Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/2eWTXc6MdHH3SvAeJM9n6ydZI5Y.roa
File: 2eWTXc6MdHH3SvAeJM9n6ydZI5Y.roa (raw, json)
Hash identifier: XnJT5JSjqE4Adj+ylm025sl/JK+1c1iwTV7Ra2tEO8w=
Subject key identifier: D9:E5:93:5D:CE:8C:74:71:F7:4A:F0:1E:24:CF:67:EB:27:59:23:96
Certificate issuer: /CN=60dc5a00368d8ae1fba995431f03a4131add8a9a
Certificate serial: 019423D779307817488513BC09B11C7BFF76
Authority key identifier: 60:DC:5A:00:36:8D:8A:E1:FB:A9:95:43:1F:03:A4:13:1A:DD:8A:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNxaADaNiuH7qZVDHwOkExrdipo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/2eWTXc6MdHH3SvAeJM9n6ydZI5Y.roa
Signing time: Wed 01 Jan 2025 21:48:31 +0000
ROA not before: Wed 01 Jan 2025 21:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41085
IP address blocks: 195.189.100.0/22 maxlen: 22
195.189.100.0/23 maxlen: 23
195.189.102.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YNxaADaNiuH7qZVDHwOkExrdipo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 15:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:79:30:78:17:48:85:13:bc:09:b1:1c:7b:ff:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60dc5a00368d8ae1fba995431f03a4131add8a9a
Validity
Not Before: Jan 1 21:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9e5935dce8c7471f74af01e24cf67eb27592396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6b:e4:4f:d0:59:04:af:de:d7:bc:ed:be:70:
44:1a:43:10:38:6a:ee:2f:ca:3e:97:2c:e5:51:ee:
1b:49:84:b0:95:1e:71:64:ff:b1:0e:88:66:82:93:
ae:b2:be:ee:70:ae:9b:83:f3:5d:e9:86:ee:6e:f3:
35:e3:53:80:f7:ae:77:df:28:95:fe:a8:b8:30:80:
81:97:52:df:44:8e:b5:ee:bd:3a:cd:ed:fc:47:b7:
fa:0d:64:8d:f4:34:0f:df:b7:4a:6f:ab:47:aa:e5:
84:19:a3:79:d7:be:af:e0:95:34:32:03:60:ec:58:
95:9f:1d:46:74:53:62:08:50:98:30:ee:0b:f0:0e:
d8:0f:34:76:16:2b:e6:08:3f:3a:31:09:8b:2e:cf:
67:07:0d:dd:7c:55:1a:b6:65:bf:46:60:dd:3d:12:
81:fc:68:b7:34:93:54:d8:1c:7e:e3:6e:7c:bd:93:
ef:35:29:aa:6f:01:cd:9b:8d:39:87:53:88:5c:d7:
1a:f5:34:10:c2:8b:dc:e4:3f:62:b1:d3:4d:1f:f3:
b3:10:8d:bb:3c:d2:16:5f:87:85:6d:f0:82:f1:e8:
b9:75:04:1c:b6:be:e7:a3:af:d2:cd:d9:a8:98:b0:
2d:04:f4:2d:b2:b9:0e:e9:51:45:e7:7e:df:fd:07:
5a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E5:93:5D:CE:8C:74:71:F7:4A:F0:1E:24:CF:67:EB:27:59:23:96
X509v3 Authority Key Identifier:
keyid:60:DC:5A:00:36:8D:8A:E1:FB:A9:95:43:1F:03:A4:13:1A:DD:8A:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNxaADaNiuH7qZVDHwOkExrdipo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/2eWTXc6MdHH3SvAeJM9n6ydZI5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.189.100.0/22
Signature Algorithm: sha256WithRSAEncryption
72:36:dd:f5:3b:eb:b5:ab:2d:8f:7a:dc:8d:63:ab:8b:22:11:
03:21:3e:10:bd:d0:47:33:d6:62:e2:2c:dd:73:a0:f7:17:27:
7d:f5:17:de:89:0a:65:81:1b:33:ff:63:b7:50:71:5f:ec:6a:
6c:06:55:36:62:57:b7:99:28:a7:f3:8d:90:88:90:0e:2e:b2:
3e:7b:f3:ac:79:f7:6b:a1:3e:ca:15:ff:a4:f8:67:62:ea:6a:
0f:48:11:f7:2a:d2:67:0d:ba:77:b2:73:83:5d:38:fd:9b:82:
4d:39:f4:79:c9:83:62:d7:0f:86:8d:b4:56:63:62:ff:ec:8b:
f0:22:c9:2b:90:68:60:91:c8:30:0e:08:76:1c:5d:5d:ff:78:
bd:f9:c2:25:29:fe:21:2e:90:0f:e5:f3:a2:1c:cf:48:ed:50:
46:63:67:05:af:48:c1:0b:2c:86:dd:63:48:be:d6:fc:4c:b9:
ac:db:5b:f9:1e:46:e9:a0:a8:c9:f8:ae:b9:0e:00:2a:44:10:
ea:94:31:27:4c:4b:65:ac:01:cd:15:35:ad:4f:7d:9b:0b:d8:
da:57:0a:82:7b:88:c1:59:45:27:c7:f4:81:2b:84:f2:d3:20:
95:4c:db:e7:8b:e3:f5:da:a6:be:c2:97:92:90:e4:18:00:35:
42:c5:2c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 19:04:13 2025 by rpki-client