Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/2_48we29u4nsE7asc_JHdj90ToQ.roa
File: 2_48we29u4nsE7asc_JHdj90ToQ.roa (raw, json)
Hash identifier: 0pB7MdFwElQA4ppc/F1jbVNfD6GQbyxmb0fHfi5mreQ=
Subject key identifier: DB:FE:3C:C1:ED:BD:BB:89:EC:13:B6:AC:73:F2:47:76:3F:74:4E:84
Certificate issuer: /CN=54f87b5a62c1ff0f522812e9add1756bc73384c5
Certificate serial: 019420686A39ED1CD503247805B2D70B6E47
Authority key identifier: 54:F8:7B:5A:62:C1:FF:0F:52:28:12:E9:AD:D1:75:6B:C7:33:84:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VPh7WmLB_w9SKBLprdF1a8czhMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/2_48we29u4nsE7asc_JHdj90ToQ.roa
Signing time: Wed 01 Jan 2025 05:48:21 +0000
ROA not before: Wed 01 Jan 2025 05:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20546
IP address blocks: 93.191.160.0/24 maxlen: 24
93.191.161.0/24 maxlen: 24
93.191.162.0/24 maxlen: 24
93.191.163.0/24 maxlen: 24
93.191.164.0/24 maxlen: 24
93.191.165.0/24 maxlen: 24
93.191.166.0/24 maxlen: 24
93.191.167.0/24 maxlen: 24
185.192.168.0/24 maxlen: 24
185.192.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/VPh7WmLB_w9SKBLprdF1a8czhMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/VPh7WmLB_w9SKBLprdF1a8czhMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/VPh7WmLB_w9SKBLprdF1a8czhMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:6a:39:ed:1c:d5:03:24:78:05:b2:d7:0b:6e:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54f87b5a62c1ff0f522812e9add1756bc73384c5
Validity
Not Before: Jan 1 05:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dbfe3cc1edbdbb89ec13b6ac73f247763f744e84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d6:ca:9c:18:51:71:98:bc:23:2b:f6:12:09:
13:1a:9a:7f:61:99:f7:4b:6f:3c:86:fc:0d:94:ce:
39:6f:39:e5:3e:d8:63:db:95:85:93:a7:22:ef:b7:
4b:c3:c3:6f:14:44:8c:41:62:91:f1:db:59:04:d5:
af:35:2c:10:8d:de:f2:b5:a7:40:6e:23:e1:b7:ad:
ee:f7:50:89:05:be:27:a0:51:81:a2:e3:cf:4c:b9:
d1:3e:c7:01:f9:8b:ad:f2:b4:86:51:e4:64:d8:e9:
d3:49:4e:01:7f:7a:21:b1:20:43:7f:63:17:3d:90:
ac:1c:cd:34:49:00:5f:44:60:54:1a:b0:e4:b3:73:
7f:30:f6:81:8f:3f:28:68:ec:b8:02:fa:9a:d7:9b:
3d:1f:69:f2:dc:7b:9d:c9:9f:cd:5f:e2:01:7d:08:
12:66:7d:8d:73:ac:2b:0a:16:ac:68:f1:f9:4e:5b:
4a:3f:74:76:3e:72:69:05:3a:71:ef:62:12:d7:17:
60:9f:17:31:70:97:53:3a:0e:14:4e:25:87:5a:8f:
d7:8b:87:88:0a:a0:98:90:9d:c1:91:76:f5:f2:34:
6f:67:ce:3f:80:67:cc:62:40:b8:9c:a0:87:54:0c:
b8:67:d7:8d:5d:7f:bc:2f:00:a0:00:a6:31:1d:eb:
64:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:FE:3C:C1:ED:BD:BB:89:EC:13:B6:AC:73:F2:47:76:3F:74:4E:84
X509v3 Authority Key Identifier:
keyid:54:F8:7B:5A:62:C1:FF:0F:52:28:12:E9:AD:D1:75:6B:C7:33:84:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPh7WmLB_w9SKBLprdF1a8czhMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/2_48we29u4nsE7asc_JHdj90ToQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/VPh7WmLB_w9SKBLprdF1a8czhMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.191.160.0/21
185.192.168.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:d6:af:82:5a:d1:07:aa:68:be:42:4b:e6:1b:3c:40:72:86:
5f:d8:71:22:12:75:98:37:e0:96:c7:05:29:fd:83:db:3a:87:
69:f0:ba:68:fa:19:4a:bc:e0:c0:d1:4f:1f:cb:f3:ae:6d:67:
88:d9:be:00:64:94:4d:9a:72:4c:97:26:30:81:80:d6:2d:13:
70:79:e6:03:12:2d:03:c5:b4:d6:17:4f:2b:f5:91:11:63:9e:
f7:eb:0f:cc:ce:34:69:f7:33:ea:a2:0f:d6:4d:da:9f:bf:cb:
d4:a8:a4:de:72:42:72:14:3a:35:4e:56:7e:68:f3:57:b5:5d:
ce:cd:5d:9b:a2:1a:29:a2:2f:c9:5a:59:6b:9d:3f:60:89:63:
6e:7d:2b:66:3b:55:c7:5e:a8:be:72:bc:f2:08:4d:d6:c9:f3:
a4:eb:66:fc:00:b4:fc:8c:a2:99:08:63:67:7b:f3:c1:7f:1e:
6e:bf:89:88:8b:98:37:57:91:ba:6f:14:30:2d:bc:4c:96:a3:
d9:7b:02:2e:c2:8d:01:a3:e4:a2:fd:e2:12:05:44:d3:61:8f:
c3:9f:94:a7:0a:f6:1e:cf:b6:d2:c4:e5:e7:16:52:fc:ca:07:
1a:e8:22:26:e4:c7:29:a0:c6:45:88:26:77:51:29:cd:89:72:
f7:e8:81:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:21:49 2025 by rpki-client