Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/2hsuL1m1LeKiQyNCkWrEiMOsSQ4.roa
File: 2hsuL1m1LeKiQyNCkWrEiMOsSQ4.roa (raw, json)
Hash identifier: G6zKwZ9ARfBcNvqeMifheKtZPq8hpO3XrWu/vbDqSnc=
Subject key identifier: DA:1B:2E:2F:59:B5:2D:E2:A2:43:23:42:91:6A:C4:88:C3:AC:49:0E
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019427472FD0A27C5476E1DABBCC270704C3
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/2hsuL1m1LeKiQyNCkWrEiMOsSQ4.roa
Signing time: Thu 02 Jan 2025 13:49:24 +0000
ROA not before: Thu 02 Jan 2025 13:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209604
IP address blocks: 193.223.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:2f:d0:a2:7c:54:76:e1:da:bb:cc:27:07:04:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jan 2 13:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da1b2e2f59b52de2a2432342916ac488c3ac490e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f9:a8:8b:03:d1:8d:08:2c:03:63:80:11:e2:
28:23:45:c4:87:90:88:cc:d3:c4:06:f1:ce:bd:87:
61:bd:b5:44:0a:e1:20:da:f5:8d:fc:4a:83:a5:2d:
d0:2b:56:74:f3:5b:71:9b:c4:1e:c5:af:82:2a:65:
dd:e7:c8:c8:9e:ad:26:2a:09:8f:3b:a4:01:da:a3:
4a:d4:c2:74:7c:fe:c3:43:17:cc:6c:43:e2:80:53:
d1:b5:08:5a:13:be:8a:32:15:c2:94:b6:a4:c6:3f:
7c:6d:68:87:b0:55:5b:2d:0c:72:ec:2b:48:90:e6:
f4:fc:a1:ec:b6:d8:a9:cf:a4:05:6b:07:6a:02:b0:
1d:d2:77:ad:9f:df:ca:f8:c6:e8:b1:5e:c7:bf:0a:
cd:97:d3:c8:11:f9:1b:94:4c:ea:6c:54:d5:e4:91:
1d:b2:4e:ba:27:63:7c:87:e6:65:ef:8e:b1:9e:ea:
2e:b9:13:61:b0:46:29:87:3d:2b:a3:f1:e4:c9:12:
86:e8:d3:0f:f1:a8:1a:92:75:28:71:63:51:56:3d:
93:d2:92:c1:20:47:f6:72:3f:8a:18:a7:f7:c0:37:
86:61:21:88:4a:3b:11:a3:be:e3:12:62:96:ed:c2:
9c:7c:47:3d:1c:cc:33:0c:2d:38:01:09:9d:6f:7f:
9b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:1B:2E:2F:59:B5:2D:E2:A2:43:23:42:91:6A:C4:88:C3:AC:49:0E
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/2hsuL1m1LeKiQyNCkWrEiMOsSQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.223.107.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:c8:c9:cc:2a:61:de:f7:d5:6e:a7:97:26:ca:46:54:ff:17:
56:39:d8:66:98:43:55:2a:9e:c7:9b:f8:97:bb:b7:a1:73:c9:
e3:54:24:62:c6:cf:68:aa:7a:2a:ba:03:88:8a:0f:b9:8c:0a:
aa:d1:67:ce:3d:d3:8f:18:3d:69:c9:2d:8b:74:8b:f3:35:76:
7e:2f:d8:aa:82:9e:c8:f7:90:c0:31:e5:87:d0:43:a1:9d:b7:
60:87:aa:4b:de:64:d8:56:1e:67:14:77:d7:3f:95:f3:dc:48:
f5:30:12:86:8b:28:a0:99:6e:c1:21:93:00:0a:f6:06:ec:ac:
75:45:6e:fb:43:3e:08:e3:0e:ba:69:cf:c9:e0:5f:74:ee:ce:
ce:b8:45:4f:1a:15:2e:f7:67:86:d8:8e:ed:f9:8f:24:bc:81:
67:cc:66:e1:9c:3d:d8:1e:e7:b6:83:03:6e:c4:72:72:2b:b4:
7a:87:b9:97:24:21:e7:8c:75:51:a3:fe:2e:3a:0d:a0:96:74:
b8:5a:82:3b:80:20:27:06:f1:f1:6b:75:a0:85:0e:2d:bb:b4:
94:b4:21:f3:a1:a2:78:55:33:62:85:f5:7e:32:b7:57:67:51:
05:59:99:99:7f:3d:d1:5c:3a:51:9c:09:a3:f5:13:c5:f6:73:
26:e3:d8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:39:43 2025 by rpki-client