Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/2N-Ad_PjuCdbWMhOkKca0e_4aH4.roa
File: 2N-Ad_PjuCdbWMhOkKca0e_4aH4.roa (raw, json)
Hash identifier: mX5PwA+5z3mRrepVsPYas6Uu6jFtb6sejxlwArRN7qw=
Subject key identifier: D8:DF:80:77:F3:E3:B8:27:5B:58:C8:4E:90:A7:1A:D1:EF:F8:68:7E
Certificate issuer: /CN=8aad9c0ce5ba3905b41970a04e51976076c67e00
Certificate serial: 0194274863CDB9E31D232D9622FF815AD73D
Authority key identifier: 8A:AD:9C:0C:E5:BA:39:05:B4:19:70:A0:4E:51:97:60:76:C6:7E:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iq2cDOW6OQW0GXCgTlGXYHbGfgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/2N-Ad_PjuCdbWMhOkKca0e_4aH4.roa
Signing time: Thu 02 Jan 2025 13:50:42 +0000
ROA not before: Thu 02 Jan 2025 13:50:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 193.135.40.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iq2cDOW6OQW0GXCgTlGXYHbGfgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:63:cd:b9:e3:1d:23:2d:96:22:ff:81:5a:d7:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aad9c0ce5ba3905b41970a04e51976076c67e00
Validity
Not Before: Jan 2 13:50:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d8df8077f3e3b8275b58c84e90a71ad1eff8687e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a7:98:13:32:04:4a:cd:18:d6:4a:85:f0:c1:
f9:ce:a8:3a:ad:68:18:83:9b:3d:58:c3:5a:90:ba:
af:ce:85:6c:d3:42:1e:11:34:cf:bf:17:f4:38:ce:
6a:31:8e:72:a9:7c:a6:2d:a2:7f:d4:9a:2a:d2:45:
84:01:e8:e5:dd:ba:e8:03:db:24:80:cb:5f:c5:5f:
90:bd:7a:f3:78:3a:06:63:65:99:1b:2d:d2:cd:09:
f9:49:1b:04:ea:71:85:9c:a2:e4:19:bf:eb:70:ea:
a5:ba:19:eb:73:b7:20:c3:e4:b5:d8:3e:09:9f:fa:
c1:fb:cb:cd:c9:b7:72:a2:bf:d7:84:7a:98:ea:5a:
c0:68:e0:ff:60:fb:2a:fa:8a:44:34:18:92:c0:79:
85:1c:25:51:b2:5a:27:b8:a6:cf:72:44:44:4f:69:
e0:3f:01:fd:56:a9:12:d8:29:f3:82:ad:01:90:60:
80:e8:41:21:33:62:58:a1:83:f4:d0:92:30:12:d6:
f0:9c:40:7f:67:25:f5:6b:ff:0b:01:dc:37:19:46:
71:60:f8:51:bd:c7:04:42:3f:36:91:cd:5c:83:1e:
a9:2f:4f:a2:d7:35:19:1f:23:fa:8c:11:26:29:0d:
53:a5:f7:e2:dd:b7:ea:34:89:ec:cd:d1:79:16:be:
e3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:DF:80:77:F3:E3:B8:27:5B:58:C8:4E:90:A7:1A:D1:EF:F8:68:7E
X509v3 Authority Key Identifier:
keyid:8A:AD:9C:0C:E5:BA:39:05:B4:19:70:A0:4E:51:97:60:76:C6:7E:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iq2cDOW6OQW0GXCgTlGXYHbGfgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/2N-Ad_PjuCdbWMhOkKca0e_4aH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.40.0/21
Signature Algorithm: sha256WithRSAEncryption
