Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/zT2Qw6xPXnFpXuLfSpqglIdAkjw.roa
File: zT2Qw6xPXnFpXuLfSpqglIdAkjw.roa (raw, json)
Hash identifier: 1AIBy8buYTsfvfYbU/Bc9YJY13B7tlhntydmfI/GR4g=
Subject key identifier: CD:3D:90:C3:AC:4F:5E:71:69:5E:E2:DF:4A:9A:A0:94:87:40:92:3C
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019422FC168566A2F00B20B6A2F7DE0D0F7B
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/zT2Qw6xPXnFpXuLfSpqglIdAkjw.roa
Signing time: Wed 01 Jan 2025 17:48:53 +0000
ROA not before: Wed 01 Jan 2025 17:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203025
IP address blocks: 194.50.184.0/23 maxlen: 23
194.50.188.0/23 maxlen: 23
2a02:c580::/29 maxlen: 29
2a09:ef40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:16:85:66:a2:f0:0b:20:b6:a2:f7:de:0d:0f:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 17:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd3d90c3ac4f5e71695ee2df4a9aa0948740923c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:92:57:f6:20:38:ce:14:b2:27:a0:85:10:22:
87:eb:b3:aa:6a:2c:45:ba:75:b4:14:22:d7:f2:22:
6f:1c:4f:c3:80:7f:15:d7:48:3f:ed:63:4a:f0:91:
a1:5a:28:5d:72:55:4c:71:da:b6:39:8f:12:b3:13:
fb:fc:ec:72:66:10:71:cd:e4:3a:68:41:06:56:04:
0d:4c:82:af:fd:02:bb:15:df:9e:19:28:e0:03:bc:
3a:3d:9f:20:9e:33:e7:bc:56:89:86:c0:63:8e:f8:
f5:a1:70:a6:4c:f2:40:07:6d:39:94:96:47:d1:94:
94:21:05:c0:c8:b1:c6:ee:a0:b2:57:5b:fb:55:bc:
8c:fc:77:be:86:a1:21:20:26:1a:89:3e:9a:c2:66:
28:62:ab:8d:3d:1b:71:7d:da:5f:ab:93:32:14:fd:
5c:b1:a8:6a:c3:67:04:93:c6:0e:7e:90:73:5c:b5:
c5:94:3e:c2:0d:fa:11:a0:4a:a7:a2:5e:d1:34:7d:
dc:dc:38:6e:48:9d:b5:ff:64:cb:14:0b:8d:43:68:
84:9a:f0:63:0a:fb:b7:d2:35:43:42:43:2a:49:f8:
f6:5a:23:8f:ac:ad:22:ce:af:9f:c7:ef:83:95:54:
38:92:29:90:e4:54:c5:99:eb:65:f8:0a:e2:cb:11:
1f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:3D:90:C3:AC:4F:5E:71:69:5E:E2:DF:4A:9A:A0:94:87:40:92:3C
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/zT2Qw6xPXnFpXuLfSpqglIdAkjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.184.0/23
194.50.188.0/23
IPv6:
2a02:c580::/29
2a09:ef40::/29
Signature Algorithm: sha256WithRSAEncryption
2f:b0:81:54:01:e2:a2:69:4e:e6:5f:33:ea:98:42:88:1a:e5:
b4:81:12:98:51:76:bf:79:09:4e:e5:97:db:18:e8:cc:97:4d:
a4:74:c1:e9:11:0f:ff:1e:f6:5c:48:14:33:2e:5b:4a:2c:04:
f6:01:d5:96:79:d5:46:e0:61:68:2a:0e:ad:ea:dd:69:02:06:
b2:b7:71:1b:5e:37:9b:c6:5a:b8:7b:ba:d8:58:d2:3f:ae:4c:
26:7c:81:4e:bd:e5:8b:a1:90:87:ac:d6:ad:aa:5e:7e:26:d5:
f5:92:c7:4d:c9:b4:5b:7f:a1:98:a1:62:c0:db:e2:e6:3b:44:
b7:88:40:15:21:8b:0b:f3:ab:c1:c2:f8:ba:4d:17:7f:41:06:
df:19:d2:c8:09:28:19:bd:1b:95:aa:49:bb:d8:c4:1c:08:ce:
d5:4e:30:13:d8:ea:08:40:39:03:2a:03:22:01:3c:35:fd:93:
04:07:a8:0d:0a:79:e8:d5:4d:3f:7b:e9:01:12:06:7d:78:ec:
46:19:10:05:57:97:c6:e9:70:b5:9a:97:b1:0a:9c:67:1e:d8:
56:34:e9:67:44:86:30:58:cf:07:a9:30:5a:13:e1:2b:d5:59:
1e:b2:35:98:bb:30:2c:b1:9f:27:0d:ce:c0:13:92:b9:7d:cc:
19:7a:bb:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:16:17 2025 by rpki-client