Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/2-l-7yT7_u7_OYzRYJFyaa75TPk.roa
File: 2-l-7yT7_u7_OYzRYJFyaa75TPk.roa (raw, json)
Hash identifier: bYwJQxGV83lRBUqEUc8QOqElQ+XjkvUc1MyoxR+0EMk=
Subject key identifier: DB:E9:7E:EF:24:FB:FE:EE:FF:39:8C:D1:60:91:72:69:AE:F9:4C:F9
Certificate issuer: /CN=acecf09b85d91cd682b06743cb6c5930e1fc551c
Certificate serial: 01942C0602CCCB0CDFB3E1F6073557E42077
Authority key identifier: AC:EC:F0:9B:85:D9:1C:D6:82:B0:67:43:CB:6C:59:30:E1:FC:55:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/2-l-7yT7_u7_OYzRYJFyaa75TPk.roa
Signing time: Fri 03 Jan 2025 11:56:18 +0000
ROA not before: Fri 03 Jan 2025 11:56:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49556
IP address blocks: 91.216.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:2c:06:02:cc:cb:0c:df:b3:e1:f6:07:35:57:e4:20:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acecf09b85d91cd682b06743cb6c5930e1fc551c
Validity
Not Before: Jan 3 11:56:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dbe97eef24fbfeeeff398cd160917269aef94cf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a8:05:33:37:bf:df:e2:0a:4c:74:4f:75:2d:
0d:de:8c:db:92:6c:b6:95:bc:75:8e:dd:a3:8c:98:
b6:84:72:01:b2:89:fd:eb:8f:d4:0b:12:14:5a:0c:
f5:ba:e4:87:1a:e2:fd:87:38:c5:26:1d:6f:88:31:
8e:04:e5:07:f5:a0:6b:ac:10:a0:e4:04:b4:ba:f8:
d7:09:75:fc:54:04:44:31:7a:af:93:db:3d:fa:3c:
f9:ec:c4:69:7a:96:9b:e7:a6:17:1c:fd:b7:99:ca:
d1:22:44:cd:49:45:16:26:81:d5:42:6e:1c:7c:49:
47:aa:8c:fc:94:61:0a:8f:34:f8:af:21:b6:77:b2:
74:57:c4:99:a1:18:1a:fe:cd:68:c9:56:ad:0c:66:
80:b6:b7:47:bb:19:55:50:13:0b:ed:b8:ab:78:63:
18:55:f4:c1:65:cb:70:20:4f:82:0f:62:2c:cf:d8:
41:d2:f2:b0:10:de:ab:8c:3f:e3:ef:76:6e:f7:0e:
ae:34:a0:eb:25:53:28:32:9d:03:2d:0f:82:4b:57:
e1:26:d8:11:62:1a:1a:54:b8:f9:1a:7d:93:81:0b:
f2:b2:af:d4:22:93:42:52:f1:2e:ec:35:cd:8b:d3:
e2:db:47:76:1c:38:4c:04:e5:21:da:48:a1:6a:69:
b5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E9:7E:EF:24:FB:FE:EE:FF:39:8C:D1:60:91:72:69:AE:F9:4C:F9
X509v3 Authority Key Identifier:
keyid:AC:EC:F0:9B:85:D9:1C:D6:82:B0:67:43:CB:6C:59:30:E1:FC:55:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/2-l-7yT7_u7_OYzRYJFyaa75TPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.217.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:8d:24:6e:a2:9b:99:58:1a:c9:c7:88:d3:34:e0:a3:f3:e3:
1c:dc:59:ed:0d:b2:81:79:a9:77:07:a1:b3:53:46:c6:b0:0d:
