Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/2wV8eUCUu5RGsjYa7-OlHblwpFo.roa
File: 2wV8eUCUu5RGsjYa7-OlHblwpFo.roa (raw, json)
Hash identifier: 7BqtxHk5pTQN6TSTs893yWqV/YVjq+6kshvNaK8vqGo=
Subject key identifier: DB:05:7C:79:40:94:BB:94:46:B2:36:1A:EF:E3:A5:1D:B9:70:A4:5A
Certificate issuer: /CN=cbf23be1115f022aa269d9cea439bb8b492307e2
Certificate serial: 01942520CB4B080119FBA829EE2CE451094F
Authority key identifier: CB:F2:3B:E1:11:5F:02:2A:A2:69:D9:CE:A4:39:BB:8B:49:23:07:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_I74RFfAiqiadnOpDm7i0kjB-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/2wV8eUCUu5RGsjYa7-OlHblwpFo.roa
Signing time: Thu 02 Jan 2025 03:48:13 +0000
ROA not before: Thu 02 Jan 2025 03:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3356
IP address blocks: 185.64.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/y_I74RFfAiqiadnOpDm7i0kjB-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 14:35:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:cb:4b:08:01:19:fb:a8:29:ee:2c:e4:51:09:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbf23be1115f022aa269d9cea439bb8b492307e2
Validity
Not Before: Jan 2 03:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db057c794094bb9446b2361aefe3a51db970a45a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b7:1a:3a:03:1c:45:e9:07:5e:61:b7:fa:50:
b6:4b:1a:c6:11:62:20:6c:ba:85:a0:79:ba:4e:a5:
53:51:75:c7:a1:c7:60:bb:d6:b8:36:be:28:02:16:
f0:c0:02:f3:07:1d:e1:8e:47:10:04:4d:17:0e:35:
02:f3:10:65:8d:c0:1f:ec:6b:fb:8a:e6:c1:d9:da:
08:80:28:3b:7d:cb:13:57:2e:44:12:a5:a3:62:ea:
08:f9:88:9b:10:de:06:40:6d:aa:fe:63:4d:46:6a:
c7:58:e1:2a:0d:65:6b:7f:02:bf:10:cf:22:57:34:
e9:a1:37:38:5c:39:08:4d:a3:8a:e1:c5:d0:f0:27:
90:ce:75:66:97:98:41:d1:b6:04:35:09:4f:fe:37:
bc:54:fb:c3:90:9f:1a:14:0d:e6:9a:31:b7:c0:c8:
6f:57:54:cc:d7:ac:7e:62:75:40:37:9e:72:3c:84:
14:0e:58:0d:eb:6c:06:bc:78:60:6b:30:7c:38:96:
92:fe:e0:53:4d:5d:6e:2c:b9:ce:a1:ee:a4:c6:eb:
1c:8f:1c:ed:89:cd:b2:93:62:85:c0:ee:e6:4f:e9:
bc:89:be:23:c9:0a:3d:de:47:c7:09:eb:c4:85:dd:
91:f0:f3:81:13:c7:a0:52:94:64:40:13:3a:60:c5:
d8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:05:7C:79:40:94:BB:94:46:B2:36:1A:EF:E3:A5:1D:B9:70:A4:5A
X509v3 Authority Key Identifier:
keyid:CB:F2:3B:E1:11:5F:02:2A:A2:69:D9:CE:A4:39:BB:8B:49:23:07:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_I74RFfAiqiadnOpDm7i0kjB-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/2wV8eUCUu5RGsjYa7-OlHblwpFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.64.252.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:e1:1e:0f:41:9a:cc:d1:78:87:f3:a3:38:cd:65:bf:d8:f6:
14:d2:65:d7:6b:30:eb:44:19:4e:92:a8:47:76:0e:eb:ec:43:
67:0c:87:e2:5b:1b:db:c4:d6:4b:95:82:e2:d5:87:50:8a:ea:
84:28:6c:42:cd:a1:db:01:6a:32:54:71:94:d4:5e:45:9e:87:
c4:81:6f:b4:50:70:9c:be:af:bc:d9:7b:93:3b:67:e1:ee:dc:
06:c4:60:7d:fc:6b:41:56:b8:71:b0:9b:ea:fc:13:45:08:d9:
1c:2f:03:21:b2:47:f2:ac:c8:21:59:0e:fd:36:2f:a6:61:ef:
fb:30:57:1d:89:6b:10:f4:c5:eb:73:77:3a:ef:4b:be:2a:02:
75:9c:e0:be:7a:ef:1f:2d:e9:31:40:d6:7c:32:1c:24:12:83:
09:fd:b2:04:b7:5f:22:0b:4b:8b:90:91:79:17:50:82:e7:7b:
f8:4c:d5:59:87:e8:ed:48:6f:5b:93:f2:83:c2:08:58:55:0c:
70:0d:ec:2a:a1:07:c0:d5:4a:fa:ff:6e:ca:c4:37:df:8e:69:
2b:49:79:0c:6a:db:43:05:d0:b4:d1:1e:71:ee:c3:17:d0:ac:
f8:35:da:48:b9:af:a3:df:1e:22:c1:62:a8:fd:4c:b6:4c:97:
88:41:f2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 18:52:39 2025 by rpki-client