Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/2nNl06L926tpu-eizOuvakD8Je4.roa
File: 2nNl06L926tpu-eizOuvakD8Je4.roa (raw, json)
Hash identifier: +r/Uhc37YqFAQFWjHwUqpgACDgdHteoXbG5h5c0qhpE=
Subject key identifier: DA:73:65:D3:A2:FD:DB:AB:69:BB:E7:A2:CC:EB:AF:6A:40:FC:25:EE
Certificate issuer: /CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Certificate serial: 019427484A57A9B73F2EFCAA66DEFF3BBA41
Authority key identifier: D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/2nNl06L926tpu-eizOuvakD8Je4.roa
Signing time: Thu 02 Jan 2025 13:50:36 +0000
ROA not before: Thu 02 Jan 2025 13:50:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42708
IP address blocks: 85.203.44.0/24 maxlen: 24
85.203.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:4a:57:a9:b7:3f:2e:fc:aa:66:de:ff:3b:ba:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Validity
Not Before: Jan 2 13:50:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da7365d3a2fddbab69bbe7a2ccebaf6a40fc25ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e0:c6:08:9e:54:d3:00:97:eb:8c:c4:4a:20:
bd:61:89:45:3c:37:69:2e:a3:ed:78:fe:c5:a8:c2:
1c:f6:be:97:a7:73:0b:d2:5f:39:16:f1:fd:1f:c4:
e2:3c:34:78:2a:33:26:c0:95:88:4f:85:c6:4d:fb:
a7:ed:fc:6c:7b:f3:f6:6f:0f:ce:49:48:51:42:21:
81:be:26:f8:4a:b4:81:d4:04:18:51:56:f5:f4:13:
a3:34:62:25:74:63:82:cc:39:d1:3c:01:82:f0:ce:
fd:e2:43:75:dc:7a:6a:2a:91:38:91:58:10:8a:a0:
55:8c:0c:d7:8a:f9:a4:10:b9:38:fe:ab:79:ee:ba:
a4:d6:ba:26:0b:90:00:e4:aa:85:2f:35:95:04:e0:
84:a4:7b:58:1a:59:b7:72:3c:dc:38:88:c6:89:a3:
e5:8b:51:b0:0e:a9:5e:60:71:23:fe:70:77:f9:d5:
3f:7b:2c:db:86:17:07:a0:34:84:e7:30:56:6c:ad:
d8:3d:21:95:6d:28:28:84:a2:1f:bc:e5:ea:bf:76:
2c:8a:a5:df:34:79:ca:aa:e7:e0:bc:29:9d:c6:fc:
dd:d7:80:b5:28:b5:82:01:0e:aa:69:22:a1:7d:d9:
9b:84:96:bb:ce:84:0b:5c:9a:1b:db:4b:61:fc:96:
19:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:73:65:D3:A2:FD:DB:AB:69:BB:E7:A2:CC:EB:AF:6A:40:FC:25:EE
X509v3 Authority Key Identifier:
keyid:D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/2nNl06L926tpu-eizOuvakD8Je4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.44.0/24
85.203.47.0/24
Signature Algorithm: sha256WithRSAEncryption
89:50:11:86:c8:de:1b:b5:14:43:9b:8d:ec:2b:97:05:97:dd:
85:18:09:1e:6f:1d:5d:af:dc:34:fb:45:f7:86:bf:44:6f:60:
34:1f:1d:cd:fc:1a:d1:f8:cd:2f:2c:33:e9:7c:94:bc:c9:3c:
79:40:16:f1:8c:0c:5d:a0:86:b5:ca:77:1b:ec:0b:dd:49:a3:
50:6a:a1:7e:c6:e6:89:32:51:71:eb:de:11:64:5f:41:2e:ac:
54:a8:ae:43:37:6d:e4:a5:00:00:6e:a7:ab:cb:4e:e7:fe:b5:
f8:1a:9e:46:fd:00:9c:54:eb:cc:15:a7:69:b0:75:8d:f1:64:
6e:c5:0b:12:e3:9d:9f:95:66:92:74:24:4c:03:b6:3b:68:9b:
0a:28:11:01:23:dd:e9:c1:c0:94:8c:4a:0d:ee:ce:19:68:8b:
d3:a3:f0:18:72:c6:4f:16:12:c7:32:f5:12:cd:69:91:2f:bd:
72:4d:8f:8c:48:3c:55:74:5f:eb:11:47:94:7b:2f:6c:30:eb:
69:1a:7e:d3:14:bd:50:f3:44:bc:96:d4:dd:d4:a0:18:fd:0b:
31:a4:2c:0d:fd:6a:90:c5:e8:57:89:9d:36:84:22:86:ec:bf:
f6:19:49:dc:68:6e:eb:d8:10:5c:44:ef:2c:66:38:a9:4c:d0:
19:18:ac:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:04:14 2025 by rpki-client