77:4a:39:b9:ee:96:70:31:c9:4f:32:18:4d:73:93:be:32:b5:
2f:f8:12:da:de:78:c9:ec:b9:00:f7:df:62:9b:e7:4c:44:a0:
b3:6b:c0:17:12:0b:e6:3c:0c:5b:21:8c:e6:22:8a:b3:32:5e:
25:f5:65:ad:88:f7:42:fa:f2:fe:28:72:aa:6e:80:6b:72:b4:
4a:26:f4:b2:08:54:b6:55:60:2f:0d:fe:c7:62:fd:84:7e:44:
a6:f6:c4:0b:c7:80:a8:73:c8:c2:5a:27:59:3c:85:16:42:8d:
9a:84:0c:f9:e7:1a:e9:4c:62:dd:e5:f0:80:10:10:33:14:72:
ec:f6:44:30:79:7f:d0:c5:71:09:81:86:29:03:14:a1:97:5f:
cc:c0:0f:56:a4:cc:8b:1a:f9:4e:7b:6b:3a:37:7d:32:8b:92:
66:3f:84:e7:7f:39:98:ed:56:42:f7:1d:a0:96:b5:00:47:35:
f5:1f:4e:48:44:36:5c:e0:49:6b:71:c2:0d:cc:a0:72:62:2b:
a6:82:ad:b3:e9:d8:91:35:f1:09:73:76:26:be:1d:82:92:bf:
b1:89:1e:a4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQsBgLMywzfs+H2BzVX5CB3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZWNmMDliODVkOTFjZDY4MmIwNjc0M2NiNmM1OTMwZTFm
YzU1MWMwHhcNMjUwMTAzMTE1NjE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYmU5N2VlZjI0ZmJmZWVlZmYzOThjZDE2MDkxNzI2OWFlZjk0Y2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwagFMze/3+IKTHRPdS0N3ozbkmy2
lbx1jt2jjJi2hHIBson964/UCxIUWgz1uuSHGuL9hzjFJh1viDGOBOUH9aBrrBCg
5AS0uvjXCXX8VAREMXqvk9s9+jz57MRpepab56YXHP23mcrRIkTNSUUWJoHVQm4c
fElHqoz8lGEKjzT4ryG2d7J0V8SZoRga/s1oyVatDGaAtrdHuxlVUBML7bireGMY
VfTBZctwIE+CD2Isz9hB0vKwEN6rjD/j73Zu9w6uNKDrJVMoMp0DLQ+CS1fhJtgR
YhoaVLj5Gn2TgQvysq/UIpNCUvEu7DXNi9Pi20d2HDhMBOUh2kihamm1gQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNvpfu8k+/7u/zmM0WCRcmmu+Uz5MB8GA1UdIwQY
MBaAFKzs8JuF2RzWgrBnQ8tsWTDh/FUcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvck96d200WFpITmFDc0dkRHkyeFpNT0g4VlJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8yNWY0ZjQtYTU0Ny00MjM4LWExZGEt
ZjE4ZDc4MThmODRhLzEvMi1sLTd5VDdfdTdfT1l6UllKRnlhYTc1VFBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8yNWY0ZjQtYTU0Ny00MjM4LWExZGEtZjE4ZDc4MThmODRh
LzEvck96d200WFpITmFDc0dkRHkyeFpNT0g4VlJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9jZMA0G
CSqGSIb3DQEBCwUAA4IBAQCfjSRuopuZWBrJx4jTNOCj8+Mc3FntDbKBeal3B6Gz
U0bGsA13Sjm57pZwMclPMhhNc5O+MrUv+BLa3njJ7LkA999im+dMRKCza8AXEgvm
PAxbIYzmIoqzMl4l9WWtiPdC+vL+KHKqboBrcrRKJvSyCFS2VWAvDf7HYv2EfkSm
9sQLx4Coc8jCWidZPIUWQo2ahAz55xrpTGLd5fCAEBAzFHLs9kQweX/QxXEJgYYp
AxShl1/MwA9WpMyLGvlOe2s6N30yi5JmP4TnfzmY7VZC9x2glrUARzX1H05IRDZc
4ElrccINzKByYiumgq2z6diRNfEJc3Ymvh2Ckr+xiR6k
-----END CERTIFICATE-----
Generated at Sun Feb 2 09:53:46 2025 by rpki-client