Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/AqLYl2EEpDBKLe2KxdidB5eosFo.roa
File: AqLYl2EEpDBKLe2KxdidB5eosFo.roa (raw, json)
Hash identifier: S1zKj5giVP11rpPOQyfM7On1gt71F+Z2ArRuS6GfdUA=
Subject key identifier: 02:A2:D8:97:61:04:A4:30:4A:2D:ED:8A:C5:D8:9D:07:97:A8:B0:5A
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 0194228E26B0C39F52B85BEAA485FDE35F42
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/AqLYl2EEpDBKLe2KxdidB5eosFo.roa
Signing time: Wed 01 Jan 2025 15:48:48 +0000
ROA not before: Wed 01 Jan 2025 15:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 77.74.230.0/24 maxlen: 24
109.105.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:26:b0:c3:9f:52:b8:5b:ea:a4:85:fd:e3:5f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Jan 1 15:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02a2d8976104a4304a2ded8ac5d89d0797a8b05a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bd:34:01:3a:8b:14:bd:76:2c:3e:ea:75:ab:
77:7f:6d:d4:fe:ae:5e:d0:59:9b:31:ae:90:b4:e7:
43:59:af:83:ad:7b:55:dd:83:97:d1:ba:7a:83:1f:
14:04:79:6f:75:ae:35:1c:33:d9:95:74:d3:8b:45:
36:01:7a:d7:a7:1f:50:0d:2a:6d:ef:10:29:e6:31:
83:f7:c5:66:8e:61:9a:45:bf:71:bc:f2:cc:5b:72:
2f:dc:93:f7:ad:90:6e:7e:12:33:22:17:3e:17:09:
d9:60:2c:11:cb:82:b5:f4:cf:bc:78:45:ba:e6:a0:
dd:18:d5:d6:e8:9f:99:dc:9b:b9:bd:1e:bc:26:e4:
d8:da:ad:9e:58:37:04:b9:8b:5b:94:7e:f2:94:27:
58:43:64:d8:08:06:dc:14:c0:68:c7:ee:b2:63:42:
5c:2d:e5:44:08:2a:c8:d2:57:67:4b:84:f5:31:c3:
7e:23:43:8e:48:82:f8:d3:19:bb:22:3b:6b:20:1e:
9d:b8:52:29:4b:8e:fa:8d:a6:a8:13:51:f2:cd:78:
f6:42:48:52:b9:26:ba:86:f4:e1:92:4a:ee:8c:6b:
63:b7:33:64:77:8b:a4:93:04:94:d0:ef:fa:94:87:
4c:55:21:10:bb:72:96:60:5f:4c:8b:06:0c:1a:45:
78:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A2:D8:97:61:04:A4:30:4A:2D:ED:8A:C5:D8:9D:07:97:A8:B0:5A
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/AqLYl2EEpDBKLe2KxdidB5eosFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.230.0/24
109.105.195.0/24
Signature Algorithm: sha256WithRSAEncryption
65:6a:79:f3:d2:d9:5e:7c:4a:61:4b:4a:be:d0:3d:73:58:09:
21:d1:9d:9b:2f:52:5f:d4:20:81:a2:7d:32:ee:68:11:2f:e7:
94:63:4a:9e:36:82:a6:6a:38:5f:aa:03:9a:a0:35:7a:17:13:
0a:d0:3a:06:f8:c6:99:96:4c:86:c2:2c:e2:ff:54:ae:3f:57:
89:36:8b:3c:45:54:51:4f:5f:48:8d:68:ff:93:a2:c0:ea:50:
c1:5b:3c:e6:83:da:aa:0c:2f:8d:b7:87:64:d5:fe:71:dd:1c:
7a:a1:ea:1e:24:b1:99:2c:26:dc:5f:72:79:08:4e:b9:25:d7:
fe:f1:b8:0e:dd:06:fe:88:5d:c8:bb:40:b8:e8:02:8e:c3:98:
5b:26:bf:e0:e4:82:f8:32:cb:03:da:aa:14:d8:f3:8f:f1:b1:
99:43:30:d2:cd:be:f8:9c:a8:2f:d0:46:7c:56:01:14:b5:1c:
43:45:55:d1:65:05:9d:45:69:9d:06:61:46:66:be:6a:9a:34:
27:d6:ec:b6:05:be:88:ef:40:46:bc:83:e5:b7:57:ba:90:ba:
05:b7:5e:9c:73:98:bc:75:00:f2:51:83:0d:c9:29:50:6c:a7:
48:6e:49:32:25:da:40:3c:80:f5:e1:18:60:e4:f4:76:c7:2e:
25:2e:cc:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:21:40 2025 by rpki-client