Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/2GvGxW56EwiXdY8WsCKuvBnzEmE.roa
File: 2GvGxW56EwiXdY8WsCKuvBnzEmE.roa (raw, json)
Hash identifier: W3DnYzHP+CF6agGgHp9PqPmuvt/s/L6YaUF7RJiXgPQ=
Subject key identifier: D8:6B:C6:C5:6E:7A:13:08:97:75:8F:16:B0:22:AE:BC:19:F3:12:61
Certificate issuer: /CN=f7c722dae270868a19838a7cd499d59c2679d891
Certificate serial: 019423D73E92003D8BA1EBF7C518C81AAD47
Authority key identifier: F7:C7:22:DA:E2:70:86:8A:19:83:8A:7C:D4:99:D5:9C:26:79:D8:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/2GvGxW56EwiXdY8WsCKuvBnzEmE.roa
Signing time: Wed 01 Jan 2025 21:48:16 +0000
ROA not before: Wed 01 Jan 2025 21:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200406
IP address blocks: 194.5.176.0/24 maxlen: 24
194.5.177.0/24 maxlen: 24
194.5.178.0/24 maxlen: 24
194.5.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:3e:92:00:3d:8b:a1:eb:f7:c5:18:c8:1a:ad:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7c722dae270868a19838a7cd499d59c2679d891
Validity
Not Before: Jan 1 21:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d86bc6c56e7a130897758f16b022aebc19f31261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f0:58:b4:9a:9a:03:7e:a9:0c:b3:1c:62:72:
64:14:08:76:4c:65:c8:75:ec:f2:b6:8c:42:0d:9e:
b5:9f:ed:c9:21:43:b2:52:f2:a8:8d:0f:33:2f:82:
41:05:26:ad:4a:9a:d5:ad:33:37:cb:bf:68:a8:31:
d3:23:90:df:7b:04:41:c3:96:d9:12:04:87:06:d0:
86:6a:f3:59:77:eb:15:5b:b7:29:3f:76:87:1f:1c:
89:b3:71:e8:6c:74:2e:f4:fa:df:5a:78:40:82:c0:
46:58:f5:6b:b8:fa:42:92:2b:e2:c7:a0:35:da:91:
fd:2a:ca:88:5c:8a:93:0c:42:5c:e2:fa:a9:9f:46:
f7:7c:97:dc:2f:ba:1f:ce:df:da:dc:98:a7:20:54:
19:95:ca:61:78:ad:20:e7:13:d0:07:33:b2:05:7e:
70:35:98:32:50:ae:64:3e:87:35:da:ab:76:b2:a5:
58:65:4a:a2:0f:0e:12:23:d5:12:24:15:0f:08:87:
8c:a8:ad:98:b0:0d:03:e0:76:ea:68:6e:13:b6:54:
fc:97:8a:cb:02:3a:b8:8d:6a:e6:4f:98:b2:b8:12:
f7:7c:20:fe:c8:bd:49:78:7a:9f:94:b7:7f:81:81:
1c:1e:2a:92:6c:7c:c7:e6:1c:63:56:ed:7f:e6:04:
9c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:6B:C6:C5:6E:7A:13:08:97:75:8F:16:B0:22:AE:BC:19:F3:12:61
X509v3 Authority Key Identifier:
keyid:F7:C7:22:DA:E2:70:86:8A:19:83:8A:7C:D4:99:D5:9C:26:79:D8:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/2GvGxW56EwiXdY8WsCKuvBnzEmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.176.0/22
Signature Algorithm: sha256WithRSAEncryption
55:2a:4d:a2:41:43:49:a0:a9:55:51:23:91:2f:c2:9c:40:9f:
95:83:ca:85:2b:c3:c5:ae:d9:e7:f7:ac:08:10:b1:36:36:ed:
04:27:2f:93:db:06:97:6c:61:9c:6c:1b:9b:88:af:e3:9f:5e:
c9:3c:18:9b:a5:e9:21:d6:00:3e:02:90:fe:16:22:3b:2a:7a:
bd:e8:94:56:36:ef:e9:bf:11:2d:ae:ac:1f:f8:c5:fa:c3:da:
75:a4:e6:9a:58:f6:c0:76:81:14:b5:f1:1d:9e:cd:e6:ba:9a:
64:c7:e1:16:d3:31:d1:66:45:44:9c:a0:d0:9f:bc:b4:bb:20:
84:a0:75:20:b6:48:42:aa:5e:26:18:50:85:15:5d:5c:c7:ec:
cf:14:19:be:be:93:46:0d:90:b5:94:a0:d2:3d:38:4b:91:33:
41:5c:9d:63:9b:21:a1:72:bc:ba:c0:1d:6e:de:b9:db:a5:1d:
dc:0f:72:4e:8d:75:27:bc:21:d4:ea:fd:01:34:be:e3:ae:0c:
4e:c9:f7:2d:74:e9:8c:ad:2b:10:29:3f:30:cc:37:6a:f0:fc:
81:a4:b2:bd:29:3b:71:96:bc:4a:a0:21:1d:69:4a:85:5e:8b:
d6:da:88:3e:66:2c:60:77:00:21:c4:3c:c0:60:a9:30:48:43:
9b:58:e7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:12:37 2025 by rpki-client