Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/2H60BPPR9ufPDbF4Sna2hq_xIAM.roa
File: 2H60BPPR9ufPDbF4Sna2hq_xIAM.roa (raw, json)
Hash identifier: QxsGWRCvsbIk5gWwNkSzT6pLWEQ5oWP/VkaBu/SMhfs=
Subject key identifier: D8:7E:B4:04:F3:D1:F6:E7:CF:0D:B1:78:4A:76:B6:86:AF:F1:20:03
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C49C9413288F4909F9B3EF750BD4F
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/2H60BPPR9ufPDbF4Sna2hq_xIAM.roa
Signing time: Wed 01 Jan 2025 01:47:55 +0000
ROA not before: Wed 01 Jan 2025 01:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216281
IP address blocks: 81.180.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:49:c9:41:32:88:f4:90:9f:9b:3e:f7:50:bd:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d87eb404f3d1f6e7cf0db1784a76b686aff12003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3e:cf:86:27:09:de:55:b7:08:42:a2:85:01:
44:03:e3:d2:db:e7:20:96:d1:be:9d:c6:6a:68:84:
1c:e7:1f:fa:6c:eb:e4:09:01:07:62:39:54:02:63:
35:ef:07:d3:ff:31:28:3f:1f:1a:67:5b:1a:8c:ab:
d8:16:95:3f:de:21:96:dd:8a:22:80:c7:e8:58:d6:
2a:41:b7:ff:46:53:73:c4:4d:07:3e:14:bf:2b:4a:
78:a8:73:3e:2d:95:95:d4:cd:b5:f8:da:16:b0:07:
89:bd:1d:a9:dc:a7:d7:02:f7:b3:73:cd:b9:19:5f:
e9:bc:1a:0d:e9:b9:d6:0b:7a:b9:65:e6:cb:69:07:
01:e5:90:d0:cc:25:5f:16:d1:6c:fb:be:8f:57:03:
12:21:ac:e7:30:bd:f9:c7:64:09:1e:a8:25:c8:98:
91:b6:68:6b:bc:57:43:c2:50:aa:f8:89:73:49:7f:
e1:61:c0:2a:c5:f0:c0:41:4d:92:43:91:8d:dc:ca:
e5:86:6e:c0:ef:99:06:78:f8:2a:41:c9:c6:a6:f0:
73:6e:ce:e7:09:de:09:80:b5:5e:a8:b6:76:ab:a5:
c8:4d:79:d9:00:d5:cc:66:17:b0:ba:a9:35:0d:16:
6e:1b:82:1b:98:fd:36:84:f5:c5:e2:49:28:b5:ec:
a2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:7E:B4:04:F3:D1:F6:E7:CF:0D:B1:78:4A:76:B6:86:AF:F1:20:03
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/2H60BPPR9ufPDbF4Sna2hq_xIAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.180.225.0/24
Signature Algorithm: sha256WithRSAEncryption
74:79:6f:54:82:b0:48:4b:e4:7b:a3:ce:eb:92:26:40:77:32:
69:51:e5:4a:34:16:55:f5:7d:6f:e2:64:5e:f6:4b:6f:47:50:
c7:d2:0c:3f:bb:c0:8e:ff:b3:2f:17:e2:41:1b:aa:46:28:a0:
e3:ac:bb:59:5f:a6:29:78:a3:f8:ab:3e:3f:3d:70:a8:b2:1e:
d9:7c:78:38:4a:6b:a6:ca:bd:b7:ee:25:af:fe:d8:ae:0f:5b:
25:b0:df:c2:f5:4c:a2:b4:de:10:d4:1a:4e:ea:5e:f7:11:9d:
19:d6:3d:ca:ab:0f:1d:12:0c:8f:ae:ca:ba:d3:f3:1f:11:55:
c0:ca:33:11:2b:a9:1f:37:6e:fe:fa:26:8a:f2:05:d2:94:69:
bc:8b:c0:e2:9b:dc:3b:c4:64:f2:35:48:f0:ec:b3:54:0d:21:
d3:48:6d:48:39:9d:f5:00:f8:18:6f:f9:24:39:87:5b:cd:6a:
cb:ff:6d:b1:66:29:8a:e1:14:aa:b7:59:11:d4:59:5f:94:57:
ca:a8:2d:49:f9:1e:29:90:bf:64:f5:f3:65:b0:4d:c6:57:01:
10:ec:6a:6d:cd:bb:c6:ba:88:4a:b6:08:23:f9:2b:eb:32:02:
9b:86:c0:e6:53:74:71:5d:75:da:f0:57:e4:22:0c:90:d8:76:
19:df:6d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:30:55 2025 by rpki-client