Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/dlGy94OdP9CxuWl64-ZF98qSRvQ.roa
File: dlGy94OdP9CxuWl64-ZF98qSRvQ.roa (raw, json)
Hash identifier: 2w0HFoh9L9yMqJIGL3SRLvEXuzUEWFfnBxb+BUXGxJs=
Subject key identifier: 76:51:B2:F7:83:9D:3F:D0:B1:B9:69:7A:E3:E6:45:F7:CA:92:46:F4
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 019427B67847F108C02B4F64E78A2DC55402
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/dlGy94OdP9CxuWl64-ZF98qSRvQ.roa
Signing time: Thu 02 Jan 2025 15:50:57 +0000
ROA not before: Thu 02 Jan 2025 15:50:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8966
IP address blocks: 2.16.44.0/24 maxlen: 24
2.20.249.0/24 maxlen: 24
2.21.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:78:47:f1:08:c0:2b:4f:64:e7:8a:2d:c5:54:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Jan 2 15:50:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7651b2f7839d3fd0b1b9697ae3e645f7ca9246f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:61:73:7d:93:2c:14:bf:6c:95:44:d1:7c:b1:
49:c1:40:ec:0c:c3:76:07:23:d7:5b:50:b5:e4:50:
ed:b1:f8:29:77:91:c4:ae:c3:f6:61:17:28:a9:f4:
14:02:52:a2:e6:18:2e:b5:95:5c:9d:30:e3:7e:6b:
3c:19:9e:7a:cc:c5:76:61:f2:25:04:4b:03:8c:6f:
6d:f0:88:96:19:da:27:22:7c:21:66:78:a0:3d:cf:
6c:f6:d9:13:b4:d8:51:9c:00:89:5e:93:1a:1b:70:
c9:04:9b:9c:73:9b:03:2e:97:d5:93:4c:b1:56:fd:
79:68:ca:e1:32:60:88:30:d0:97:5e:d1:1f:10:fd:
ec:82:7a:9a:23:15:11:78:57:83:62:e3:5e:ae:45:
77:31:26:27:61:f4:13:1c:5d:07:5c:83:fb:4b:fb:
50:0c:91:b3:aa:97:4e:03:a2:f6:3a:e9:af:55:2b:
ce:a6:64:54:f6:4f:ab:d0:78:11:62:73:f0:01:b8:
f7:66:3a:32:76:6f:2f:12:f1:29:8c:3b:39:80:10:
47:7a:98:f7:b4:4b:e8:5e:9a:8f:2d:91:45:8a:fe:
91:df:3d:0c:67:ac:a1:32:11:13:a1:f1:bb:22:d9:
06:43:4e:b7:fd:98:4c:2b:0f:ae:56:0e:20:3d:3e:
1f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:51:B2:F7:83:9D:3F:D0:B1:B9:69:7A:E3:E6:45:F7:CA:92:46:F4
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/dlGy94OdP9CxuWl64-ZF98qSRvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.16.44.0/24
2.20.249.0/24
2.21.231.0/24
Signature Algorithm: sha256WithRSAEncryption
95:aa:24:b7:39:6e:b3:fe:a8:8e:b0:f5:fc:3a:f9:2e:7b:bd:
e5:35:32:d5:ad:c8:4c:7f:91:0a:e3:c4:51:1a:d5:19:48:1c:
81:52:5f:13:5f:3b:ef:63:75:ec:69:b9:f0:d5:18:d1:f0:bf:
09:d2:3a:bc:be:68:63:18:ee:83:bd:a7:70:a5:4d:cc:e3:86:
1d:e2:f1:4b:39:92:1e:fb:f5:3f:78:a1:48:b6:6c:c1:cf:c9:
87:ea:b6:39:05:73:a2:91:d1:55:d4:c8:2f:cf:d9:5a:52:f5:
71:b4:d7:09:00:c1:d3:58:6b:f5:c3:a4:87:bd:68:06:5f:d2:
fa:c0:30:fa:ec:34:a7:eb:ab:45:87:3c:63:41:58:d6:0f:58:
b1:fa:54:56:eb:e3:dd:1d:f8:62:88:aa:fc:8f:d5:b3:b3:4a:
1e:95:ea:17:35:1b:85:f8:27:58:b0:7a:44:ac:51:ed:a7:0f:
74:d1:68:dc:34:7f:1c:72:d9:d0:c9:66:48:0e:c1:a3:2e:db:
ad:df:45:6e:fd:8f:36:09:d8:15:e1:b1:73:d4:8a:78:c0:a7:
89:c9:65:6f:df:25:d0:cd:c9:b2:33:d2:41:db:0d:26:02:d7:
cb:2b:ad:2d:fd:01:97:e6:af:11:88:f9:f3:4f:b8:50:63:23:
c8:96:55:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:45:39 2025 by rpki-client