Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/2t0GWwoe7mmFS83bQQPX5JNcD34.roa
File: 2t0GWwoe7mmFS83bQQPX5JNcD34.roa (raw, json)
Hash identifier: hxRzouLeq4ys7uUoj+7mRAVC8MeKAFWBUYqAcz4n5d0=
Subject key identifier: DA:DD:06:5B:0A:1E:EE:69:85:4B:CD:DB:41:03:D7:E4:93:5C:0F:7E
Certificate issuer: /CN=c74da21da8038a820542b3afafbeaaaa666b7b27
Certificate serial: 0194228D31CF8F2B284FC8B8C9CB40E2687E
Authority key identifier: C7:4D:A2:1D:A8:03:8A:82:05:42:B3:AF:AF:BE:AA:AA:66:6B:7B:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x02iHagDioIFQrOvr76qqmZreyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/2t0GWwoe7mmFS83bQQPX5JNcD34.roa
Signing time: Wed 01 Jan 2025 15:47:46 +0000
ROA not before: Wed 01 Jan 2025 15:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6799
IP address blocks: 195.43.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/x02iHagDioIFQrOvr76qqmZreyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:31:cf:8f:2b:28:4f:c8:b8:c9:cb:40:e2:68:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74da21da8038a820542b3afafbeaaaa666b7b27
Validity
Not Before: Jan 1 15:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dadd065b0a1eee69854bcddb4103d7e4935c0f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:a6:cf:65:68:27:58:ac:27:6d:d6:82:08:af:
81:41:01:1c:2e:bb:cd:9e:4d:08:9c:af:62:b7:f2:
18:79:c7:d9:7d:56:6f:2e:53:80:d5:70:fe:2d:13:
27:c8:f5:91:f3:54:ac:18:2f:1e:c7:00:d6:ba:ca:
de:a9:e8:72:95:53:ab:92:ca:ab:78:6b:7b:30:0c:
f0:44:71:5f:b7:72:05:ca:e8:6d:4a:94:21:6b:13:
45:b5:6c:9e:63:e9:b6:95:35:46:c4:c1:8c:2e:83:
bb:e5:66:58:21:83:98:4c:91:00:8d:36:94:0b:d6:
a0:83:a4:be:b4:bf:b3:c3:31:c1:db:eb:ad:b3:1a:
3c:41:35:8b:c0:2e:7f:49:f1:ef:37:3c:64:8f:02:
42:31:85:fb:7e:3e:e7:5f:82:24:96:a6:5c:b8:52:
b8:23:64:49:65:92:ca:b3:33:75:19:a2:1f:58:81:
05:fa:55:05:6d:4b:22:af:ec:1d:90:23:41:ba:60:
be:3b:2e:d2:65:aa:be:84:dc:10:b7:22:48:77:2c:
44:4b:86:23:77:69:bd:9e:37:f4:e1:c5:42:6b:4e:
b5:01:c2:ee:44:e7:4e:a9:4e:5d:b7:4b:90:6f:32:
17:37:ce:39:72:9f:6c:71:0a:f5:2a:68:e7:8e:d9:
d7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:DD:06:5B:0A:1E:EE:69:85:4B:CD:DB:41:03:D7:E4:93:5C:0F:7E
X509v3 Authority Key Identifier:
keyid:C7:4D:A2:1D:A8:03:8A:82:05:42:B3:AF:AF:BE:AA:AA:66:6B:7B:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x02iHagDioIFQrOvr76qqmZreyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/2t0GWwoe7mmFS83bQQPX5JNcD34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.43.132.0/24
Signature Algorithm: sha256WithRSAEncryption
05:5d:33:62:90:73:37:9b:53:4c:4b:80:d6:5b:5d:6a:58:70:
4a:2e:97:9b:bb:89:59:ca:78:a4:80:30:39:da:23:81:35:73:
b8:d9:58:c8:80:2b:bc:3b:88:98:ba:e9:f9:40:a5:4a:7d:28:
4b:88:18:e0:b6:94:7f:85:f3:ba:e3:4f:7a:3e:6f:4b:f2:80:
fa:a3:27:6d:bf:f5:b7:74:23:ef:b9:d2:e4:ce:9a:0a:c9:ab:
15:c9:cc:8a:54:54:4f:78:a8:03:5e:87:2b:b1:da:26:90:6f:
bf:50:32:c7:c2:d0:78:2e:35:d1:3b:83:67:db:ba:73:34:2b:
40:4c:ea:5a:42:07:aa:78:05:06:10:4e:59:ef:14:57:a9:6a:
8b:67:00:bd:af:7c:59:54:e4:ba:45:ce:ef:50:00:2f:73:10:
23:fa:5d:0f:e0:87:ac:f9:9a:d4:03:75:c4:37:b8:82:31:2b:
2c:d6:19:c3:37:ae:65:90:d0:80:83:a3:d2:92:e4:c5:5f:19:
3c:1e:31:b4:02:ce:65:ab:91:f6:a6:de:d6:c6:7d:89:90:fa:
3e:cc:2a:9e:7b:a9:fc:59:b2:c6:99:da:05:35:9d:1b:5f:97:
f2:9c:d2:da:1f:34:9e:f2:47:1c:b7:2f:a9:8f:bd:46:53:70:
c8:77:b5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:53:12 2025 by rpki-client