Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/B2zXHYwEq1mSDhRzWM21ZLKQRZ0.roa
File: B2zXHYwEq1mSDhRzWM21ZLKQRZ0.roa (raw, json)
Hash identifier: P+0tfOZ2RaLt/nUPuFjZ/CAtJcAtybwXEXHcIsSIUm4=
Subject key identifier: 07:6C:D7:1D:8C:04:AB:59:92:0E:14:73:58:CD:B5:64:B2:90:45:9D
Certificate issuer: /CN=430e0949df5930f6b79efcbd9cba174ca213f569
Certificate serial: 019426D950837F8AC3A5D6A21051BA766937
Authority key identifier: 43:0E:09:49:DF:59:30:F6:B7:9E:FC:BD:9C:BA:17:4C:A2:13:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/B2zXHYwEq1mSDhRzWM21ZLKQRZ0.roa
Signing time: Thu 02 Jan 2025 11:49:23 +0000
ROA not before: Thu 02 Jan 2025 11:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49957
IP address blocks: 91.206.184.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:50:83:7f:8a:c3:a5:d6:a2:10:51:ba:76:69:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=430e0949df5930f6b79efcbd9cba174ca213f569
Validity
Not Before: Jan 2 11:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=076cd71d8c04ab59920e147358cdb564b290459d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ba:7e:f2:47:7a:41:e6:15:ab:13:a4:0d:7b:
48:0c:29:25:94:fc:c9:7a:38:1f:e0:1e:48:91:9c:
45:f5:48:43:d3:69:8b:14:c9:ca:0a:18:00:d1:b6:
9e:84:17:f3:0e:b2:2a:92:c5:dc:9b:c6:88:a9:92:
06:81:20:1c:87:04:94:4f:19:70:6a:6a:e7:ac:fd:
3c:98:3b:bc:31:0a:88:fc:ce:7a:6d:ae:26:e0:c8:
88:0a:9a:49:c2:38:f4:28:f6:dd:60:95:1f:5a:97:
a8:91:09:5a:80:3d:ca:02:b3:36:13:6c:d4:45:46:
26:87:4a:96:e5:fd:d9:78:a0:78:35:f2:21:ff:e0:
c6:b4:90:2b:e3:ec:7b:ce:e2:ab:4a:86:36:71:61:
df:22:5e:04:5c:c9:10:a3:2d:95:1c:4d:2a:46:a4:
f4:c5:19:0c:5e:fc:c9:78:71:a9:7d:3b:d9:85:da:
15:8c:13:5c:b9:79:6c:09:25:5b:31:5a:ca:20:db:
a6:1a:57:e0:9d:e3:00:40:69:a4:b5:12:34:c0:01:
0c:17:03:59:91:fd:1b:dc:22:6f:c6:ad:5f:3e:1b:
ae:43:68:f5:0d:b9:4a:95:94:19:4f:0d:a6:e1:41:
4f:9e:67:11:4a:ae:7d:e0:71:fd:55:07:f5:d4:fa:
3a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:6C:D7:1D:8C:04:AB:59:92:0E:14:73:58:CD:B5:64:B2:90:45:9D
X509v3 Authority Key Identifier:
keyid:43:0E:09:49:DF:59:30:F6:B7:9E:FC:BD:9C:BA:17:4C:A2:13:F5:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/B2zXHYwEq1mSDhRzWM21ZLKQRZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.184.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:7c:38:92:77:bf:f9:ff:ef:4b:89:09:cc:b6:df:82:02:11:
14:c0:f3:fc:37:cb:94:63:06:46:df:35:8a:54:c2:ad:2e:4a:
6f:4a:71:71:4d:93:3e:99:e3:10:a3:66:19:55:c1:fe:1b:1f:
e3:00:62:23:52:01:17:c2:df:ab:c8:57:89:82:da:18:ee:bd:
f3:5b:3c:b8:a5:4e:2c:20:c0:26:47:20:a6:a3:3a:d4:e1:02:
12:4b:57:9c:a6:1d:19:73:f0:e4:3f:e0:40:3f:fe:bc:df:15:
68:66:10:6a:72:54:46:14:83:28:e8:03:be:57:e9:df:92:f4:
dd:38:20:23:0f:db:c4:f1:23:4d:76:35:e5:9a:92:9f:0a:64:
c4:cf:52:a0:30:f6:69:42:78:ab:8f:74:a8:0f:53:90:1c:2a:
aa:09:5d:cc:6d:17:04:19:7c:67:be:b3:e6:9d:0d:12:53:a4:
41:de:7a:c7:2f:6e:a5:91:4f:4b:cb:70:eb:2c:e8:85:19:c0:
4d:a9:c3:40:eb:18:ca:ff:e0:93:b5:a6:4f:e0:ae:09:75:91:
1d:23:c1:30:61:a2:f8:f1:8f:5b:46:35:ce:f9:c5:9b:2c:73:
49:01:07:e3:46:a3:b1:16:7c:ca:4f:ea:66:64:49:b6:75:18:
6b:24:8e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:44:02 2025 by rpki-client