Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/R2STkoEoxxJBHqcMq2a4adbJ3hk.roa
File: R2STkoEoxxJBHqcMq2a4adbJ3hk.roa (raw, json)
Hash identifier: 7O68XlpAMzLtJBwZujyonSguWc+eKFhFSWGapVG8ziQ=
Subject key identifier: 47:64:93:92:81:28:C7:12:41:1E:A7:0C:AB:66:B8:69:D6:C9:DE:19
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FB655214DB889E97A0539C3A0AA1F
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/R2STkoEoxxJBHqcMq2a4adbJ3hk.roa
Signing time: Thu 02 Jan 2025 05:49:22 +0000
ROA not before: Thu 02 Jan 2025 05:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50182
IP address blocks: 93.170.246.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:b6:55:21:4d:b8:89:e9:7a:05:39:c3:a0:aa:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=476493928128c712411ea70cab66b869d6c9de19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:50:a1:be:c0:a2:53:18:12:99:f2:0e:cd:f0:
bf:ef:0b:95:15:33:5f:2c:c2:89:f7:8b:51:73:76:
d8:b1:df:64:c4:eb:74:36:09:63:7c:29:ce:c0:33:
8c:11:ca:45:d2:89:53:5d:19:ac:96:ec:c7:33:5f:
7e:e4:29:55:5d:3f:5c:3f:26:3f:6e:46:b9:56:70:
26:6f:cd:07:34:0e:63:08:04:fc:33:3e:f7:1c:cf:
f4:d0:20:56:ea:5f:d3:6b:f2:80:04:c9:3c:5e:00:
37:94:01:e4:11:96:fe:27:a5:66:85:7e:f0:b0:4f:
19:9b:ef:c4:a0:41:fa:85:59:dc:0d:2d:a4:dd:d0:
19:9a:a9:e5:b7:f9:52:70:a7:e8:79:cb:4e:e2:da:
d9:29:9e:35:90:6e:21:a3:e6:a4:53:e3:0e:e5:aa:
0a:47:6f:84:e4:e9:45:c3:a9:ec:a6:11:2e:b9:23:
c3:8b:a1:70:90:bf:e5:a4:98:93:a0:a2:da:e9:a8:
36:db:3d:bc:b6:69:45:59:db:45:99:22:ba:4b:c7:
10:0f:91:8e:79:61:97:97:c8:43:4c:14:17:78:b3:
ee:1c:52:20:df:c1:ec:fe:aa:6b:6c:1a:ca:2f:d6:
2d:e9:8c:49:71:c1:8c:90:2c:b6:84:24:8e:e8:1c:
9c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:64:93:92:81:28:C7:12:41:1E:A7:0C:AB:66:B8:69:D6:C9:DE:19
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/R2STkoEoxxJBHqcMq2a4adbJ3hk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.246.0/23
Signature Algorithm: sha256WithRSAEncryption
07:79:c8:41:d1:5b:03:3d:2f:5c:3a:27:83:0d:90:6b:bb:e9:
75:7a:5b:70:c2:9c:be:09:d6:ef:ff:26:02:5a:e5:88:8e:de:
e6:7e:59:29:4d:d4:1e:13:33:63:10:89:89:c1:00:27:47:ce:
c5:78:21:48:0e:d4:e3:5e:5f:0f:5b:e0:d6:48:7f:d8:4e:2d:
4e:bc:dd:0a:a6:b1:5b:8d:bb:43:33:aa:ab:5b:0e:93:de:2e:
bb:31:df:c8:ab:20:99:a5:73:4a:7e:7f:9b:ae:8b:95:16:36:
59:5f:47:6c:3f:ae:7d:25:14:da:81:b4:33:4f:d8:54:58:05:
53:7a:67:b6:8d:91:14:61:3a:40:e7:04:19:8a:be:46:22:55:
0e:4d:54:95:1f:0e:3e:a5:8d:63:36:b2:fd:dc:44:81:f4:76:
cb:96:52:54:25:cd:05:66:8d:c2:6d:d0:5f:0f:c9:2a:49:50:
93:ad:78:4a:3b:6b:cc:68:56:f4:fa:4b:06:d4:41:1e:36:5a:
07:bc:fd:98:c6:67:c0:05:40:59:31:52:34:95:3a:7b:f1:21:
f1:37:ee:92:d9:12:d5:ae:df:4a:79:af:4b:94:df:61:19:c7:
ab:03:88:ad:2b:56:4a:4e:6f:25:7b:cf:d1:ad:c0:cd:69:76:
9d:da:a2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 14:56:17 2025 by rpki-client