Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/2tlKgZWYdwKRB7Thx-Tt7eqF7tc.roa
File: 2tlKgZWYdwKRB7Thx-Tt7eqF7tc.roa (raw, json)
Hash identifier: Y/RUlUtQxvT0JI5kjjo1ZFF4w4CJbu9XRnIoKgh9j6Y=
Subject key identifier: DA:D9:4A:81:95:98:77:02:91:07:B4:E1:C7:E4:ED:ED:EA:85:EE:D7
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01942369E7759880803779CE36C4B1E0ED97
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/2tlKgZWYdwKRB7Thx-Tt7eqF7tc.roa
Signing time: Wed 01 Jan 2025 19:48:50 +0000
ROA not before: Wed 01 Jan 2025 19:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 149.126.232.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:e7:75:98:80:80:37:79:ce:36:c4:b1:e0:ed:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 1 19:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dad94a81959877029107b4e1c7e4ededea85eed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5b:1e:d0:cf:21:12:d3:42:54:4d:ea:6c:9c:
31:e3:04:8c:de:07:3d:54:3d:53:52:52:6e:cd:4f:
45:65:a8:a9:2a:01:70:a3:97:bc:eb:7a:0a:98:2f:
59:a5:85:1c:8f:2c:00:e8:ff:7f:52:48:04:20:7c:
a5:a1:2e:da:a5:a9:88:92:cf:d9:db:65:d5:32:73:
6c:a5:0f:33:29:e3:cd:bb:f6:06:a6:35:e9:58:a7:
e9:83:5c:e9:21:d0:e2:be:4e:83:1a:91:fd:8d:da:
8f:4a:a1:aa:af:35:b9:8c:2a:df:3d:2f:ca:97:1a:
73:c4:0b:8b:1b:f5:7e:c5:84:b1:fd:9b:d2:a0:76:
58:44:74:d8:1a:01:c4:fa:ff:47:a5:9b:67:1b:56:
cb:fe:50:78:bf:0a:75:4c:77:49:bf:0f:7d:7b:0f:
3c:7b:f4:a5:71:2d:14:d1:61:25:ff:77:e7:96:5f:
7f:8d:23:e6:94:af:67:db:6f:da:1f:87:84:5e:81:
6a:b7:ac:ff:c3:71:1f:78:7c:ad:ab:56:5b:19:d2:
86:84:d9:78:7d:d5:1a:c9:f3:05:64:39:28:0a:ca:
be:3a:62:16:77:e4:a6:b1:bb:89:0a:87:b6:9c:a3:
f8:b8:b2:cf:1e:4b:96:3f:0c:38:3b:e9:ec:4a:90:
1e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D9:4A:81:95:98:77:02:91:07:B4:E1:C7:E4:ED:ED:EA:85:EE:D7
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/2tlKgZWYdwKRB7Thx-Tt7eqF7tc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.126.232.0/21
Signature Algorithm: sha256WithRSAEncryption
70:23:30:33:ba:31:56:b5:a3:3d:d4:cf:08:52:d9:24:b7:56:
c2:fc:7f:7c:fc:1e:fc:b9:bf:88:88:1d:fc:90:55:2a:1d:29:
41:f4:9f:8d:ca:9c:d1:83:63:bd:59:89:1f:10:dd:c3:16:c2:
1a:4f:00:ae:57:6d:f6:63:6e:09:69:86:ea:26:fa:1e:2c:25:
6d:0d:7c:77:10:c2:32:f1:6f:87:51:59:ec:ac:78:1d:3b:1e:
e7:8e:e3:f7:95:41:32:c9:2f:d2:95:8f:ab:30:ab:65:a7:49:
4a:2b:f8:c7:d2:0c:53:97:73:b8:f4:74:d5:5b:49:be:76:d3:
3b:ec:ec:a5:a9:01:7f:1f:f8:96:98:81:7f:45:95:6a:21:8b:
90:78:58:93:74:0f:b1:aa:77:b6:2f:72:d5:17:2b:95:8a:cb:
9f:2e:e9:9d:43:ac:b7:41:71:5f:d2:f0:8d:64:71:43:df:b8:
89:b2:1f:91:a5:1c:04:ad:80:21:58:ba:3f:99:4f:bc:b6:00:
88:60:fc:fb:c3:0f:03:f0:88:60:51:0a:95:d7:7d:fd:75:c0:
96:dd:7c:92:10:f0:d0:10:d3:cf:8a:d5:b6:58:35:3a:f5:58:
59:b1:fe:78:92:8b:22:16:9f:5d:28:b8:27:aa:0c:7f:41:64:
55:57:a0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:02 2025 by rpki-client