Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/2nGBluc9iPoySCSN7EfWGD_6tBs.roa
File: 2nGBluc9iPoySCSN7EfWGD_6tBs.roa (raw, json)
Hash identifier: roQNasQouSNvj3QwLtKT1pbwknDSLnc7cxHm2VkA7RE=
Subject key identifier: DA:71:81:96:E7:3D:88:FA:32:48:24:8D:EC:47:D6:18:3F:FA:B4:1B
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 0195380DCAAB3828EAE6F893B2DC6A07C02C
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/2nGBluc9iPoySCSN7EfWGD_6tBs.roa
Signing time: Mon 24 Feb 2025 13:03:02 +0000
ROA not before: Mon 24 Feb 2025 13:03:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44547
IP address blocks: 31.210.42.0/24 maxlen: 24
31.210.55.0/24 maxlen: 24
78.135.67.0/24 maxlen: 24
78.135.81.0/24 maxlen: 24
78.135.82.0/24 maxlen: 24
78.135.83.0/24 maxlen: 24
78.135.111.0/24 maxlen: 24
188.132.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 16:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:38:0d:ca:ab:38:28:ea:e6:f8:93:b2:dc:6a:07:c0:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Feb 24 13:03:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da718196e73d88fa3248248dec47d6183ffab41b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:16:2c:65:af:4e:28:5b:ce:21:c2:6c:d1:25:
c0:56:1b:ff:c8:c0:62:33:1f:d7:c6:ad:fa:56:ff:
07:52:a1:b9:86:a6:f4:c9:c8:ca:36:1b:54:29:b5:
eb:5e:6f:ae:76:58:37:7d:61:ac:26:b3:95:14:99:
ea:42:6e:aa:e1:f9:f9:6a:84:9d:43:c5:f4:38:ff:
38:7f:9d:e5:31:73:66:e9:45:37:0a:a3:3c:27:99:
33:5f:ef:cd:68:cf:37:27:a6:8d:44:de:2f:fa:6a:
dc:85:9b:87:2b:9d:b1:e4:8d:fe:27:66:b5:53:ce:
bd:64:6a:86:e1:45:02:0f:5d:60:ea:cb:cb:db:df:
fe:a2:6f:53:7c:0f:e4:9f:84:28:14:9f:4d:e4:72:
83:0d:77:44:ef:c1:17:f3:cc:f2:ef:39:d5:58:0e:
39:58:2a:bd:09:30:34:f3:a7:2d:86:82:85:25:9e:
b2:6c:90:de:06:36:45:39:77:db:31:e8:b3:d9:76:
d0:5b:70:8e:0b:25:4b:8d:cd:88:f5:90:08:ab:21:
bf:66:44:a8:47:a5:ae:36:86:20:e7:a6:98:4c:f5:
8f:23:f8:40:26:5c:ec:f1:90:37:5d:c9:f6:f2:95:
f2:5e:8b:0e:78:9e:ad:60:4c:6e:9d:e1:4a:73:69:
d9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:71:81:96:E7:3D:88:FA:32:48:24:8D:EC:47:D6:18:3F:FA:B4:1B
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/2nGBluc9iPoySCSN7EfWGD_6tBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.42.0/24
31.210.55.0/24
78.135.67.0/24
78.135.81.0-78.135.83.255
78.135.111.0/24
188.132.168.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:f8:4b:9b:af:02:7a:ff:26:b2:93:72:97:9b:7b:87:12:47:
82:89:d2:c7:b8:07:07:a2:99:f5:8a:a4:bb:7a:b2:4c:c6:71:
8d:df:2a:17:8e:4e:25:05:62:c2:ad:ef:44:d7:7d:36:34:57:
ef:72:a0:6d:75:45:34:5f:c0:9f:8a:66:82:cb:c5:60:96:3b:
94:11:0c:ec:85:81:9a:69:a8:bc:32:d6:b1:92:33:76:b9:13:
a8:8b:fc:e0:16:d6:fb:cc:8a:40:07:8b:f7:2c:c2:b0:6a:e5:
af:ea:be:ab:af:8f:fd:5c:f6:dd:a8:ac:e4:90:9a:d9:fb:a7:
a1:9d:2a:77:f8:0d:91:d4:7f:82:9e:03:ee:9a:de:c4:51:2b:
61:a3:c6:09:20:8d:0d:21:d0:18:a1:de:86:14:99:fb:f4:63:
3c:ab:e7:08:1a:6e:b1:b3:bb:4e:7b:50:37:e4:f3:16:7e:66:
06:21:b7:3f:09:fc:84:f6:e8:be:48:00:0d:0d:75:e1:02:ab:
ee:13:0e:84:f1:f5:4c:74:99:58:f3:65:ba:d9:f2:f4:56:e2:
85:a5:b4:cd:1d:84:53:d0:61:a8:8a:5d:0d:05:d8:43:6f:28:
2b:16:b7:79:32:1c:ab:eb:84:e4:66:cc:58:e9:8e:66:f0:da:
15:33:44:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:00:40 2025 by rpki-client