Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/2s9R-8NKLGYziws7CzdBBuI05qY.roa
File: 2s9R-8NKLGYziws7CzdBBuI05qY.roa (raw, json)
Hash identifier: 8cPZV8bL1izy9SNqvDNd1+gha6xq2vYnb61KexJW8KE=
Subject key identifier: DA:CF:51:FB:C3:4A:2C:66:33:8B:0B:3B:0B:37:41:06:E2:34:E6:A6
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 019421B1916E11A4952650AB7FA717177A7D
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/2s9R-8NKLGYziws7CzdBBuI05qY.roa
Signing time: Wed 01 Jan 2025 11:47:52 +0000
ROA not before: Wed 01 Jan 2025 11:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201508
IP address blocks: 185.4.24.0/22 maxlen: 24
185.42.0.0/22 maxlen: 24
185.245.212.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 08:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:91:6e:11:a4:95:26:50:ab:7f:a7:17:17:7a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Jan 1 11:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dacf51fbc34a2c66338b0b3b0b374106e234e6a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3f:3c:a1:d6:93:35:7b:9d:96:4d:69:66:db:
f5:50:53:5c:a2:b2:81:06:d2:89:e9:e8:7f:8d:60:
39:11:84:25:ba:14:9e:05:d7:73:9b:58:75:08:e1:
e2:66:82:d2:d4:1a:05:29:a0:43:5e:e3:e8:c2:af:
c4:31:4d:af:0e:54:c2:3b:b9:38:ba:e4:bc:bc:d0:
15:9c:ac:ac:fd:33:c7:bd:da:8c:8b:e8:1f:cd:08:
68:64:9b:01:32:61:f6:01:82:fe:0d:5d:eb:f5:89:
4f:09:13:e9:dd:0e:c8:15:d9:da:11:9e:7d:80:74:
4f:2c:99:fd:14:b9:27:b0:b5:4e:ff:5b:c7:e3:b6:
16:b7:5b:7d:d8:b9:72:19:9a:51:8c:24:f0:a1:9a:
e5:b7:1e:23:60:dd:86:43:d2:d2:80:08:0c:b4:79:
5e:da:12:37:17:df:56:8b:23:be:b4:57:72:9c:41:
30:e4:b2:12:58:07:92:34:64:52:7e:b2:14:1f:54:
ff:08:6c:dc:1b:58:37:7b:52:d4:e7:33:00:a0:1f:
73:20:da:75:6d:6a:35:5a:88:0c:98:49:4f:47:bb:
6a:b6:b2:5a:80:4c:33:38:70:7c:cf:d0:f0:c2:c4:
b8:1a:19:c7:ef:d0:d1:71:58:24:13:f6:dc:2c:6f:
5e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:CF:51:FB:C3:4A:2C:66:33:8B:0B:3B:0B:37:41:06:E2:34:E6:A6
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/2s9R-8NKLGYziws7CzdBBuI05qY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.4.24.0/22
185.42.0.0/22
185.245.212.0/22
Signature Algorithm: sha256WithRSAEncryption
03:ed:96:5c:7f:44:c5:a7:53:13:d0:11:f1:01:8a:62:e6:72:
e2:6e:44:a8:07:e7:82:65:f5:77:d4:89:01:9f:9e:ec:6d:e1:
60:e1:d8:23:b6:bc:02:4b:22:6e:24:6f:0d:a1:18:00:3d:08:
38:05:83:e3:ed:d7:7e:a2:5c:8c:c3:28:c6:25:ef:64:ec:af:
3e:40:eb:73:df:68:90:ea:0e:73:dc:0d:8a:6f:cd:08:e2:86:
67:16:06:b3:77:fd:26:4a:6f:5e:b6:90:c3:46:4d:6a:e3:e5:
bc:95:4a:45:0a:50:a6:89:6d:48:9a:e6:f2:be:b0:95:a5:cd:
d8:b8:6e:d2:9e:6d:e7:e3:22:62:a5:10:7d:17:c4:f6:8b:fc:
98:50:f1:8f:e6:c9:23:7b:17:82:3d:d9:e6:03:d7:71:53:7b:
07:8b:95:0c:7b:d1:cd:cb:8c:f6:9e:3b:3a:3d:22:30:44:73:
7d:4a:a4:0a:cd:8e:05:cb:3f:b9:47:b9:03:9a:5b:33:2c:56:
d4:d0:17:46:f0:a6:28:80:32:9a:74:fd:92:dc:9e:2e:93:24:
21:88:3f:7b:6d:84:3a:d0:39:ee:12:95:7f:b6:3c:d4:ad:51:
d1:75:a7:8e:a7:cf:c2:b5:a2:40:fe:39:8d:e1:87:66:72:fd:
18:0d:9b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:50:32 2025 by rpki-client