Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/2wo-SXROS8nrrkPa8d3Bcj_YHYs.roa
File: 2wo-SXROS8nrrkPa8d3Bcj_YHYs.roa (raw, json)
Hash identifier: uSeoZ5I4Kslkk3eymCuW0G5q7nKjurkYb5b1UyS2rHQ=
Subject key identifier: DB:0A:3E:49:74:4E:4B:C9:EB:AE:43:DA:F1:DD:C1:72:3F:D8:1D:8B
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01954BAACE303A5955670F005CA3E8524009
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/2wo-SXROS8nrrkPa8d3Bcj_YHYs.roa
Signing time: Fri 28 Feb 2025 08:27:19 +0000
ROA not before: Fri 28 Feb 2025 08:27:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30738
IP address blocks: 188.130.182.0/24 maxlen: 24
195.211.52.0/22 maxlen: 24
2001:1468::/32 maxlen: 33
2001:1468:8000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 03:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4b:aa:ce:30:3a:59:55:67:0f:00:5c:a3:e8:52:40:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Feb 28 08:27:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db0a3e49744e4bc9ebae43daf1ddc1723fd81d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:dc:6d:71:06:55:38:b8:79:1d:45:6e:8f:15:
84:e3:bf:1f:5f:3d:c7:17:cc:9d:7d:67:3b:3e:2e:
51:77:78:9d:dc:4f:84:09:1f:8f:8e:c7:1f:9c:aa:
94:97:18:49:77:c9:46:a4:e6:a0:28:02:11:bc:a6:
fa:48:20:b1:50:c9:15:ac:69:fc:e9:00:0c:6d:da:
81:e8:af:c4:6a:f6:2e:a0:c5:4a:4d:57:7f:ef:ac:
11:43:03:70:a5:a9:12:26:12:e3:32:e4:f7:00:3a:
89:c2:87:b1:25:91:df:58:11:fe:e4:f4:82:89:ce:
72:5d:b7:7b:4e:27:d7:e4:69:a5:b2:3b:61:d7:85:
e5:cc:0a:d3:be:7c:ab:3e:cc:24:66:2a:73:24:3f:
65:58:8a:c4:76:d5:18:5d:b2:97:65:4d:85:e1:d8:
fe:98:73:8c:24:16:c2:cb:76:ea:6c:0b:aa:3d:19:
96:c1:22:c9:89:30:f7:e8:bc:57:1c:37:aa:13:0e:
27:39:10:b8:6b:44:8a:82:2c:63:b2:5f:32:1f:e8:
82:a5:56:2b:11:20:30:d4:b8:d6:8f:09:eb:54:51:
b2:11:b6:fb:8b:3f:46:1b:eb:c4:77:2a:b2:6f:b9:
95:cd:07:54:6b:e7:52:50:75:11:81:ef:ad:de:99:
61:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:0A:3E:49:74:4E:4B:C9:EB:AE:43:DA:F1:DD:C1:72:3F:D8:1D:8B
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/2wo-SXROS8nrrkPa8d3Bcj_YHYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.130.182.0/24
195.211.52.0/22
IPv6:
2001:1468::/32
Signature Algorithm: sha256WithRSAEncryption
09:f6:8f:d5:72:98:85:33:77:d5:c4:bc:8b:6b:55:ba:08:25:
99:6d:43:9f:4a:49:64:2d:ac:c4:49:a1:ae:c3:fa:d0:bb:8b:
08:19:b8:72:c1:8f:b5:6e:22:11:c4:8f:85:19:63:1b:46:1f:
8e:cb:ac:8e:b5:7e:99:32:f8:54:34:e8:ed:fa:bd:99:ec:20:
79:46:e0:45:82:9b:f7:3e:31:cd:3e:ee:e1:25:b2:b3:55:54:
36:ae:f6:a5:da:2e:d2:2b:33:a3:b7:d4:c2:46:3b:51:49:b1:
f2:be:80:8f:66:20:cc:a0:9b:db:85:2f:a1:51:fe:1c:a5:e3:
d3:94:7a:29:cd:6f:b8:48:3e:5f:35:2a:fc:4a:65:a6:79:1d:
64:b9:45:cc:34:64:02:1c:6c:27:76:b9:8f:ca:bc:30:25:88:
d5:89:b2:8c:85:1e:92:56:e2:14:30:59:54:0b:1e:5b:ac:99:
11:09:3e:42:0a:83:34:74:13:d6:b9:e3:ad:94:f5:b2:c8:7b:
16:01:7d:a5:f7:fd:43:ae:d2:ba:92:d0:1a:3f:8a:9f:25:32:
38:d6:54:6e:07:a7:2f:83:98:3f:f2:67:e6:6f:d9:ad:a4:73:
6b:b2:d4:c8:c5:a9:d2:02:ea:65:95:cf:0b:6e:0d:56:c1:89:
f4:1c:d8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:18:49 2025 by rpki-client