Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/2Xuz_XQe5kxj9Ta-txXKOZzo3-8.roa
File: 2Xuz_XQe5kxj9Ta-txXKOZzo3-8.roa (raw, json)
Hash identifier: 4cAudEOa7B6QV2XVnZGGI65WlCpgsFSmPdilxFuHyN8=
Subject key identifier: D9:7B:B3:FD:74:1E:E6:4C:63:F5:36:BE:B7:15:CA:39:9C:E8:DF:EF
Certificate issuer: /CN=27b250c00b46ba1805f2fe5f6a77e8ffe5fe2778
Certificate serial: 019644150596608AB996E343DA0E9BE633F6
Authority key identifier: 27:B2:50:C0:0B:46:BA:18:05:F2:FE:5F:6A:77:E8:FF:E5:FE:27:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7JQwAtGuhgF8v5fanfo_-X-J3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/2Xuz_XQe5kxj9Ta-txXKOZzo3-8.roa
Signing time: Thu 17 Apr 2025 14:09:10 +0000
ROA not before: Thu 17 Apr 2025 14:09:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203810
IP address blocks: 185.46.52.0/24 maxlen: 24
185.46.53.0/24 maxlen: 24
185.46.54.0/24 maxlen: 24
185.46.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/J7JQwAtGuhgF8v5fanfo_-X-J3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/J7JQwAtGuhgF8v5fanfo_-X-J3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7JQwAtGuhgF8v5fanfo_-X-J3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:15:05:96:60:8a:b9:96:e3:43:da:0e:9b:e6:33:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b250c00b46ba1805f2fe5f6a77e8ffe5fe2778
Validity
Not Before: Apr 17 14:09:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d97bb3fd741ee64c63f536beb715ca399ce8dfef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1e:e8:69:95:f3:d0:f2:2b:46:d2:11:fe:50:
fe:0e:16:c1:54:66:c6:dc:53:df:15:38:7d:36:b4:
55:75:9c:10:8e:00:15:57:68:fa:5c:71:99:79:70:
94:92:10:cc:61:11:37:07:ea:45:4c:0f:63:6c:5a:
78:7d:ae:7b:08:41:15:92:70:fe:74:5d:3a:57:2f:
08:49:c1:ea:5a:15:2c:7a:fb:b6:66:d5:44:eb:f0:
a3:d8:58:67:26:cd:0f:ab:70:32:3a:e8:d0:e7:79:
0a:7d:0c:47:92:f3:98:0c:8c:e4:46:4e:fd:7a:79:
13:15:b2:f5:57:3e:28:b9:2c:27:4a:0a:16:22:f7:
4c:60:b2:85:ff:22:f2:39:61:0c:2c:ce:c4:fa:0e:
68:89:44:7c:66:9c:0d:8b:23:7d:8b:ba:cd:86:36:
52:ad:53:68:77:13:61:06:e6:6b:51:cb:f8:12:47:
0a:e5:81:a1:a7:19:86:91:7f:49:bf:cc:ff:d2:00:
04:0f:1a:98:6e:24:92:3c:4c:8c:15:06:fa:10:01:
71:bb:77:fb:87:e7:0c:bb:c3:25:b9:d9:2f:21:f8:
09:4a:fa:33:81:4a:f1:66:bd:fc:f3:8a:91:36:f2:
c2:bb:e9:94:27:80:20:96:3b:60:66:8d:5f:9a:1f:
60:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:7B:B3:FD:74:1E:E6:4C:63:F5:36:BE:B7:15:CA:39:9C:E8:DF:EF
X509v3 Authority Key Identifier:
keyid:27:B2:50:C0:0B:46:BA:18:05:F2:FE:5F:6A:77:E8:FF:E5:FE:27:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7JQwAtGuhgF8v5fanfo_-X-J3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/2Xuz_XQe5kxj9Ta-txXKOZzo3-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/J7JQwAtGuhgF8v5fanfo_-X-J3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.52.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:21:b7:16:90:43:42:7d:30:2b:36:5f:54:da:c0:b3:dc:9e:
97:46:fa:3b:7c:b6:6f:29:d0:da:f5:fa:19:75:d5:3d:5a:70:
4a:41:a8:fa:bd:29:6b:80:c0:7b:09:98:0e:64:a9:54:1d:48:
b8:62:e7:21:f0:35:5b:01:4a:5a:cc:3b:fc:d1:62:99:bd:c7:
c3:ff:46:53:72:bf:41:1c:44:96:ff:3c:b1:72:86:0d:88:cb:
f7:2f:a3:c7:4b:ca:29:3e:de:a7:b8:b7:19:1c:f3:30:13:bf:
25:6f:43:ba:e4:0e:a1:38:3a:dd:f5:b1:c3:eb:9c:04:e7:53:
01:9d:cf:ca:0b:3c:93:af:5e:d5:fd:b6:77:97:ac:61:06:31:
53:d0:e2:37:84:a5:8e:b5:3a:fe:3a:85:a8:ea:6e:a0:7f:52:
ea:92:52:df:9d:15:a9:64:ed:20:01:0d:38:42:0e:77:75:af:
1f:2f:96:20:89:e3:36:06:a2:2f:0c:70:88:51:2b:22:28:4c:
c0:ea:ad:e8:84:7d:e7:d5:d5:c8:fc:73:93:04:cf:d4:b5:e0:
9b:83:c1:de:5a:9a:2a:4d:0a:9e:dc:4a:95:70:d4:cc:11:4e:
39:73:e3:bd:ce:e3:ab:a9:6e:12:92:4f:81:a0:43:8a:5a:b8:
68:ad:a7:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:51:32 2025 by rpki-client