Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/bx2zbgFzR2bVaPl_B5ZfOBHYjjw.roa
File: bx2zbgFzR2bVaPl_B5ZfOBHYjjw.roa (raw, json)
Hash identifier: ud4OsdTxDDqxynACtaERs5qzUlmK1nyDHD7M5p1jW+U=
Subject key identifier: 6F:1D:B3:6E:01:73:47:66:D5:68:F9:7F:07:96:5F:38:11:D8:8E:3C
Certificate issuer: /CN=60b794902a5cd3d2783fcc2aa4b0791f79a577a2
Certificate serial: 019422203B7DBB44E760ED602E239083BA33
Authority key identifier: 60:B7:94:90:2A:5C:D3:D2:78:3F:CC:2A:A4:B0:79:1F:79:A5:77:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLeUkCpc09J4P8wqpLB5H3mld6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/bx2zbgFzR2bVaPl_B5ZfOBHYjjw.roa
Signing time: Wed 01 Jan 2025 13:48:45 +0000
ROA not before: Wed 01 Jan 2025 13:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34614
IP address blocks: 193.26.215.0/24 maxlen: 24
193.26.219.0/24 maxlen: 24
193.26.223.0/24 maxlen: 24
193.27.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/YLeUkCpc09J4P8wqpLB5H3mld6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:3b:7d:bb:44:e7:60:ed:60:2e:23:90:83:ba:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60b794902a5cd3d2783fcc2aa4b0791f79a577a2
Validity
Not Before: Jan 1 13:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f1db36e01734766d568f97f07965f3811d88e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e2:a3:b1:92:8a:0e:18:4f:62:dc:ec:e9:6b:
c9:0e:95:54:4c:47:82:63:c6:4a:6d:c7:77:48:57:
9c:f7:44:30:52:0a:d2:96:f9:df:51:25:7b:c3:bd:
29:90:8b:eb:27:2e:0b:0c:67:8c:28:91:a3:b5:02:
e0:7c:05:af:a9:1e:f2:d2:fb:8d:6c:00:20:87:d7:
8d:94:15:2f:c9:75:05:99:63:ac:ae:35:05:eb:11:
7e:2c:8e:8c:be:90:50:26:ba:35:ca:ed:37:4b:45:
ae:25:4d:05:e2:25:e9:d6:a8:ae:d8:ca:32:bf:61:
b4:01:c4:f6:ab:f2:fc:17:8e:fa:61:cf:fd:cf:82:
3a:de:1f:55:c3:24:c1:19:6f:05:60:7e:02:da:fa:
f6:86:21:c1:39:ba:89:06:c6:fc:36:62:e1:1d:b3:
ef:30:25:ae:6a:70:3c:9b:bf:49:b4:15:a7:af:45:
6c:1d:38:f2:e6:9f:0c:9d:67:30:d1:49:95:7e:58:
17:f0:b1:68:cc:39:ff:27:a1:8e:48:9e:e6:d9:76:
1e:3d:67:6f:b8:38:d2:51:9d:8d:1d:01:e7:28:08:
58:64:df:44:f1:93:2b:38:f0:78:63:6a:a0:b4:9e:
ae:9f:ca:b9:ba:8c:60:2b:0d:8d:b2:cb:12:31:18:
b2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:1D:B3:6E:01:73:47:66:D5:68:F9:7F:07:96:5F:38:11:D8:8E:3C
X509v3 Authority Key Identifier:
keyid:60:B7:94:90:2A:5C:D3:D2:78:3F:CC:2A:A4:B0:79:1F:79:A5:77:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLeUkCpc09J4P8wqpLB5H3mld6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/bx2zbgFzR2bVaPl_B5ZfOBHYjjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.215.0/24
193.26.219.0/24
193.26.223.0/24
193.27.8.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:05:30:22:a5:3f:ca:b5:1d:4a:ce:a7:16:d6:be:31:c4:3c:
25:75:1b:2f:01:61:26:49:20:f0:6b:65:a6:f6:d9:9e:e9:ee:
06:cb:9c:5c:5c:32:e5:de:3f:75:2f:bb:e9:90:27:23:74:b0:
4c:da:aa:e1:c8:90:54:1e:03:82:d2:64:89:6d:bd:86:0d:13:
e9:09:9d:86:d9:24:41:3f:75:bc:01:e0:73:83:52:8d:d1:eb:
07:22:0f:c7:1a:79:24:cf:7c:29:45:c1:1a:48:43:36:cb:54:
97:4c:c0:8b:ff:36:e8:ef:a1:c3:a4:91:4f:61:5a:65:7e:80:
1c:82:9e:31:dc:c2:78:b6:dd:dd:e5:2f:16:4e:bc:e9:42:72:
a8:35:59:78:95:ab:d7:0a:b4:bd:8d:ab:de:34:ce:dd:fc:b0:
d7:b9:b6:5a:ba:16:b0:ca:3c:a5:46:f1:c5:d1:e4:46:b0:f5:
78:1e:b5:f1:24:34:6f:b7:e7:e2:a4:48:8c:7b:96:f2:66:da:
2a:78:58:90:e4:76:34:c1:a8:23:98:e8:ae:9c:b8:75:e1:1c:
ca:47:ab:df:77:bf:cc:5f:99:53:c5:7c:4c:f0:ab:a3:9f:5d:
32:98:85:3f:ff:ae:7a:69:fd:1b:f4:9c:25:60:c2:2b:56:fc:
c6:82:63:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:50:54 2025 by rpki-client