Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4464f2-6c1c-4096-960b-e39b3a302ced/1/1xQ2-mQTJ0Gbl5USkA38nfw--zI.roa
File: 1xQ2-mQTJ0Gbl5USkA38nfw--zI.roa (raw, json)
Hash identifier: Bmj7Dd8JxoYoJUgJkT98vzeeRsbATtejXxg70Xp0XBw=
Subject key identifier: D7:14:36:FA:64:13:27:41:9B:97:95:12:90:0D:FC:9D:FC:3E:FB:32
Certificate issuer: /CN=2d6f9bdaf69dca1cdb9e440c97c10a092ec1b39c
Certificate serial: 019425FD99FDEE59381AB7F3476075ED85EA
Authority key identifier: 2D:6F:9B:DA:F6:9D:CA:1C:DB:9E:44:0C:97:C1:0A:09:2E:C1:B3:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LW-b2vadyhzbnkQMl8EKCS7Bs5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4464f2-6c1c-4096-960b-e39b3a302ced/1/1xQ2-mQTJ0Gbl5USkA38nfw--zI.roa
Signing time: Thu 02 Jan 2025 07:49:24 +0000
ROA not before: Thu 02 Jan 2025 07:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207857
IP address blocks: 91.209.227.0/24 maxlen: 24
91.212.11.0/24 maxlen: 24
91.212.14.0/24 maxlen: 24
91.212.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/4464f2-6c1c-4096-960b-e39b3a302ced/1/LW-b2vadyhzbnkQMl8EKCS7Bs5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/4464f2-6c1c-4096-960b-e39b3a302ced/1/LW-b2vadyhzbnkQMl8EKCS7Bs5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/LW-b2vadyhzbnkQMl8EKCS7Bs5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 18:56:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:99:fd:ee:59:38:1a:b7:f3:47:60:75:ed:85:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d6f9bdaf69dca1cdb9e440c97c10a092ec1b39c
Validity
Not Before: Jan 2 07:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d71436fa641327419b979512900dfc9dfc3efb32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ae:d6:ae:38:c7:a3:a2:42:ab:06:fb:2e:d7:
51:35:8c:72:61:16:1c:5b:f4:00:c5:33:02:51:ab:
40:6d:55:79:bf:22:9d:ac:5c:e8:92:16:13:63:5b:
83:e0:d7:ef:8d:12:36:71:30:42:67:17:4d:62:68:
f8:ed:2c:fd:69:ec:3c:82:0a:dc:2e:21:ac:b1:b7:
24:bf:ef:67:6d:84:51:d4:22:d3:47:dd:61:8e:8b:
5c:47:e6:09:dd:0e:f2:66:82:70:d0:d8:6b:76:2c:
26:04:fc:b7:40:9b:24:5d:e0:83:a5:2e:98:5e:2b:
21:36:df:76:66:db:f3:7d:1d:04:db:7c:26:4e:72:
fc:c1:9e:8f:f9:84:07:2e:70:b8:15:d5:af:bc:2f:
66:2d:2d:7a:26:fc:fc:e0:57:21:91:f4:88:7a:07:
4c:8a:01:98:dc:fb:60:d0:41:9e:43:8e:0e:7b:9b:
10:7e:f4:2f:2d:02:b0:aa:bf:09:8b:bd:15:f6:19:
e7:6e:a3:fe:3a:76:87:d2:82:ba:96:b7:b2:7d:f5:
66:bd:5d:1e:d1:f6:96:f8:19:96:ef:29:e2:76:b9:
0a:cd:91:f6:ab:ca:6e:73:df:3a:ed:fc:70:be:bf:
21:1b:b0:98:06:f1:24:b7:92:40:9f:ac:f5:83:08:
cc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:14:36:FA:64:13:27:41:9B:97:95:12:90:0D:FC:9D:FC:3E:FB:32
X509v3 Authority Key Identifier:
keyid:2D:6F:9B:DA:F6:9D:CA:1C:DB:9E:44:0C:97:C1:0A:09:2E:C1:B3:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LW-b2vadyhzbnkQMl8EKCS7Bs5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4464f2-6c1c-4096-960b-e39b3a302ced/1/1xQ2-mQTJ0Gbl5USkA38nfw--zI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4464f2-6c1c-4096-960b-e39b3a302ced/1/LW-b2vadyhzbnkQMl8EKCS7Bs5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.227.0/24
91.212.11.0/24
91.212.14.0/24
91.212.19.0/24
Signature Algorithm: sha256WithRSAEncryption
69:4e:e1:5f:cc:91:c4:52:7d:bb:3d:74:57:6b:2c:aa:86:c0:
ad:08:3f:80:18:12:4e:0c:10:a0:09:58:96:cc:2d:10:28:63:
01:e0:02:e9:ee:be:73:ec:ef:ae:51:d3:bb:f7:aa:5f:25:e6:
6e:bc:f6:71:cd:2c:cd:72:bc:a9:39:bf:24:64:11:c5:1b:86:
05:94:0f:3c:fa:ae:94:fd:f8:8c:a3:82:74:97:50:13:24:04:
1a:bb:b7:6c:7a:f9:39:04:95:3c:0d:1a:02:36:e8:d4:f0:64:
eb:c5:9e:43:70:c8:76:b0:15:6e:50:14:26:74:50:b0:2b:af:
c7:96:ef:ff:fd:1f:2a:4d:fb:96:ea:ab:eb:bd:06:e2:56:08:
6b:cf:1f:b3:03:11:cc:38:fe:7e:1a:21:25:7c:b6:ec:bc:e3:
ec:16:f8:04:dd:e6:98:77:9f:13:21:f6:0b:e0:8c:68:8d:0f:
7f:40:2c:ee:cb:47:58:f2:5b:74:78:dd:a5:2e:1e:b8:1d:59:
8b:9b:b2:70:10:6c:94:95:fe:11:d2:14:2e:66:7d:c2:61:dd:
a1:ba:ed:d5:47:97:f1:8a:65:9c:bd:d1:81:4a:e1:b5:a5:fa:
15:98:87:0c:43:36:64:86:f9:c4:96:2f:e1:46:c8:4a:28:dd:
4d:be:06:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:14:56 2025 by rpki-client