48:8d:4b:34:f5:47:7d:05:13:89:0a:ac:9d:a5:3e:81:29:b4:
91:63:fd:67:05:42:14:6b:cb:d6:b4:6a:73:4c:e2:84:6a:04:
f6:dd:f6:2b:0e:b0:a0:c9:0b:82:2a:db:5b:3d:d4:18:61:cb:
00:c3:0c:8f:7a:3e:ce:16:ae:97:93:da:5b:52:79:ea:39:0b:
50:58:1f:6c:5b:a9:a1:7e:54:f9:e0:6f:0a:ff:6c:72:1c:7c:
e2:77:d4:02:dd:11:ef:89:a5:54:b4:1a:b3:34:ac:f2:ab:28:
39:0f:30:91:1f:55:4a:c2:bb:39:23:75:3c:7d:fc:8f:bc:d2:
d0:56:07:81:0b:9e:2d:c8:1b:44:9f:cb:fe:3d:8b:01:a8:50:
37:1b:81:b5:26:53:e9:42:93:ac:3d:7c:ff:c3:9b:6a:77:18:
fa:85:fe:aa:51:b7:18:ad:ed:5c:10:f1:93:1f:76:7c:f4:b6:
13:90:c9:ad:b7:57:4c:2e:96:72:4b:3d:0b:b4:4c:4d:02:14:
21:bc:11:3f:87:73:4c:7f:65:1a:ec:71:31:1d:e6:bf:8a:e1:
5b:2a:0f:63:97:3c:c0:ba:79:f0:69:79:0e:84:f0:02:f0:0d:
f2:78:31:35:33:bb:ae:38:81:17:5d:4e:84:23:10:d6:47:30:
41:37:97:c9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnSGPNueMdIy2WIv+BWtc9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhYWQ5YzBjZTViYTM5MDViNDE5NzBhMDRlNTE5NzYwNzZj
NjdlMDAwHhcNMjUwMTAyMTM1MDQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOGRmODA3N2YzZTNiODI3NWI1OGM4NGU5MGE3MWFkMWVmZjg2ODdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6eYEzIESs0Y1kqF8MH5zqg6rWgY
g5s9WMNakLqvzoVs00IeETTPvxf0OM5qMY5yqXymLaJ/1Joq0kWEAejl3broA9sk
gMtfxV+QvXrzeDoGY2WZGy3SzQn5SRsE6nGFnKLkGb/rcOqluhnrc7cgw+S12D4J
n/rB+8vNybdyor/XhHqY6lrAaOD/YPsq+opENBiSwHmFHCVRslonuKbPckRET2ng
PwH9VqkS2Cnzgq0BkGCA6EEhM2JYoYP00JIwEtbwnEB/ZyX1a/8LAdw3GUZxYPhR
vccEQj82kc1cgx6pL0+i1zUZHyP6jBEmKQ1Tpffi3bfqNInszdF5Fr7jpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNjfgHfz47gnW1jITpCnGtHv+Gh+MB8GA1UdIwQY
MBaAFIqtnAzlujkFtBlwoE5Rl2B2xn4AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXEyY0RPVzZPUVcwR1hDZ1RsR1hZSGJHZmdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9lNDQ1ZTQtMjZiZC00OGM5LTgzZGIt
N2EwZWNlOWMwYWY4LzEvMk4tQWRfUGp1Q2RiV01oT2tLY2EwZV80YUg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9lNDQ1ZTQtMjZiZC00OGM5LTgzZGItN2EwZWNlOWMwYWY4
LzEvaXEyY0RPVzZPUVcwR1hDZ1RsR1hZSGJHZmdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwYcoMA0G
CSqGSIb3DQEBCwUAA4IBAQBIjUs09Ud9BROJCqydpT6BKbSRY/1nBUIUa8vWtGpz
TOKEagT23fYrDrCgyQuCKttbPdQYYcsAwwyPej7OFq6Xk9pbUnnqOQtQWB9sW6mh
flT54G8K/2xyHHzid9QC3RHviaVUtBqzNKzyqyg5DzCRH1VKwrs5I3U8ffyPvNLQ
VgeBC54tyBtEn8v+PYsBqFA3G4G1JlPpQpOsPXz/w5tqdxj6hf6qUbcYre1cEPGT
H3Z89LYTkMmtt1dMLpZySz0LtExNAhQhvBE/h3NMf2Ua7HExHea/iuFbKg9jlzzA
unnwaXkOhPAC8A3yeDE1M7uuOIEXXU6EIxDWRzBBN5fJ
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:26:57 2025 by rpki-client