Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/2-gxvLC050rPyg0pBIuwjLWc1Cw.roa
File: 2-gxvLC050rPyg0pBIuwjLWc1Cw.roa (raw, json)
Hash identifier: 1U8YnoACqQJDMJE5uRSPEGgs7vpW8J6WOx9xshbIsPE=
Subject key identifier: DB:E8:31:BC:B0:B4:E7:4A:CF:CA:0D:29:04:8B:B0:8C:B5:9C:D4:2C
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 0197465F4445F4EE3ED0233329A925D6028C
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/2-gxvLC050rPyg0pBIuwjLWc1Cw.roa
Signing time: Fri 06 Jun 2025 17:52:17 +0000
ROA not before: Fri 06 Jun 2025 17:52:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395793
IP address blocks: 217.179.56.0/24 maxlen: 24
217.179.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:5f:44:45:f4:ee:3e:d0:23:33:29:a9:25:d6:02:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Jun 6 17:52:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dbe831bcb0b4e74acfca0d29048bb08cb59cd42c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:52:be:d5:b4:49:72:9b:e4:3e:50:17:a4:4e:
84:81:a3:81:12:62:97:2d:1f:9f:c5:68:09:cb:24:
84:ce:73:c6:82:82:7b:fd:03:a1:20:66:4b:8f:a6:
3f:fd:78:f4:3c:2d:a5:16:80:67:c7:18:d5:77:2f:
48:6b:8d:2f:c5:8f:d2:ba:3d:43:00:5d:1f:2f:19:
0d:ca:33:b7:fe:33:49:06:fd:b4:1f:2c:0c:41:d0:
66:a2:33:25:77:05:a9:5e:e3:ec:bf:53:47:30:0d:
f4:ce:dd:ae:07:dd:13:a5:3f:2c:d8:cc:eb:d7:d5:
5d:d0:89:6b:5f:23:3a:4f:0b:9a:21:31:c1:b8:d1:
53:95:1e:1a:fc:0d:cd:80:ad:9e:35:3a:e5:f9:ee:
1b:4b:d0:a6:1b:1b:92:56:77:18:a8:d2:ca:28:3f:
c6:4c:84:10:18:61:8f:4d:e5:1c:82:d6:ca:2f:72:
62:08:1a:33:8b:4a:cc:42:f2:2e:2a:7d:c6:29:82:
da:cf:5e:96:c8:72:37:28:a3:90:56:59:80:ab:ea:
aa:6c:50:2e:16:2c:4b:41:89:c7:25:23:45:44:df:
89:b5:68:0b:28:d5:9c:e9:93:b3:f9:48:27:fc:7e:
86:26:89:dc:5b:66:33:f3:98:0a:f9:17:2b:79:25:
e2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E8:31:BC:B0:B4:E7:4A:CF:CA:0D:29:04:8B:B0:8C:B5:9C:D4:2C
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/2-gxvLC050rPyg0pBIuwjLWc1Cw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.179.56.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:b2:de:52:e7:61:d4:01:8e:02:e5:6a:13:1a:49:93:64:e4:
3d:ea:27:f0:1e:66:1d:24:93:49:87:ed:2b:8a:e0:5f:12:0c:
67:d5:00:ac:df:35:f7:cf:ae:02:33:2e:a7:35:67:d0:25:bd:
07:c1:9e:22:5d:a6:60:b7:53:95:04:af:ab:be:c9:91:bf:40:
31:ec:d3:cd:d6:10:51:a3:9b:d3:d7:61:cf:cd:53:15:a7:10:
1e:c8:64:9e:da:d8:65:3f:8c:db:28:0b:6f:69:d6:0a:a2:a0:
09:d0:df:c7:43:9e:51:59:60:f6:65:7d:dc:1a:d2:c9:f4:ac:
0f:d7:76:4a:2e:1d:94:8e:01:84:30:a6:89:be:12:aa:45:76:
ad:2b:fa:99:5f:fd:c1:75:f5:7e:43:d0:c3:b8:39:91:1c:8a:
d0:a7:0c:90:1e:cd:3e:d0:43:2f:6c:24:63:60:b0:d1:8d:8f:
63:07:65:ff:d1:4e:7e:51:28:02:79:d4:c5:5e:44:89:02:aa:
29:3f:72:16:97:43:47:b6:5d:c1:88:f6:37:5b:2a:92:c3:26:
13:04:c6:e9:8c:c3:36:4a:39:db:a3:16:d1:08:39:e9:e5:36:
13:22:52:d0:f8:37:40:16:db:0f:31:00:52:a5:63:ec:4b:32:
3f:75:66:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:44:15 2025 by rpki-client