Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2A98w-jez1tGwUsn-X2DULCGqe4.roa
File: 2A98w-jez1tGwUsn-X2DULCGqe4.roa (raw, json)
Hash identifier: KOSxjRDMCB/zLAqbVckxPbzhdU0koEzk8TboJdkO0Gs=
Subject key identifier: D8:0F:7C:C3:E8:DE:CF:5B:46:C1:4B:27:F9:7D:83:50:B0:86:A9:EE
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824A1FE8C456A2CAA219F8D562471B5
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2A98w-jez1tGwUsn-X2DULCGqe4.roa
Signing time: Thu 02 Jan 2025 17:51:16 +0000
ROA not before: Thu 02 Jan 2025 17:51:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198228
IP address blocks: 87.121.34.0/24 maxlen: 24
87.121.35.0/24 maxlen: 24
87.121.35.1/32 maxlen: 32
91.92.194.0/24 maxlen: 24
94.156.3.0/24 maxlen: 24
2a00:1728:d::/48 maxlen: 48
2a00:1728:24::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:a1:fe:8c:45:6a:2c:aa:21:9f:8d:56:24:71:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d80f7cc3e8decf5b46c14b27f97d8350b086a9ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ed:62:01:d0:5b:8e:ee:c8:8c:af:aa:3f:12:
cf:f6:3e:60:88:56:68:15:cd:ab:3c:7a:2e:6f:58:
bb:2e:7b:b7:f1:56:5a:29:bb:ff:62:f1:44:65:0d:
9f:7e:18:87:95:20:d6:3a:9f:b3:62:7b:22:1d:28:
2f:47:40:ad:cf:17:be:66:aa:b8:7b:80:40:86:37:
7c:2c:59:6e:ce:1d:b9:76:a0:92:2a:3d:8c:0a:43:
cf:34:5f:45:5f:89:80:f3:a3:a7:f8:b7:3a:0b:f7:
9d:01:d2:5c:9c:9a:7a:84:2c:d8:03:49:92:13:78:
0c:a5:12:46:7c:75:1f:95:e1:9c:d4:92:c9:1c:4b:
f9:ce:e5:a6:00:32:81:8e:54:89:6b:b8:8c:f7:f7:
53:2c:78:30:ea:80:c0:4d:6c:46:2b:a6:4b:89:c3:
bb:7a:2a:9c:3f:de:6a:5b:46:80:7a:41:79:7b:0e:
1d:f4:43:21:5a:65:5e:20:05:aa:d7:c3:24:2a:19:
bd:c5:6e:ff:af:4c:b1:ce:50:77:f5:a1:b2:1c:a3:
80:44:28:de:ff:74:10:a3:b7:00:43:4e:45:b8:1e:
63:2f:b1:f3:1c:3a:73:d6:01:b4:6e:0d:55:b2:50:
5f:1a:66:0e:8e:91:60:e6:9e:50:22:12:5b:af:0a:
6f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:0F:7C:C3:E8:DE:CF:5B:46:C1:4B:27:F9:7D:83:50:B0:86:A9:EE
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2A98w-jez1tGwUsn-X2DULCGqe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.34.0/23
91.92.194.0/24
94.156.3.0/24
IPv6:
2a00:1728:d::/48
2a00:1728:24::/48
Signature Algorithm: sha256WithRSAEncryption
2d:30:c3:11:de:74:82:fe:3f:e8:7c:8e:db:ca:c0:fd:09:0b:
e6:79:c8:be:85:a4:a0:d8:6a:88:5b:5d:7f:1e:f2:8d:71:8c:
ab:8a:30:76:d8:33:25:70:2b:4e:25:ed:34:97:43:33:c8:fd:
d3:e8:06:61:70:ad:b8:a0:b7:ee:35:9a:45:da:a4:28:d9:7a:
7f:fc:f0:93:eb:7d:84:73:9c:c3:e2:a1:c4:7c:a0:a8:da:8d:
a5:9d:ff:cc:fa:57:7d:b7:b9:85:63:eb:ec:85:47:24:a9:e2:
cc:11:d2:a8:92:72:e1:7a:a9:36:f7:50:fb:b0:5c:b4:a1:38:
a2:4f:f9:55:06:5f:18:92:c1:a3:f8:5f:5f:95:3c:ec:e7:09:
1d:d1:f6:22:fa:a2:17:9f:ea:b5:01:67:c0:42:c0:d8:5e:97:
e7:4f:a6:31:c4:c0:8b:b9:94:00:eb:a9:d7:29:f9:6e:49:4f:
98:ad:1d:c4:75:16:1c:35:24:f6:46:ee:68:07:cb:b5:0e:13:
75:61:1e:f4:35:09:0a:02:7c:28:b3:73:44:88:17:7e:20:09:
ee:2d:23:2e:02:e6:75:e4:16:15:39:23:a2:24:bd:39:5b:15:
4c:f3:3d:78:91:2a:0f:89:e4:92:92:58:c3:7e:ab:7b:13:5c:
99:ed:a6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:36 2025 by rpki-client