04:7b:2d:2b:07:4f:2a:bf:9c:04:35:f6:10:09:7d:d0:
19:05:ed:f4:97:d6:58:b8:0f:f9:61:11:21:33:de:d3:62:61:
13:44:e9:84:ce:cc:d4:c6:10:2b:76:13:9a:f2:f2:88:04:9d:
94:2c:e0:a8:3c:32:87:81:2d:f4:10:3d:0b:24:f0:3a:5b:19:
7b:d8:14:6e:6f:66:24:29:28:43:1f:3a:4d:c0:f0:7d:d6:41:
c0:7d:fd:d0:1c:ed:49:30:bc:79:2f:07:db:f2:c9:94:6b:8f:
ad:e3:3c:cc:7a:16:c2:02:bc:93:c2:63:d0:46:4d:43:3a:09:
3f:a9:55:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:37:27 2025 by rpki-client