Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/x2Plj6HU813Gn6CnI6OWio0Ed3w.roa
File: x2Plj6HU813Gn6CnI6OWio0Ed3w.roa (raw, json)
Hash identifier: j+HdrBtXAtTZgu8aNGoL9Pn8S0MCOrlPhROCpWXQwvM=
Subject key identifier: C7:63:E5:8F:A1:D4:F3:5D:C6:9F:A0:A7:23:A3:96:8A:8D:04:77:7C
Certificate issuer: /CN=797000d67c8deb6262e009a9aff422a1038f4489
Certificate serial: 0194258F3C1282CE45EA94D28584C1ED7848
Authority key identifier: 79:70:00:D6:7C:8D:EB:62:62:E0:09:A9:AF:F4:22:A1:03:8F:44:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/x2Plj6HU813Gn6CnI6OWio0Ed3w.roa
Signing time: Thu 02 Jan 2025 05:48:51 +0000
ROA not before: Thu 02 Jan 2025 05:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20647
IP address blocks: 2.57.160.0/22 maxlen: 22
2a09:ce40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:3c:12:82:ce:45:ea:94:d2:85:84:c1:ed:78:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797000d67c8deb6262e009a9aff422a1038f4489
Validity
Not Before: Jan 2 05:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c763e58fa1d4f35dc69fa0a723a3968a8d04777c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:79:50:5b:09:e5:ba:88:4e:a7:67:33:8e:bc:
77:38:1b:dc:26:8b:d9:18:f5:d2:45:3a:f2:1d:6f:
ab:2f:fa:e6:74:41:79:73:5f:1f:39:39:ac:93:4a:
d7:06:d9:3c:38:69:d2:91:07:3c:0d:fd:af:c7:0f:
4d:dc:68:49:8d:da:5f:27:8f:0a:5d:08:c3:cb:cf:
6e:62:11:43:6f:80:6c:e1:6c:64:4a:d5:5b:1e:8a:
20:bf:fa:a4:e4:ae:19:4c:d5:86:df:8e:a4:c2:d3:
e7:8a:cb:36:89:3d:39:28:c5:41:43:32:3c:4b:56:
d9:23:62:7b:d8:83:b4:20:02:e2:ca:4c:f2:0c:29:
d8:62:13:ed:e3:e4:9c:26:58:fa:2a:78:b2:d5:ca:
3d:4e:52:5c:97:13:47:90:61:07:a5:73:02:68:54:
8e:79:f2:33:d3:dd:12:4d:2d:35:5b:b8:9f:f4:03:
72:de:02:5f:3b:11:38:13:c3:5d:8d:dc:95:70:c0:
4c:dd:b8:7f:7d:b1:6f:d3:2c:f4:ac:dd:b8:8f:f7:
84:cc:e1:39:d8:fb:f3:bc:59:cb:04:83:7a:d3:8c:
89:64:c8:fe:94:12:a7:e0:f8:92:f1:ac:25:98:ca:
ce:de:74:66:8e:f9:c7:8d:ec:07:5f:d4:32:e1:5c:
18:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:63:E5:8F:A1:D4:F3:5D:C6:9F:A0:A7:23:A3:96:8A:8D:04:77:7C
X509v3 Authority Key Identifier:
keyid:79:70:00:D6:7C:8D:EB:62:62:E0:09:A9:AF:F4:22:A1:03:8F:44:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/x2Plj6HU813Gn6CnI6OWio0Ed3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.160.0/22
IPv6:
2a09:ce40::/29
Signature Algorithm: sha256WithRSAEncryption
36:d4:1b:68:25:ef:9a:d4:cc:43:30:80:a5:a5:9b:3b:f4:d6:
24:85:61:23:73:77:4f:a5:ed:9b:2f:ae:22:71:2b:9f:4c:e3:
eb:74:c0:84:25:5e:9f:18:4e:0f:07:ab:9b:01:3d:c1:6d:c1:
2f:ca:57:1a:c2:87:e1:f8:2e:0a:5c:fc:cc:19:2f:16:6f:78:
08:19:01:36:5a:95:8e:5c:c2:89:d3:9d:e8:48:4b:f7:65:e0:
83:d9:e5:93:5e:4f:e9:1b:ea:23:77:ec:52:48:1b:db:bd:11:
90:11:3f:2c:37:df:df:a6:25:86:66:32:70:35:f6:25:81:f8:
4d:6b:98:9d:b5:ec:79:bf:ac:b5:1d:54:fc:c0:e7:f8:42:0f:
1a:e3:fd:b4:89:41:17:50:91:61:eb:04:41:44:02:2a:81:80:
93:cd:b8:52:64:7f:a9:64:1f:eb:53:2f:77:fb:26:f2:59:c6:
3e:e4:26:e9:c8:b2:2e:c6:b2:1b:dd:99:71:ed:a4:34:67:ab:
25:58:ad:2e:36:02:62:5b:66:0e:b5:86:65:5b:e4:13:83:05:
ff:87:c4:0c:5b:12:e9:2c:78:09:e8:0a:07:fe:38:6a:1c:c9:
85:29:3a:ee:31:54:98:fc:64:42:52:73:f8:02:a5:21:0c:b7:
fe:8c:e4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:05:50 2025 by rpki-client