Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/2sGEdqQg6VtmffHDW4IA4trsdMM.roa
File: 2sGEdqQg6VtmffHDW4IA4trsdMM.roa (raw, json)
Hash identifier: 1Xbwoi4kHy82KZRVvqXX30wKxGQwJhGrwDpjg2M043E=
Subject key identifier: DA:C1:84:76:A4:20:E9:5B:66:7D:F1:C3:5B:82:00:E2:DA:EC:74:C3
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0195030485F224CD36F2E4508409A7361140
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/2sGEdqQg6VtmffHDW4IA4trsdMM.roa
Signing time: Fri 14 Feb 2025 05:53:02 +0000
ROA not before: Fri 14 Feb 2025 05:53:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214794
IP address blocks: 193.124.227.0/24 maxlen: 24
194.87.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 20:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:03:04:85:f2:24:cd:36:f2:e4:50:84:09:a7:36:11:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 14 05:53:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dac18476a420e95b667df1c35b8200e2daec74c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:98:09:0c:c6:cc:e2:76:e1:3e:cc:04:75:ba:
79:e9:65:3d:4e:3e:2c:8d:d1:c1:be:f8:f8:55:49:
31:52:22:9f:d5:98:30:79:3f:11:55:d4:f6:f9:28:
4c:10:da:c0:8b:bc:1b:ec:00:77:e8:19:6b:c2:b8:
8a:55:0f:8e:36:ae:25:5f:6d:9e:c5:8d:66:5c:95:
a5:6e:3b:7b:82:c1:9e:4c:7c:e4:b6:cd:15:20:08:
65:3c:12:9e:4f:8e:1a:e6:25:2c:99:b0:29:16:79:
bb:d4:6f:ef:d7:f7:c2:01:94:c9:2d:4f:eb:62:f4:
46:b5:7a:1e:27:6b:c1:29:d2:c0:1a:b7:6b:ed:f3:
9c:19:e8:89:2e:ac:16:0f:cb:e6:2f:1f:1d:4b:a5:
fd:2e:ce:16:6e:cd:9a:fe:41:b7:d2:e0:61:3a:31:
10:b2:16:44:cc:93:31:8a:5c:d2:f4:b4:72:fe:ba:
2d:86:59:2c:3f:c0:46:d6:ce:63:6c:16:f0:81:22:
09:5d:31:ba:49:ee:8b:5d:25:c9:4e:9c:00:97:6a:
d6:9b:da:86:75:40:82:97:5f:dc:1f:17:9a:65:95:
36:ee:a1:00:eb:33:eb:22:70:86:f4:1c:de:43:81:
2e:a9:45:5b:25:54:22:8c:ec:3a:b4:0b:fc:08:76:
4f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C1:84:76:A4:20:E9:5B:66:7D:F1:C3:5B:82:00:E2:DA:EC:74:C3
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/2sGEdqQg6VtmffHDW4IA4trsdMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.227.0/24
194.87.224.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:9d:30:7e:2f:d4:34:7c:89:c8:b5:d1:a6:88:ca:be:bd:4c:
90:65:30:b0:c7:75:23:a6:99:e0:28:95:5f:8c:4b:60:7d:fc:
90:1c:fb:e4:e8:36:cb:8d:cf:98:28:11:13:66:b5:3d:bb:b7:
ab:76:15:20:2a:45:ef:87:bc:02:e2:18:e9:83:1a:46:72:44:
61:4e:85:23:83:2f:4d:d7:58:a3:79:35:ff:a7:56:f5:5c:44:
72:42:cd:54:39:4d:83:08:37:a5:53:d1:f0:72:8a:d1:4a:d8:
cb:5c:4c:93:1b:9e:aa:2e:a5:13:83:ce:5b:8f:53:9a:f6:57:
d1:87:8b:0c:d8:f9:ad:d8:99:a3:43:81:4f:82:e4:f6:78:89:
f1:8b:1a:c5:1a:15:65:eb:ce:bd:3d:3f:cd:36:14:a4:bd:80:
fc:10:0b:2b:a3:10:33:80:2f:ee:53:14:b3:e7:65:be:1c:38:
72:8a:95:4a:c3:9d:4d:7b:fb:17:7f:ac:48:c0:1d:b0:2e:b8:
45:a6:67:6d:c6:63:a7:94:6f:c3:e8:d4:0b:f0:76:bd:a8:ef:
ce:25:bd:1a:28:66:81:07:cc:1a:24:3f:a3:1e:ff:95:69:1e:
cc:96:63:d6:77:c5:0b:ec:70:1d:0f:bd:95:3d:d0:eb:e2:e0:
07:fd:12:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:54:18 2025 by rpki-client