Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/z2F52wGzH9BMrpqKt2YykAg8u8Y.roa
File: z2F52wGzH9BMrpqKt2YykAg8u8Y.roa (raw, json)
Hash identifier: bvYJ2BHirZKw/0tfOS28eGnj6Ugji4ZaJ639S6rbz9g=
Subject key identifier: CF:61:79:DB:01:B3:1F:D0:4C:AE:9A:8A:B7:66:32:90:08:3C:BB:C6
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 0194266B4CB38A080879E976CCF4F7BE49EB
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/z2F52wGzH9BMrpqKt2YykAg8u8Y.roa
Signing time: Thu 02 Jan 2025 09:49:13 +0000
ROA not before: Thu 02 Jan 2025 09:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210538
IP address blocks: 94.154.32.0/24 maxlen: 24
94.154.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 08:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:4c:b3:8a:08:08:79:e9:76:cc:f4:f7:be:49:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Jan 2 09:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf6179db01b31fd04cae9a8ab7663290083cbbc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cb:b7:5a:9f:49:35:d4:f9:3d:a5:2e:61:e3:
f1:a9:e2:5b:7c:cb:ee:c3:82:fa:3e:52:16:4f:52:
99:fb:8f:09:cf:87:97:6f:f9:4c:dd:3b:6c:17:24:
5d:ec:9c:90:3a:a1:80:fe:3f:76:52:e1:91:97:ac:
ff:a5:72:6b:b8:8a:d5:41:dc:3a:07:99:c2:c0:3f:
98:c1:37:56:e8:51:5c:eb:eb:c5:e0:a9:9e:b9:88:
2e:2e:ce:5e:55:e8:6d:25:7b:b2:22:59:67:ed:08:
46:71:2f:f9:0e:57:88:bf:97:b3:94:e0:b2:b5:fc:
f4:5f:98:25:57:b8:f7:c5:60:9a:0e:26:19:e3:ed:
79:67:9b:25:3f:12:62:55:08:09:bd:cd:3c:9c:3a:
a4:bf:19:fb:b3:2e:2a:a6:fe:7f:55:76:30:31:cb:
7e:fe:08:bc:72:2e:2d:2a:67:4f:96:a9:70:35:56:
fa:d5:79:7e:f4:a8:26:43:04:3b:b5:78:74:cf:dd:
b0:f4:00:6f:fc:95:a4:2a:52:dd:fa:ca:61:c3:e8:
e4:72:76:82:c2:1a:1f:87:ac:58:2a:16:04:ca:94:
0f:6b:cc:75:3f:f3:56:3a:19:15:13:a9:d8:a6:16:
53:59:08:3a:3c:a5:1c:cd:1b:ca:f3:70:a2:5b:b1:
7e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:61:79:DB:01:B3:1F:D0:4C:AE:9A:8A:B7:66:32:90:08:3C:BB:C6
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/z2F52wGzH9BMrpqKt2YykAg8u8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.32.0/24
94.154.34.0/24
Signature Algorithm: sha256WithRSAEncryption
67:5e:c4:cd:78:1f:27:c5:a1:ba:c0:56:66:2b:95:81:c2:6c:
fb:66:9c:6c:27:8e:ac:f9:82:26:3f:0d:ff:df:c4:a4:7e:19:
b9:f5:59:a5:61:79:93:c2:1e:f6:56:55:da:88:91:fd:3d:f2:
7e:53:0a:89:83:d0:70:d2:4b:b9:c7:fd:57:d7:54:af:dc:cb:
9e:4a:70:59:be:2b:5e:6b:c5:a4:fe:1a:30:fa:2d:53:25:b0:
24:09:0f:10:45:26:f0:9f:26:df:b5:53:0b:59:e7:e0:ff:7b:
ae:dd:f3:92:cd:c1:ea:7f:1f:e1:af:81:77:ce:81:0d:4b:e0:
0d:ef:ae:34:7e:c2:f7:4b:50:4a:91:51:51:17:bc:ce:b8:5d:
3d:bf:b2:f4:99:3f:54:ac:64:0c:60:16:bd:c4:4e:00:c4:ef:
77:78:6e:6c:d3:c1:28:64:c3:7a:03:f6:8d:37:8b:0f:93:d7:
9d:8d:f9:f5:db:c5:2f:40:a6:c0:1e:41:52:61:17:45:75:4e:
7e:20:2d:65:92:04:6b:e2:8c:13:68:e6:85:a1:46:54:e6:ae:
10:2e:94:0f:1c:03:34:ec:34:60:9f:3b:de:0a:a5:52:05:22:
bb:ec:ea:c6:42:6d:41:76:1d:fa:77:0b:9c:7a:ba:85:db:04:
91:8e:54:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 14:17:59 2025 by rpki-client