Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/1eUzZitDZ013U4KoMXhLsZt-Ouw.roa
File: 1eUzZitDZ013U4KoMXhLsZt-Ouw.roa (raw, json)
Hash identifier: onauJHUcj3/Gk42IQtCwNxPA1GwGcTPdZF4tzNU5Cic=
Subject key identifier: D5:E5:33:66:2B:43:67:4D:77:53:82:A8:31:78:4B:B1:9B:7E:3A:EC
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 019427479D31FD7A7E053D9C0F022A26BA1C
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/1eUzZitDZ013U4KoMXhLsZt-Ouw.roa
Signing time: Thu 02 Jan 2025 13:49:52 +0000
ROA not before: Thu 02 Jan 2025 13:49:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48944
IP address blocks: 2.188.240.0/22 maxlen: 22
2.188.244.0/22 maxlen: 22
2.188.248.0/22 maxlen: 22
2.188.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 10:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:9d:31:fd:7a:7e:05:3d:9c:0f:02:2a:26:ba:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: Jan 2 13:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5e533662b43674d775382a831784bb19b7e3aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d3:a1:9b:28:32:71:0b:e6:11:ef:ec:cd:35:
d1:7d:49:17:a4:d3:00:7f:3e:54:e9:78:f2:1f:1e:
a7:2a:3f:3d:63:32:3e:ca:2c:42:67:36:03:de:fc:
60:bf:c2:66:5c:99:58:92:5b:10:62:51:4f:42:a5:
28:36:d5:59:77:04:75:70:b8:d2:37:35:92:a5:72:
38:b3:a4:d6:13:92:e2:ea:78:9a:e3:a0:82:2f:84:
68:ab:b6:8f:7c:13:3d:71:ae:bd:f3:2a:87:51:7a:
90:76:e8:f1:77:7b:f8:8a:8a:5d:a2:85:62:7c:03:
54:cf:27:85:40:3e:ac:28:0e:71:2b:f9:d1:31:fa:
6b:5a:82:98:6f:79:4d:17:c9:15:a9:11:4e:c4:8d:
99:d3:b2:85:dd:aa:7a:09:53:43:5b:1b:d9:28:98:
12:29:85:56:af:aa:4d:4e:a6:ef:62:24:d9:bf:7d:
a2:d9:44:2f:94:26:5b:90:f6:07:b4:18:6f:98:51:
6f:05:a7:50:88:1d:1b:12:f8:ac:6a:e7:b5:62:b0:
cd:e3:41:c4:c8:c8:33:0e:f5:0a:96:9f:51:93:d8:
60:99:eb:a4:b1:c7:ca:a1:29:2d:8a:d2:0b:98:9a:
d4:71:e0:8b:e0:24:87:27:b2:13:5f:01:a2:fb:7b:
2a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E5:33:66:2B:43:67:4D:77:53:82:A8:31:78:4B:B1:9B:7E:3A:EC
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/1eUzZitDZ013U4KoMXhLsZt-Ouw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.188.240.0/20
Signature Algorithm: sha256WithRSAEncryption
37:b2:3c:4e:dc:fe:15:2a:0a:ac:27:21:58:5c:0d:0d:10:2e:
42:33:76:bb:d8:d5:aa:44:b4:db:73:f7:51:2a:6a:9a:04:12:
6e:de:0a:e2:44:27:94:eb:87:01:f7:4c:52:3b:2f:7c:04:60:
c9:bf:23:48:35:e9:2c:ce:46:48:b9:a7:4c:71:1a:c5:21:7e:
f3:3d:4d:87:4f:83:47:e2:d4:13:a0:52:be:7b:46:b4:80:9a:
61:20:e2:19:a7:1b:ab:f8:18:f6:95:e4:56:cc:0e:c8:46:fc:
c2:d7:52:ab:b0:e7:8c:24:48:39:a1:bc:a5:cc:b1:90:29:3f:
58:c5:74:7f:89:2a:19:a0:d9:61:da:2f:f7:70:99:57:e6:7b:
4f:da:cf:4a:7e:d8:5a:3e:f2:ea:dc:a8:d8:26:e5:74:bc:6e:
8e:4f:e5:fa:b1:07:c6:53:7e:86:6f:26:b1:2f:0f:aa:bd:33:
2f:9d:5d:f8:e6:ff:68:46:38:49:f1:08:cb:05:1b:7f:90:53:
d3:2f:96:4d:9a:34:62:60:27:86:0d:c4:41:39:6f:5a:77:8d:
0f:52:1f:81:7a:66:71:4b:f8:45:30:b3:8f:bd:8f:87:4c:e0:
a7:16:a4:80:a2:5d:85:04:c4:5c:8b:f2:f9:83:a7:e4:7d:aa:
1d:41:7f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:49:55 2025 by rpki-client