Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/2Fh6mDHQ6-BYGlBx3MhV5PW4a_0.roa
File: 2Fh6mDHQ6-BYGlBx3MhV5PW4a_0.roa (raw, json)
Hash identifier: grPXzh7UKrKKCIxzSzsbZfXISu0fqMnVM0HgZcxoLTc=
Subject key identifier: D8:58:7A:98:31:D0:EB:E0:58:1A:50:71:DC:C8:55:E4:F5:B8:6B:FD
Certificate issuer: /CN=8dc0c82181b90df6c496914c319d31ff8b2a4082
Certificate serial: 019425216D9CB2EEDA05FD043541D1EEEE55
Authority key identifier: 8D:C0:C8:21:81:B9:0D:F6:C4:96:91:4C:31:9D:31:FF:8B:2A:40:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcDIIYG5DfbElpFMMZ0x_4sqQII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/2Fh6mDHQ6-BYGlBx3MhV5PW4a_0.roa
Signing time: Thu 02 Jan 2025 03:48:55 +0000
ROA not before: Thu 02 Jan 2025 03:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42234
IP address blocks: 193.200.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.mft
rsync://rpki.ripe.net/repository/DEFAULT/jcDIIYG5DfbElpFMMZ0x_4sqQII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 20:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:6d:9c:b2:ee:da:05:fd:04:35:41:d1:ee:ee:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc0c82181b90df6c496914c319d31ff8b2a4082
Validity
Not Before: Jan 2 03:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d8587a9831d0ebe0581a5071dcc855e4f5b86bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ba:bf:42:6d:ff:f4:d2:c7:af:c9:99:71:ce:
fb:74:c8:b6:59:fd:7c:b8:8b:04:99:8e:8a:f9:32:
4d:42:b6:3a:75:92:b0:4a:9b:48:ca:d8:cd:58:0b:
db:93:04:05:31:74:0e:7f:00:5c:44:ec:e8:3f:f4:
d3:27:fe:a6:84:ae:0e:30:e9:44:7e:4f:5f:b5:11:
58:4a:7b:b5:b0:21:87:0a:c8:38:f2:fb:0f:13:51:
a3:80:27:b2:aa:05:0d:54:dc:c1:ec:34:61:26:11:
bb:45:36:63:c1:55:48:08:3c:b8:85:37:66:8f:67:
44:1e:c9:94:bd:1a:d5:c3:c8:78:4a:45:a1:5a:3b:
fc:3b:6e:ee:a9:c0:44:8a:5a:6b:7e:6d:db:59:5a:
1c:7a:f2:c5:69:ce:ba:e1:c4:11:75:bd:ec:66:29:
d0:61:31:8d:6d:09:cd:e5:28:f9:0e:6b:63:22:06:
5b:55:e6:9b:60:07:59:c3:9b:49:06:bf:03:59:8a:
7d:35:9d:ae:76:e5:7f:6c:27:ee:d8:f2:5a:9d:0b:
19:f6:12:a4:7f:e1:9a:0f:5c:e1:f9:23:cd:db:3c:
f2:ab:42:1b:e9:ef:09:4f:d7:aa:8b:f2:cf:4e:d7:
82:ca:de:8e:3f:61:c0:21:f1:db:d3:19:85:a7:83:
ae:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:58:7A:98:31:D0:EB:E0:58:1A:50:71:DC:C8:55:E4:F5:B8:6B:FD
X509v3 Authority Key Identifier:
keyid:8D:C0:C8:21:81:B9:0D:F6:C4:96:91:4C:31:9D:31:FF:8B:2A:40:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcDIIYG5DfbElpFMMZ0x_4sqQII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/2Fh6mDHQ6-BYGlBx3MhV5PW4a_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.19.0/24
Signature Algorithm: sha256WithRSAEncryption
04:54:2f:0b:04:95:fa:60:e0:92:49:f1:73:cb:67:71:e2:d3:
b8:e8:27:bf:ff:56:6b:c8:a3:b3:12:69:14:97:05:6c:b3:b9:
b8:7a:8c:39:5a:53:e7:0e:01:80:da:9a:a8:34:5b:4b:ad:31:
87:5f:7e:a4:98:6a:b6:78:8f:9b:19:43:48:94:12:ae:56:64:
60:72:58:aa:f5:af:73:59:c8:8a:8d:19:3d:38:84:95:1a:c0:
dc:51:50:f6:b0:27:ec:04:35:1c:c2:e9:91:c0:15:e0:24:83:
d7:22:a2:1e:5c:2e:e6:0d:a6:1e:cf:5b:22:ed:5d:29:2e:72:
0d:f0:8c:49:18:11:58:a7:25:e8:19:f9:fb:9e:32:b8:4f:0f:
e3:21:9b:92:26:74:51:b6:24:08:8f:3b:0c:63:97:ed:41:86:
53:f1:8d:ef:c5:75:ad:64:75:18:e8:89:ad:e4:c8:58:59:a1:
f4:65:e5:e6:29:e1:cd:02:3c:fa:7b:f1:f9:34:3a:fb:4b:68:
30:74:48:b1:24:7c:fc:07:da:89:be:6e:ac:e3:b1:c5:82:80:
bf:cb:c3:3c:9d:15:a7:f3:64:e2:d8:4b:89:38:9c:1e:fd:db:
0f:35:a3:a0:a2:f5:c2:7a:d8:18:94:dc:0c:94:e1:05:b7:24:
c4:3c:0c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 06:00:52 2025 by rpki-client