Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/2vj5B04hPRrl36o4PSEreNmSh7Y.roa
File: 2vj5B04hPRrl36o4PSEreNmSh7Y.roa (raw, json)
Hash identifier: IJqTeCNZ6pF/BafJ55wl0YbKPxsnvPNim6xG4D9/f0M=
Subject key identifier: DA:F8:F9:07:4E:21:3D:1A:E5:DF:AA:38:3D:21:2B:78:D9:92:87:B6
Certificate issuer: /CN=b0701346bad55df7f5dc818bbbbcfbb7db1070ab
Certificate serial: 0194258EF8A13079EB27A9B689F3289A1372
Authority key identifier: B0:70:13:46:BA:D5:5D:F7:F5:DC:81:8B:BB:BC:FB:B7:DB:10:70:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sHATRrrVXff13IGLu7z7t9sQcKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/2vj5B04hPRrl36o4PSEreNmSh7Y.roa
Signing time: Thu 02 Jan 2025 05:48:34 +0000
ROA not before: Thu 02 Jan 2025 05:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 195.38.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/sHATRrrVXff13IGLu7z7t9sQcKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/sHATRrrVXff13IGLu7z7t9sQcKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sHATRrrVXff13IGLu7z7t9sQcKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:f8:a1:30:79:eb:27:a9:b6:89:f3:28:9a:13:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0701346bad55df7f5dc818bbbbcfbb7db1070ab
Validity
Not Before: Jan 2 05:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=daf8f9074e213d1ae5dfaa383d212b78d99287b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5d:38:ea:dd:f5:59:f9:48:79:fb:ab:39:07:
01:ad:b6:ce:c9:c4:31:b6:26:11:f9:07:df:46:f8:
38:3c:20:a6:3c:d9:67:0a:96:1c:f4:bd:00:2c:c7:
ba:91:a5:fc:0b:c1:1b:9d:44:d2:15:9c:e2:f9:4f:
96:46:72:d0:15:02:85:19:ba:af:74:a2:d3:6b:fc:
dc:6d:ec:f8:d0:08:29:53:b7:a8:4b:a3:a9:51:9c:
34:9a:f5:2d:b0:89:90:59:90:6a:f7:19:51:93:61:
50:79:95:20:88:58:22:5a:65:e0:05:c1:ad:02:7f:
1a:18:1d:81:41:42:c4:97:70:39:ab:8d:60:6e:6e:
5a:22:87:c4:6f:7a:3f:e0:1f:e2:77:07:59:ee:fc:
c3:a6:57:ad:d3:7a:ee:33:70:fb:c7:2d:b6:78:7e:
1a:71:18:71:7c:d6:d8:87:33:8e:6f:c4:15:67:16:
60:20:86:0f:f2:d2:43:02:0d:63:47:1d:d1:03:59:
34:6d:7d:51:e8:8d:80:fc:8b:34:db:95:04:49:d0:
c5:8e:18:0c:62:c0:71:94:84:e0:d0:97:07:17:35:
a5:63:ae:e6:f4:e1:0f:1a:f0:1d:11:3f:a8:b8:80:
77:43:d8:e0:ae:d6:78:0d:be:31:06:17:11:d5:7a:
44:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F8:F9:07:4E:21:3D:1A:E5:DF:AA:38:3D:21:2B:78:D9:92:87:B6
X509v3 Authority Key Identifier:
keyid:B0:70:13:46:BA:D5:5D:F7:F5:DC:81:8B:BB:BC:FB:B7:DB:10:70:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHATRrrVXff13IGLu7z7t9sQcKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/2vj5B04hPRrl36o4PSEreNmSh7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/sHATRrrVXff13IGLu7z7t9sQcKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.38.19.0/24
Signature Algorithm: sha256WithRSAEncryption
34:23:f8:2d:88:b9:d0:15:da:fd:bb:16:49:99:60:b7:b0:d5:
c6:dc:44:67:4b:79:fc:16:32:ef:86:ec:52:0d:fa:8a:a4:4d:
a0:7a:50:1a:ee:16:2b:9e:ce:fe:8e:33:ee:6a:11:2d:01:a5:
5f:73:f4:c8:32:99:80:fc:55:a9:47:2d:f8:40:d3:d3:90:a7:
d9:05:1f:77:4a:4a:9a:38:1f:1c:3c:3c:9d:76:3e:75:95:64:
ba:79:64:ca:67:f5:a3:35:bb:62:20:89:c6:f2:2a:2e:be:d2:
74:0e:57:4d:15:c0:12:94:76:37:03:86:65:3c:9d:c2:f5:61:
72:bc:00:14:3e:ce:64:a4:de:36:27:6f:ba:df:21:9d:31:13:
f9:3d:9b:75:5c:8a:48:5b:66:7e:5a:07:6a:d7:52:9c:68:89:
53:71:c4:1e:43:29:e0:46:7c:f7:a2:5b:68:11:97:fd:b3:f5:
50:e2:9e:1c:72:49:88:96:c1:76:ef:bb:a8:3a:1d:84:ab:04:
3d:3d:31:7a:7d:e4:1b:8b:01:53:5f:dd:dd:e2:00:a2:3d:2f:
28:de:99:25:60:cc:59:c4:63:91:5a:e9:c4:47:65:2a:1c:a0:
4f:1b:5c:ca:4c:31:19:01:88:b7:eb:b7:86:e2:29:0e:d9:40:
28:f5:a0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:36:52 2025 by rpki-client