Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/2vBfvAyUN2SY6M08IgnYx3zpve8.roa
File: 2vBfvAyUN2SY6M08IgnYx3zpve8.roa (raw, json)
Hash identifier: RSfWbc+Q+PHBpjAMYMn9vJC3eO3SfOagaCxQxW+i+xY=
Subject key identifier: DA:F0:5F:BC:0C:94:37:64:98:E8:CD:3C:22:09:D8:C7:7C:E9:BD:EF
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 019427B68326AA851BC190DF1B21C539F047
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/2vBfvAyUN2SY6M08IgnYx3zpve8.roa
Signing time: Thu 02 Jan 2025 15:51:00 +0000
ROA not before: Thu 02 Jan 2025 15:51:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49036
IP address blocks: 93.191.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:83:26:aa:85:1b:c1:90:df:1b:21:c5:39:f0:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Jan 2 15:51:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=daf05fbc0c94376498e8cd3c2209d8c77ce9bdef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:71:7d:c5:b0:76:56:99:44:d4:d8:8c:e4:d8:
a2:86:78:73:e7:2e:87:cd:b8:46:e4:65:3d:af:b9:
ee:f1:10:e1:87:28:62:a8:b9:e8:40:7c:5a:e7:f8:
94:2a:da:31:60:ca:79:b4:22:05:e7:49:6a:41:b8:
b9:16:05:7e:0a:13:84:5a:a8:05:48:33:40:7a:f6:
45:6b:f4:a5:5f:5e:27:f9:8f:e4:78:25:a3:dc:ae:
22:62:7f:b2:2f:90:38:f9:82:0e:31:d1:c7:b1:76:
6a:fb:b6:1b:fc:4e:f5:e4:fb:8c:27:e4:71:3f:78:
59:e7:87:3c:b0:35:bd:b0:36:82:e0:88:6c:85:df:
65:4b:bb:71:6b:23:45:72:4c:aa:f7:72:c4:03:d8:
7b:be:ec:9c:9f:56:15:b7:cd:96:72:80:a5:e1:0a:
9e:7b:b1:71:4d:85:62:29:95:91:26:cd:38:00:57:
39:27:b7:e1:58:69:29:f6:a5:00:dd:55:b1:f5:ab:
52:28:a6:d9:8a:67:59:34:ab:50:67:77:83:19:ff:
7c:92:2a:63:64:97:b2:68:02:67:a7:a2:12:a8:32:
76:7b:45:51:96:61:14:17:7c:e0:90:1e:3c:24:e0:
8b:32:1b:76:93:30:38:49:a7:33:77:62:80:a5:e8:
41:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F0:5F:BC:0C:94:37:64:98:E8:CD:3C:22:09:D8:C7:7C:E9:BD:EF
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/2vBfvAyUN2SY6M08IgnYx3zpve8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.191.171.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:34:50:44:8b:75:d4:88:29:67:90:ea:e0:1f:1a:d5:aa:4c:
8f:34:1b:ad:6b:f0:1b:bb:5b:0b:49:4d:b4:44:63:f7:4a:85:
81:7a:f7:bd:e5:6e:61:40:35:97:71:c8:c1:48:00:d2:29:48:
22:a3:4e:eb:5b:c9:02:1c:6e:dd:2a:60:22:6f:0d:ec:54:19:
15:6f:18:8c:c9:fb:97:0a:93:04:73:c5:a9:27:c0:ff:ec:91:
65:7e:2c:ba:fb:5d:be:d7:36:0f:90:10:35:67:3f:ef:4b:4c:
9a:5a:3b:7c:f3:d6:07:3e:40:3b:66:10:f8:99:e8:14:d0:fd:
35:a1:94:8e:3b:da:0e:c8:c3:bf:22:b6:a0:91:92:54:48:f2:
9b:8e:83:e3:27:fa:2e:d8:94:2f:d9:49:ca:d1:e3:91:34:5c:
18:8e:39:f1:0a:04:49:88:51:aa:aa:14:93:84:ab:5b:2a:d4:
e1:57:9a:25:11:c8:d4:6a:32:81:80:3d:dc:0a:6a:68:de:0c:
25:13:24:61:6d:80:2f:e9:93:9d:73:5a:09:90:c3:3d:ae:f4:
fa:22:20:2b:9f:96:b9:a7:1b:96:f4:93:39:6b:bd:54:50:4d:
d3:57:c8:33:52:52:d6:4a:24:a7:32:47:39:93:f8:68:e9:32:
cd:7d:02:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:21:34 2025 by rpki-client