Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/2hDPatYNHQhIPlvymgRA-xmm86U.roa
File: 2hDPatYNHQhIPlvymgRA-xmm86U.roa (raw, json)
Hash identifier: 8kdVjJKDXzBN5JG+XGLJqwndIaq/0FXixJOUEgyTy9Q=
Subject key identifier: DA:10:CF:6A:D6:0D:1D:08:48:3E:5B:F2:9A:04:40:FB:19:A6:F3:A5
Certificate issuer: /CN=67589d5fe4bb1c5bdb83a353c2737dc604341326
Certificate serial: 0195EC4D16C50E45986AEC649FA6D500A9AF
Authority key identifier: 67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/2hDPatYNHQhIPlvymgRA-xmm86U.roa
Signing time: Mon 31 Mar 2025 13:03:49 +0000
ROA not before: Mon 31 Mar 2025 13:03:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9123
IP address blocks: 185.207.64.0/24 maxlen: 24
185.207.65.0/24 maxlen: 24
185.207.66.0/24 maxlen: 24
185.207.67.0/24 maxlen: 24
217.199.252.0/24 maxlen: 24
217.199.253.0/24 maxlen: 24
217.199.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ec:4d:16:c5:0e:45:98:6a:ec:64:9f:a6:d5:00:a9:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67589d5fe4bb1c5bdb83a353c2737dc604341326
Validity
Not Before: Mar 31 13:03:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da10cf6ad60d1d08483e5bf29a0440fb19a6f3a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ef:aa:b1:8d:d8:df:ce:2b:77:0e:1e:67:19:
08:81:6d:58:e8:23:56:ce:61:5a:c8:49:0c:a8:fc:
f4:0e:07:77:d2:0a:b4:52:06:b0:ff:1f:02:89:66:
85:fe:66:30:9f:7e:01:fd:17:84:b6:fa:e3:fb:3c:
43:ba:4b:e8:b9:04:71:38:fb:a4:86:0f:a3:df:dc:
1b:ee:13:69:bc:15:0b:da:2a:d3:6d:a6:27:f8:2a:
ce:01:f5:04:a2:e2:56:b5:1f:a5:39:65:b7:7b:a3:
0b:2c:c0:c4:12:58:0f:3d:72:35:db:cf:3f:9b:0f:
6f:72:4d:ea:7d:0d:28:1c:fb:9b:35:d7:3a:fb:c1:
1b:51:d3:aa:f5:aa:e1:4a:6b:21:89:3b:bf:2d:4c:
b9:f5:f5:b8:8c:f2:ba:b6:ec:c1:09:ed:f8:eb:04:
88:28:4d:80:71:21:40:83:f9:8d:29:9e:f7:b1:59:
2c:a4:b9:89:48:8e:f5:52:ea:09:b7:14:49:40:d3:
b7:0a:1d:1a:60:dc:c1:6f:5b:3a:f8:90:4e:fb:2f:
30:64:77:fb:c9:36:3b:27:92:02:c0:9a:63:64:ad:
fb:90:f2:36:09:f4:76:1d:f9:ab:95:34:53:dc:96:
fe:94:8c:ae:78:05:b9:d3:68:46:cc:61:b1:99:ee:
a1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:10:CF:6A:D6:0D:1D:08:48:3E:5B:F2:9A:04:40:FB:19:A6:F3:A5
X509v3 Authority Key Identifier:
keyid:67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/2hDPatYNHQhIPlvymgRA-xmm86U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.64.0/22
217.199.252.0-217.199.254.255
Signature Algorithm: sha256WithRSAEncryption
03:f9:a2:02:ef:b6:b3:d4:ca:49:60:65:b6:31:65:cf:14:4b:
14:ee:e7:8f:f7:87:cb:43:e3:8d:6c:ac:aa:3c:12:f4:f6:c2:
9a:9c:84:66:19:00:f7:1d:da:8b:b2:12:06:7f:01:8f:48:5a:
a6:e8:f2:a4:bd:29:91:f9:0d:23:6f:f1:58:d4:42:b5:5a:2c:
dd:28:fb:9f:ca:6c:10:83:1e:54:3f:2f:e7:ca:32:2c:ac:cc:
b9:43:a5:e3:35:e7:27:7f:3e:a6:3d:ca:6c:3b:01:bb:9a:57:
3c:bd:c8:f6:09:ce:0c:69:f6:25:c7:5c:33:c6:ed:42:c2:43:
3a:fa:91:7b:de:dd:a0:ce:32:21:28:4d:96:2f:92:4f:51:0d:
3e:d6:ac:fe:2c:44:42:fc:60:36:60:8d:31:6b:fa:50:2c:78:
5f:85:00:96:04:9f:b7:54:c0:91:91:71:b1:e3:2b:8f:22:3b:
df:85:f7:94:7e:63:18:99:74:cd:72:81:21:da:72:40:54:9c:
cb:41:a4:01:dc:ef:78:c0:59:7a:db:c4:17:f5:1c:73:9b:b6:
20:73:ad:78:3d:ae:08:36:39:b3:3c:66:3e:e3:2f:75:f7:e2:
ab:8b:66:c2:3d:cd:5e:77:42:5b:01:e2:e4:0b:37:9a:53:38:
a6:6f:c3:d6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Apr 17 02:34:16 2025 by rpki-client