Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/2W0mVYMtUj2Armlmk_FP_3q5ESY.roa
File: 2W0mVYMtUj2Armlmk_FP_3q5ESY.roa (raw, json)
Hash identifier: w5Ej5+Qvny/iMXD/R+qRLBIbP+3L75HhJ+B0EUJmp8o=
Subject key identifier: D9:6D:26:55:83:2D:52:3D:80:AE:69:66:93:F1:4F:FF:7A:B9:11:26
Certificate issuer: /CN=10771dd7dea22e35fdaf19b51b839f43721270ba
Certificate serial: 019427466597F4339D77A19728F17A697475
Authority key identifier: 10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/2W0mVYMtUj2Armlmk_FP_3q5ESY.roa
Signing time: Thu 02 Jan 2025 13:48:32 +0000
ROA not before: Thu 02 Jan 2025 13:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15924
IP address blocks: 212.146.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:65:97:f4:33:9d:77:a1:97:28:f1:7a:69:74:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10771dd7dea22e35fdaf19b51b839f43721270ba
Validity
Not Before: Jan 2 13:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d96d2655832d523d80ae696693f14fff7ab91126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:51:32:a8:d2:01:db:82:0e:3f:65:4f:6c:49:
f8:90:14:8f:88:82:95:68:d7:79:58:38:26:44:65:
30:6b:e3:5c:0d:72:6a:7c:21:40:27:8e:60:a6:16:
8b:7d:c9:9c:95:b6:c6:ea:d7:bc:6e:cf:6a:b7:0d:
cc:ca:9a:f8:28:27:96:77:93:ca:7b:dd:ff:83:72:
56:50:68:b7:e1:59:d7:d4:d0:f4:9e:f2:63:c2:a0:
93:54:49:79:c1:b5:ea:61:4e:6e:77:e2:75:a9:4c:
fe:12:f8:7a:ec:2d:7c:e7:ed:17:bb:6b:a3:b5:10:
42:4c:e3:fc:d8:29:f4:9d:f4:97:da:eb:81:7c:e5:
03:c7:1f:f3:cc:85:f9:4f:73:06:58:d8:37:8c:d9:
38:5c:51:49:a0:bc:2c:b3:9b:23:d8:de:6f:d0:2c:
0e:6d:47:75:e8:a7:7c:80:31:20:f5:14:45:eb:cb:
3e:2d:51:58:9d:e2:08:cc:03:41:0f:0a:5a:db:50:
c2:0d:27:ca:bf:17:f1:8a:97:00:24:fd:28:e8:a8:
26:4e:e3:7d:cc:b8:cc:a6:4c:f8:72:7d:61:30:0d:
04:71:51:ec:27:46:bf:52:0a:35:ac:c2:67:5f:ae:
85:b7:5c:a8:ce:52:ae:0b:3f:c9:b2:2e:85:d2:a8:
16:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6D:26:55:83:2D:52:3D:80:AE:69:66:93:F1:4F:FF:7A:B9:11:26
X509v3 Authority Key Identifier:
keyid:10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/2W0mVYMtUj2Armlmk_FP_3q5ESY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.146.134.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:c5:9b:75:17:01:1c:01:f1:77:d0:f4:d5:b6:a9:3b:83:bf:
2a:22:aa:b9:2a:18:59:35:32:23:62:f4:1a:80:25:b6:fe:be:
82:83:87:5a:a8:1f:ef:32:ba:ed:55:e7:12:71:a5:e7:70:65:
e1:7f:9a:bf:97:11:3d:2e:44:9b:5a:92:3c:6c:b5:2c:7e:1f:
db:df:d4:53:a0:9f:c0:b6:a8:0c:57:93:cd:f9:c0:25:1b:39:
74:e6:99:b8:47:ac:fe:cc:44:83:19:82:f2:9e:85:cf:1a:1f:
b3:8f:37:9f:99:79:4e:95:d6:fc:89:b6:d5:c1:38:62:8d:61:
1f:db:55:a3:14:7c:8b:e6:8a:0b:04:c7:9b:c4:a0:9a:f2:71:
54:56:9b:93:68:9b:76:87:20:84:8f:00:dd:34:f0:1b:e9:28:
b8:80:18:89:13:74:d5:bd:c7:8c:fe:5f:b6:03:a1:d9:a2:1c:
7e:76:15:69:65:01:98:42:59:b4:78:3a:b5:df:1b:32:b2:ec:
0f:db:ae:93:6c:63:64:79:cb:5b:59:36:70:86:ec:f1:e2:9b:
dd:38:37:d5:a0:30:be:34:a8:7c:07:a3:8c:e9:a3:81:96:05:
19:db:45:2a:79:50:1c:e7:08:20:06:44:4e:70:e2:af:1f:fa:
08:ba:2c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:10:47 2025 by rpki-client