Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/2WvVwy-PRL5GLrJD80GhjHcE31U.roa
File: 2WvVwy-PRL5GLrJD80GhjHcE31U.roa (raw, json)
Hash identifier: V+gab5/KP1zLki+Ce4a8elUju3qZMThRlJep3bHdmjU=
Subject key identifier: D9:6B:D5:C3:2F:8F:44:BE:46:2E:B2:43:F3:41:A1:8C:77:04:DF:55
Certificate issuer: /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Certificate serial: 01942825D24A737148E9DA915E5C2C678A8C
Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/2WvVwy-PRL5GLrJD80GhjHcE31U.roa
Signing time: Thu 02 Jan 2025 17:52:34 +0000
ROA not before: Thu 02 Jan 2025 17:52:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200020
IP address blocks: 213.249.72.0/24 maxlen: 24
2a01:448:72::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:d2:4a:73:71:48:e9:da:91:5e:5c:2c:67:8a:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Validity
Not Before: Jan 2 17:52:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d96bd5c32f8f44be462eb243f341a18c7704df55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:19:0a:54:23:d2:98:a9:27:31:08:2c:03:a3:
dc:78:bf:bc:22:3c:91:58:c4:7f:7b:b8:7a:71:e3:
27:a4:f5:fc:e9:36:c5:1c:fb:79:fd:23:09:9b:bd:
c5:0d:ab:c5:24:7f:b9:21:8e:8f:e0:a0:0d:92:ce:
42:5c:fb:8f:fe:e7:6d:8f:39:72:5d:50:c7:e7:07:
34:7a:5f:43:a9:b6:2c:3b:6c:cb:bb:fa:dd:8a:d5:
40:11:c3:b2:e0:67:aa:b8:04:31:8a:52:e5:7c:82:
d4:5f:0f:64:02:ec:1d:13:23:5e:09:8f:c7:81:88:
ff:f3:bd:de:a7:39:75:55:e9:d7:4a:2f:be:28:35:
4d:1d:29:46:35:1e:de:a6:f7:e9:c6:f7:51:f6:f3:
27:54:71:d3:95:51:67:82:9e:48:c4:98:92:57:10:
63:29:3f:c2:20:83:c9:7c:f0:5a:83:00:9b:ae:bf:
d3:94:80:1b:a8:14:ce:dd:e5:3e:06:0e:d8:dd:71:
cb:51:4b:31:2b:46:57:a1:ed:d6:c7:35:2c:0c:c6:
d5:49:c2:24:89:a3:69:fb:ec:0e:a9:e7:9a:69:dd:
28:36:29:75:ee:20:3a:74:bd:ba:f0:0e:e2:54:4d:
b0:ef:b7:eb:1a:97:ec:6f:e9:99:45:33:88:c4:84:
6b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6B:D5:C3:2F:8F:44:BE:46:2E:B2:43:F3:41:A1:8C:77:04:DF:55
X509v3 Authority Key Identifier:
keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/2WvVwy-PRL5GLrJD80GhjHcE31U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.249.72.0/24
IPv6:
2a01:448:72::/48
Signature Algorithm: sha256WithRSAEncryption
3a:d3:21:d0:31:c5:3e:58:ca:d9:9f:14:ee:21:9e:7a:d2:15:
cc:f7:89:e6:2f:b9:87:81:89:c3:9f:f2:b7:83:8f:8a:17:45:
6f:78:b8:74:14:cb:48:59:9c:36:01:65:13:e5:59:f6:5b:8d:
a1:df:04:ea:c1:42:52:9a:15:9e:a7:e4:7c:d3:86:da:37:13:
35:ef:76:c1:dd:94:4c:26:e2:52:d0:70:cf:d1:38:b7:02:41:
ee:91:f3:45:7b:db:c2:d1:39:a2:eb:34:f3:f7:e7:f3:16:e3:
39:ff:0a:90:da:a4:a8:7b:d5:6b:7a:0e:13:bc:19:6a:d3:7b:
7f:55:f2:9b:33:4f:d0:25:a9:b3:eb:d8:8a:e1:80:dc:c2:5f:
b3:cf:c7:4f:70:50:cc:23:b8:6f:62:c6:d3:2a:66:ed:89:14:
60:6a:3c:17:4e:f0:d9:30:f9:0c:38:f7:b9:89:09:3a:1e:d0:
df:c3:e1:52:20:9c:e5:d3:5b:58:49:ed:88:12:2b:59:da:fd:
0b:69:a1:bb:3a:55:f4:fb:25:bf:c7:b0:c4:8f:ba:e4:7c:a8:
00:4c:78:aa:82:35:a0:9f:56:2d:8f:50:63:78:eb:3c:33:4f:
bc:33:c8:64:aa:d7:76:ab:a9:f1:58:8f:d7:b4:b5:f9:cc:63:
83:1f:a4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:22:09 2025 by rpki-client