Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/2V9yE_-2gPzUwYdccQgBOoOM18I.roa
File: 2V9yE_-2gPzUwYdccQgBOoOM18I.roa (raw, json)
Hash identifier: eOCHHWhfMlB35sI0btwTirM6dsTLjT95v8bNNnNalmA=
Subject key identifier: D9:5F:72:13:FF:B6:80:FC:D4:C1:87:5C:71:08:01:3A:83:8C:D7:C2
Certificate issuer: /CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Certificate serial: 019425FC69A067383B9B2B05E220E9721874
Authority key identifier: 44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/2V9yE_-2gPzUwYdccQgBOoOM18I.roa
Signing time: Thu 02 Jan 2025 07:48:06 +0000
ROA not before: Thu 02 Jan 2025 07:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205513
IP address blocks: 31.129.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:69:a0:67:38:3b:9b:2b:05:e2:20:e9:72:18:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Validity
Not Before: Jan 2 07:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d95f7213ffb680fcd4c1875c7108013a838cd7c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:63:fc:68:b3:ef:c0:51:5b:10:a9:77:6c:29:
55:62:fd:ee:9b:5a:01:f9:08:24:88:c2:2c:6a:f4:
53:48:24:35:36:1e:d8:02:44:ed:03:76:92:39:e0:
0d:e7:20:f5:b4:c6:7e:79:5e:c6:e7:89:15:32:e0:
3c:e7:d9:bd:b1:97:0b:80:b0:88:be:cf:2b:5a:61:
f6:c3:5d:4a:11:e4:c4:d7:37:c6:0a:7a:d0:a0:08:
72:14:b9:73:19:f3:d0:b4:38:6d:0b:6a:36:70:03:
40:26:66:e7:0a:6a:e9:c3:e8:28:35:d3:af:14:fb:
f6:67:a2:4d:47:00:03:d2:c9:de:0e:57:88:09:cb:
06:b3:8b:94:5e:94:cd:b7:29:66:40:88:ab:48:12:
b7:a6:3f:b6:3b:f1:73:1e:e4:5a:5e:fe:f0:86:69:
28:91:90:01:9a:80:05:53:9a:39:f7:bf:c8:5b:71:
6d:19:98:6b:7c:27:22:4d:cf:17:93:63:73:ae:37:
09:e3:54:a8:da:6d:4e:55:77:e1:64:e2:b7:67:15:
c7:a5:a7:10:7d:0e:ad:9d:1b:30:06:13:d6:e9:5a:
ee:0a:fc:9c:57:ec:25:fe:9a:26:da:fa:fe:50:0c:
e6:3b:a8:60:30:19:72:5c:f5:57:69:87:9c:49:2c:
99:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:5F:72:13:FF:B6:80:FC:D4:C1:87:5C:71:08:01:3A:83:8C:D7:C2
X509v3 Authority Key Identifier:
keyid:44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/2V9yE_-2gPzUwYdccQgBOoOM18I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.129.250.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:bb:87:6a:25:a5:9b:de:80:82:2b:e1:34:2b:cd:6c:69:00:
de:10:65:aa:8c:d8:9b:61:c9:a6:f8:20:60:e5:03:2b:8e:fd:
47:31:f0:4d:72:d8:7b:c9:8f:d8:c0:b7:fe:08:39:d6:e7:6a:
52:43:4a:ad:1c:71:96:ec:c0:36:23:1f:90:ff:4d:8c:d2:18:
e7:b2:95:4c:3a:d4:d6:b0:dd:d8:23:41:79:d7:16:42:b3:cd:
09:84:a1:26:25:15:f9:6d:24:7c:0d:24:8b:bd:fa:29:97:20:
cc:21:91:9b:fc:c5:e2:da:14:6e:00:0c:38:08:4c:ad:74:1d:
24:16:41:2b:19:6e:ad:4c:1a:d3:5c:45:da:b6:89:37:c1:27:
10:18:94:ec:83:aa:e7:78:c8:26:e8:3a:28:ed:12:da:e2:b5:
ab:02:1f:d1:a6:80:15:e7:3b:b7:2d:36:e9:c1:05:0d:9d:f0:
ad:d1:8d:82:61:2e:84:18:9a:16:c0:2f:58:c3:b8:e9:18:e8:
5f:3c:91:54:f3:b3:bb:3f:73:c9:ee:77:4e:cb:fd:34:9a:b7:
d7:9e:9c:d0:2e:8c:1f:e6:a1:f2:36:9e:75:a3:25:b9:02:6e:
ee:0c:cb:8a:59:df:60:b9:0e:81:a3:0f:80:2b:9c:7a:e8:52:
da:61:45:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:24 2025 by rpki-client