Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/2nu94bRpDMa-mlfbsC1YR4mecUE.roa
File: 2nu94bRpDMa-mlfbsC1YR4mecUE.roa (raw, json)
Hash identifier: Q8+h45/Keq7mex3FbK0PPZB2TjbV76+31mEqnwydPl4=
Subject key identifier: DA:7B:BD:E1:B4:69:0C:C6:BE:9A:57:DB:B0:2D:58:47:89:9E:71:41
Certificate issuer: /CN=78ac31635d091be6155743311fe1db7c7af3477b
Certificate serial: 019427B5A8B0CEB3CBFEE74EBD54CE2D3955
Authority key identifier: 78:AC:31:63:5D:09:1B:E6:15:57:43:31:1F:E1:DB:7C:7A:F3:47:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/2nu94bRpDMa-mlfbsC1YR4mecUE.roa
Signing time: Thu 02 Jan 2025 15:50:04 +0000
ROA not before: Thu 02 Jan 2025 15:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208901
IP address blocks: 91.198.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:a8:b0:ce:b3:cb:fe:e7:4e:bd:54:ce:2d:39:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78ac31635d091be6155743311fe1db7c7af3477b
Validity
Not Before: Jan 2 15:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da7bbde1b4690cc6be9a57dbb02d5847899e7141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:10:44:3a:c0:ec:04:cb:1e:8d:80:de:f0:b3:
46:d2:39:27:17:ec:8c:cc:b7:c0:a8:f6:8f:8f:2f:
79:48:d2:b2:fd:42:e3:80:8c:e0:5d:3d:b5:a0:c4:
ba:bc:33:a4:df:01:f1:b4:52:f5:7c:63:b8:6b:1e:
8d:84:b7:22:ec:92:4c:d3:b6:da:11:95:15:43:0f:
c1:7c:38:f9:da:38:b2:97:d9:4e:ed:e5:8e:a1:b9:
46:11:e6:33:bd:09:4f:22:4a:ff:41:04:08:1f:30:
51:2c:9c:3f:a1:73:28:3f:a8:80:b0:62:73:14:6c:
98:93:ec:b9:d7:48:66:14:32:d6:82:4e:b6:29:c3:
3d:47:b6:3b:41:b3:9a:9b:e2:90:9c:cb:3b:6f:dc:
d7:5a:a9:7b:91:db:0a:c0:8c:53:8a:d5:7b:c8:13:
09:37:fc:47:26:26:d6:21:da:0f:8d:6b:8e:28:16:
9a:09:8d:1d:d7:82:f6:eb:3d:79:0d:91:10:94:58:
ed:23:da:a4:fa:f5:5b:c6:5e:15:65:91:04:39:cf:
0e:6b:97:e9:07:9b:c7:83:3c:ae:66:37:16:25:d7:
e3:93:97:45:fe:20:fd:f1:11:b7:bd:c5:6a:5f:b0:
70:7a:cd:b9:80:28:ac:df:17:c3:57:44:08:fa:bc:
a5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:7B:BD:E1:B4:69:0C:C6:BE:9A:57:DB:B0:2D:58:47:89:9E:71:41
X509v3 Authority Key Identifier:
keyid:78:AC:31:63:5D:09:1B:E6:15:57:43:31:1F:E1:DB:7C:7A:F3:47:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/2nu94bRpDMa-mlfbsC1YR4mecUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.64.0/24
Signature Algorithm: sha256WithRSAEncryption
74:2d:df:c0:fc:f5:d9:03:89:db:31:88:c4:54:7c:dd:eb:dc:
66:ff:df:53:dc:9f:41:78:a9:46:41:ba:10:52:a4:e2:47:e5:
00:66:41:5b:b1:cf:c2:a9:ae:fb:ae:52:4f:ed:6d:fd:58:6f:
16:5f:9b:f1:f9:8a:18:bb:d7:0d:2d:4a:e7:6f:cb:f0:b6:44:
5a:60:da:4e:86:62:85:c8:8e:19:79:64:a1:96:58:48:a6:36:
ce:7f:70:33:1f:94:b0:67:0b:b1:1b:43:a3:ee:9d:66:07:53:
76:4d:d7:55:04:6f:67:00:ee:ad:53:59:81:ce:06:01:2f:9a:
91:90:3c:7a:78:e7:20:2c:43:50:99:73:37:79:4c:21:da:58:
92:2b:fd:85:26:66:73:a0:08:10:f3:38:fe:d2:6e:95:30:a3:
ce:30:55:dc:29:63:08:2e:cb:7f:b2:39:1e:ae:da:5c:c3:a1:
83:15:9f:47:62:0c:4e:9e:0a:8a:20:7e:fe:15:de:d9:c0:41:
5e:e0:b2:7d:7f:ff:ed:f3:d8:48:87:18:38:16:d4:f9:fe:2d:
7d:a9:02:fd:cd:95:23:99:72:d0:02:e6:c7:28:5d:51:0b:7f:
47:87:9b:80:de:94:d4:ba:f2:19:de:54:e8:56:84:af:73:db:
f8:b7:f1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:53:52 2025 by rpki-client