Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/c2mbKi5UZ3GiOkTKMMsYLmmHWNU.roa
File: c2mbKi5UZ3GiOkTKMMsYLmmHWNU.roa (raw, json)
Hash identifier: UtxHj7i+M428S4MKPB9E9Q2PRXSjTUZ5FcXtjJA5bUs=
Subject key identifier: 73:69:9B:2A:2E:54:67:71:A2:3A:44:CA:30:CB:18:2E:69:87:58:D5
Certificate issuer: /CN=9706aa905465586424f387fdbd83648b72d946de
Certificate serial: 01942825DF757F578ED672E302671370168B
Authority key identifier: 97:06:AA:90:54:65:58:64:24:F3:87:FD:BD:83:64:8B:72:D9:46:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/c2mbKi5UZ3GiOkTKMMsYLmmHWNU.roa
Signing time: Thu 02 Jan 2025 17:52:38 +0000
ROA not before: Thu 02 Jan 2025 17:52:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201964
IP address blocks: 31.187.84.0/22 maxlen: 22
31.187.87.0/24 maxlen: 24
185.55.84.0/22 maxlen: 22
2a02:4820::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:df:75:7f:57:8e:d6:72:e3:02:67:13:70:16:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9706aa905465586424f387fdbd83648b72d946de
Validity
Not Before: Jan 2 17:52:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73699b2a2e546771a23a44ca30cb182e698758d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ce:05:04:ae:87:71:b0:59:ef:18:22:4b:b8:
47:05:22:91:7c:f6:a5:bc:e2:2e:e0:df:e4:9d:d2:
70:c3:74:da:8a:08:d9:be:30:9e:00:b7:c6:b1:ce:
fe:bc:ec:a9:23:87:de:c6:c3:0e:b7:a9:43:7f:55:
2d:5f:13:cb:c8:08:51:40:de:08:61:24:9a:e3:92:
04:88:ce:84:07:3d:9c:09:f0:ee:a8:de:b5:64:49:
df:f2:bc:c7:93:95:3a:3d:d4:37:74:ce:00:2d:25:
42:33:0a:7d:2e:55:e8:c1:8a:12:2e:3a:c3:82:ed:
01:f0:fc:b4:ae:63:88:aa:3c:22:cf:a2:4d:63:a9:
4b:38:f5:9a:10:02:30:d1:46:39:6e:a7:aa:29:d8:
5f:cf:90:1f:21:f6:74:41:02:55:83:46:9b:7c:af:
30:d7:eb:e8:8a:1b:dc:91:79:f3:b5:2c:bf:96:bc:
e3:94:7f:b2:5b:23:2b:cd:fc:d4:96:23:e3:bf:87:
86:38:01:49:e4:5b:a4:73:b0:9d:00:83:c1:76:40:
dd:01:33:9f:7b:6d:f0:b6:f6:33:57:f7:99:3c:34:
77:1b:d7:3f:b0:0b:9a:81:9e:f6:ab:4b:ec:cd:2a:
66:08:f4:86:0d:5d:33:56:6e:e7:02:64:4a:10:eb:
9f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:69:9B:2A:2E:54:67:71:A2:3A:44:CA:30:CB:18:2E:69:87:58:D5
X509v3 Authority Key Identifier:
keyid:97:06:AA:90:54:65:58:64:24:F3:87:FD:BD:83:64:8B:72:D9:46:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/c2mbKi5UZ3GiOkTKMMsYLmmHWNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.187.84.0/22
185.55.84.0/22
IPv6:
2a02:4820::/32
Signature Algorithm: sha256WithRSAEncryption
58:cd:b1:9e:07:a6:92:71:51:6b:b5:df:27:f9:79:a2:ee:f6:
2f:2a:14:15:f5:01:aa:0d:84:64:68:af:74:bc:2f:b4:f4:2e:
d4:2b:d3:52:12:44:6a:85:78:2a:56:ad:ac:82:e2:cb:1d:55:
4f:0f:7e:f0:16:2e:59:3b:03:d7:44:ad:be:c6:9e:e0:3b:54:
ad:fd:11:f8:a1:17:b4:fc:0e:ee:c2:c7:65:f6:24:f1:ba:9e:
15:74:25:f0:a9:3e:8b:67:c1:ce:95:29:e7:f9:85:c2:ee:41:
f2:c4:2b:b9:d1:a4:25:6a:ea:c7:89:18:b3:ce:ef:f8:dc:9f:
22:d0:d1:5f:84:66:e2:e6:b8:91:f8:61:15:a4:3f:7f:cc:df:
b8:1a:84:80:4d:b2:90:95:f8:9c:ca:7b:5d:7c:3f:04:14:32:
94:01:20:1b:c2:39:3b:63:c4:91:a0:a3:c7:ed:2f:54:44:b1:
c0:f4:61:47:c3:c3:db:c6:d3:06:66:dd:2a:5f:06:6e:10:dc:
1c:0c:4d:d7:f5:43:6e:90:02:87:0c:fc:d7:2a:0f:bf:ef:61:
9c:93:18:29:6d:ce:6e:14:32:23:fb:f2:17:24:7c:6f:e4:38:
bf:55:2c:7f:41:06:e9:c0:7d:8d:ea:26:e1:cb:34:9a:9d:e4:
f3:33:19:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:29 2025 by rpki-client