Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/2cTr93XSpmWbM-qTTud8CZ5Sh1I.roa
File: 2cTr93XSpmWbM-qTTud8CZ5Sh1I.roa (raw, json)
Hash identifier: Ox67FMktxFvYuYpHVpuT5WkOs/dH1k6Q6zB500ivOTA=
Subject key identifier: D9:C4:EB:F7:75:D2:A6:65:9B:33:EA:93:4E:E7:7C:09:9E:52:87:52
Certificate issuer: /CN=d2abab75e746db1ecaa998759900399485093027
Certificate serial: 019422FBC4C63038AE624727DA2C176DBD22
Authority key identifier: D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/2cTr93XSpmWbM-qTTud8CZ5Sh1I.roa
Signing time: Wed 01 Jan 2025 17:48:32 +0000
ROA not before: Wed 01 Jan 2025 17:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198771
IP address blocks: 91.239.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:c4:c6:30:38:ae:62:47:27:da:2c:17:6d:bd:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2abab75e746db1ecaa998759900399485093027
Validity
Not Before: Jan 1 17:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9c4ebf775d2a6659b33ea934ee77c099e528752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:14:ed:f1:a7:1e:1b:ab:45:68:eb:22:19:dc:
e3:26:43:df:d3:38:e6:a6:5a:91:60:fc:f9:c4:82:
87:c7:51:4a:4d:e8:d0:7c:bd:6c:35:11:8d:4f:9d:
66:35:78:66:e8:e4:63:b7:e4:0e:bc:f0:db:2c:de:
85:e9:3b:fa:c8:9c:38:e9:e6:17:75:35:d3:dd:7b:
1c:fe:0b:51:ea:a5:64:e4:9c:0b:6d:d9:47:18:81:
a7:6c:60:38:1a:2e:95:18:c7:6b:8b:3e:0a:0c:64:
d2:a3:bd:74:3b:af:53:55:f0:d3:03:4f:d7:8b:8b:
0d:ef:0a:55:8d:e2:5f:60:75:54:0f:88:4e:dc:ed:
21:29:61:4e:40:90:6e:f5:ed:26:3c:7a:07:9a:03:
ea:2f:1c:dc:b7:1b:10:4b:73:2d:56:d9:f3:b6:e9:
a1:29:74:05:15:c2:c4:a1:84:24:7d:04:9f:82:1d:
0c:44:35:4f:1e:30:21:db:dd:48:fa:2e:3c:4e:8b:
6f:d6:ec:26:0d:2d:ea:b2:ad:5f:66:6a:45:21:3d:
95:36:cb:76:05:94:1e:68:ad:9b:3d:56:37:12:71:
a4:64:82:e9:7d:58:d3:8d:e6:94:1a:ef:4e:18:64:
83:80:7a:a1:25:ba:f1:e6:8b:63:75:55:87:04:d6:
22:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C4:EB:F7:75:D2:A6:65:9B:33:EA:93:4E:E7:7C:09:9E:52:87:52
X509v3 Authority Key Identifier:
keyid:D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/2cTr93XSpmWbM-qTTud8CZ5Sh1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.13.0/24
Signature Algorithm: sha256WithRSAEncryption
28:4d:47:29:fa:9e:8f:0b:a6:6d:9d:fa:88:04:88:66:43:68:
8e:88:17:ed:bd:6e:e4:33:cf:49:0a:30:97:b7:01:64:d8:ca:
fd:09:56:16:63:17:89:1f:87:43:1f:7e:70:20:af:5d:fc:19:
b6:43:86:b2:10:10:a5:8b:8c:10:01:79:5f:c4:be:75:bc:b8:
91:83:80:f8:c1:ba:f8:e9:de:1e:5f:72:aa:da:a5:3e:a9:4b:
b8:36:11:cb:29:df:90:6d:5f:d6:ea:fb:a1:ce:74:04:2a:ca:
58:94:61:13:58:a3:30:0e:38:56:93:12:4d:b3:47:4f:24:08:
cc:98:b3:da:54:87:d2:7e:8e:86:ab:c6:fd:ff:6a:1c:0c:22:
22:60:94:32:5f:5a:03:65:94:d2:3f:f6:49:e6:5d:e9:fc:4b:
29:f5:32:a5:17:17:71:1f:82:55:8a:66:9a:ab:9d:15:0f:14:
ff:fb:62:b0:4d:63:bd:57:ee:19:92:27:de:e4:89:1c:87:35:
c6:d7:4a:16:c5:64:6a:c8:58:f3:e6:e4:ab:77:d4:b8:67:2f:
64:10:17:5c:f2:56:a6:e9:91:9a:6f:e2:1c:d4:13:b5:85:67:
7d:55:26:af:e9:c3:33:5f:f6:c1:e5:e4:7c:ba:e2:eb:5c:9e:
37:e2:5e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:27:48 2025 by rpki-client