Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/2vAX5d5bYYVv-n5H2Noy1aBEJag.roa
File: 2vAX5d5bYYVv-n5H2Noy1aBEJag.roa (raw, json)
Hash identifier: +YP0LGgyabuxCMJeG6xWppWaDRIAdduSpVpBmKRvtJ0=
Subject key identifier: DA:F0:17:E5:DE:5B:61:85:6F:FA:7E:47:D8:DA:32:D5:A0:44:25:A8
Certificate issuer: /CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d
Certificate serial: 019420D62DB809D077A5ECCC12B88FF28FE7
Authority key identifier: F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/2vAX5d5bYYVv-n5H2Noy1aBEJag.roa
Signing time: Wed 01 Jan 2025 07:48:14 +0000
ROA not before: Wed 01 Jan 2025 07:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59779
IP address blocks: 185.12.180.0/23 maxlen: 23
185.12.182.0/24 maxlen: 24
185.57.48.0/23 maxlen: 23
185.57.50.0/24 maxlen: 24
2a02:57e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 16:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:2d:b8:09:d0:77:a5:ec:cc:12:b8:8f:f2:8f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d
Validity
Not Before: Jan 1 07:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=daf017e5de5b61856ffa7e47d8da32d5a04425a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f3:e0:95:19:0c:c4:03:09:5b:75:6c:2f:95:
6c:62:e0:2c:3c:18:23:54:89:38:6e:88:9f:7f:45:
f2:34:21:bd:6f:a1:1d:fc:9a:69:7e:8e:f1:ba:fb:
8f:2d:41:a8:1a:94:0c:23:96:e4:d6:b6:1a:d7:ca:
21:de:42:4b:82:48:6b:58:40:df:49:4d:ad:b6:7e:
a0:03:af:1b:81:94:db:83:d7:3b:0e:20:cf:25:90:
2f:24:38:8d:54:ff:06:1c:fc:d0:4c:1c:69:96:11:
d6:8e:9c:06:4e:c3:e5:6a:61:73:ed:b9:1d:c1:54:
a6:67:b8:26:5c:75:1e:63:ab:4b:91:73:06:8b:5a:
a4:77:ed:d9:ca:d8:98:bf:3f:24:34:3d:af:4e:f7:
9e:bd:2a:4b:02:db:6c:0b:36:fe:01:6e:38:5f:fe:
2f:dd:dc:4a:b7:f3:63:b2:ea:b4:38:45:38:0f:73:
1d:97:b6:d2:eb:0a:d0:66:6f:b5:e0:14:07:f8:a1:
7d:25:0a:aa:8c:4c:52:6e:8c:fb:b9:ff:35:73:1b:
15:de:8f:af:b0:33:e0:f8:2d:c9:99:0b:f6:79:fa:
1e:5a:dd:18:37:72:7a:93:7d:d3:88:d3:ad:e8:3e:
71:92:d3:6d:d8:69:d5:34:c6:9a:49:49:9d:01:ca:
bf:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F0:17:E5:DE:5B:61:85:6F:FA:7E:47:D8:DA:32:D5:A0:44:25:A8
X509v3 Authority Key Identifier:
keyid:F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/2vAX5d5bYYVv-n5H2Noy1aBEJag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.12.180.0-185.12.182.255
185.57.48.0-185.57.50.255
IPv6:
2a02:57e0::/32
Signature Algorithm: sha256WithRSAEncryption
1a:4a:23:90:f4:c9:11:f9:38:c0:be:eb:72:37:70:85:aa:58:
79:6b:46:a8:15:d1:bd:3f:40:ef:2b:b7:6c:69:06:bf:b0:9e:
8a:98:3c:bc:de:3c:db:21:0a:1f:6b:3e:33:2b:53:ba:04:0b:
14:ec:7b:c4:48:77:8c:48:4d:97:75:34:01:19:94:e0:68:f2:
4c:1e:00:2f:d8:f5:29:57:16:5f:78:23:53:80:a5:31:a8:82:
b3:37:1f:19:a5:22:7d:36:a5:99:81:8c:b0:5b:a1:46:c7:13:
08:ad:d5:9b:ef:b9:99:61:b3:d0:e6:0a:ae:d4:44:9a:f9:b2:
d2:e0:bb:fa:f9:ac:e7:95:75:e3:29:33:ef:a5:45:56:6f:a6:
02:9c:96:e2:ed:d4:b3:0f:8b:72:28:43:45:5c:e8:37:a5:45:
66:eb:c9:a6:2b:b9:5f:b7:e0:44:9e:d8:0a:75:91:4e:f5:50:
77:ba:72:04:05:ce:59:ea:df:31:1e:c3:61:aa:34:c5:00:c7:
68:e2:f3:74:c3:2f:c6:fe:44:cd:be:d4:bd:21:8c:ff:04:86:
1f:0e:70:8c:5e:3d:7a:6e:e4:fd:de:4d:50:65:e6:5c:27:da:
c9:53:9f:cc:e4:4f:39:63:63:8a:6f:21:11:49:bc:e7:72:9f:
34:6c:d5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:16:39 2025 by rpki-client