Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/2mQ_q8-dGNGRe3nqpXkavXNspDg.roa
File: 2mQ_q8-dGNGRe3nqpXkavXNspDg.roa (raw, json)
Hash identifier: /3YCHcej9bstt2T6B00QHN8/IPSuEaJEhcwHBYjcdtw=
Subject key identifier: DA:64:3F:AB:CF:9D:18:D1:91:7B:79:EA:A5:79:1A:BD:73:6C:A4:38
Certificate issuer: /CN=552423ed905000f69ad93eefc666bb9b1addcb37
Certificate serial: 019423D7F4404D6874D8D9497D575D54F3F1
Authority key identifier: 55:24:23:ED:90:50:00:F6:9A:D9:3E:EF:C6:66:BB:9B:1A:DD:CB:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/2mQ_q8-dGNGRe3nqpXkavXNspDg.roa
Signing time: Wed 01 Jan 2025 21:49:02 +0000
ROA not before: Wed 01 Jan 2025 21:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 51.4.0.0/15 maxlen: 15
51.8.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:f4:40:4d:68:74:d8:d9:49:7d:57:5d:54:f3:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552423ed905000f69ad93eefc666bb9b1addcb37
Validity
Not Before: Jan 1 21:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da643fabcf9d18d1917b79eaa5791abd736ca438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ae:0f:6a:24:9d:09:b3:b5:8c:d6:42:bd:16:
b1:22:6e:46:75:ef:00:56:17:88:a7:99:9b:04:b0:
2c:f4:13:b9:3a:f3:d8:f7:7d:04:2d:92:62:64:85:
31:90:04:49:9a:8d:69:9a:c1:f6:ab:02:95:8c:7f:
6a:73:ad:84:a7:7e:be:56:7e:9a:70:e8:9d:59:88:
b5:5e:fa:62:86:82:f6:a2:54:b3:14:9b:84:99:bc:
ce:9e:98:63:9d:a9:39:87:ce:3d:aa:22:b8:77:cc:
96:46:04:b6:08:af:f7:de:fb:d7:60:3d:e9:37:95:
be:e4:72:8f:e4:b3:ad:3f:fa:f5:39:9b:22:11:e2:
e6:b1:09:c3:f4:45:82:8d:2a:fa:d1:0d:a1:7f:5f:
b0:6f:5f:22:2a:50:24:5a:3c:d5:46:ae:5b:85:d8:
75:51:a5:cf:3d:c3:cd:c8:43:e5:ee:23:d9:1c:75:
3d:2e:89:6d:cf:f3:ff:a8:20:a0:7c:87:9e:e7:0d:
62:74:33:7b:04:4b:ab:bb:9a:d9:ba:e7:36:f3:41:
aa:f3:20:2b:6e:75:f1:a2:69:f1:2c:b5:e2:98:a5:
e2:83:d2:ae:6d:29:0c:84:83:ff:b4:38:c9:6f:4c:
e9:59:b4:9e:32:1f:7d:8c:db:0e:6f:c8:97:66:9f:
b0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:64:3F:AB:CF:9D:18:D1:91:7B:79:EA:A5:79:1A:BD:73:6C:A4:38
X509v3 Authority Key Identifier:
keyid:55:24:23:ED:90:50:00:F6:9A:D9:3E:EF:C6:66:BB:9B:1A:DD:CB:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/2mQ_q8-dGNGRe3nqpXkavXNspDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.4.0.0/15
51.8.0.0/16
Signature Algorithm: sha256WithRSAEncryption
53:ff:4f:b3:f0:48:5d:ca:77:c6:3a:b1:10:60:a5:b0:6e:ab:
e7:56:b5:08:b2:57:48:0d:ff:21:e4:b3:4b:77:ee:6e:5c:e3:
c8:0a:7c:2a:04:2e:8d:fa:d2:7c:0b:ae:9c:1f:ae:3c:cc:47:
0a:64:86:32:68:27:c1:be:dc:b5:ce:61:1c:0c:01:4e:e9:2f:
8f:6d:d9:5d:08:77:58:2d:42:4c:ed:80:d6:74:e3:0a:c5:a4:
2d:5e:ee:01:33:ee:35:af:fc:5e:9a:6e:29:cc:51:3a:73:30:
4b:34:fc:1e:c2:34:77:53:2b:6e:0d:88:18:cf:59:e4:75:4b:
31:03:66:5e:21:e5:b1:c8:ad:d1:e9:5d:18:d2:1e:8a:04:c2:
55:a4:28:99:d9:76:c5:c4:86:81:34:e5:68:47:43:37:7b:77:
c2:7b:72:e2:8d:ac:f4:36:42:89:89:45:4c:67:08:65:cc:8c:
82:a0:e7:b0:41:52:cd:f6:ef:b9:6a:a6:98:cd:15:da:4d:83:
8d:7f:0f:37:04:33:c5:e5:03:27:a7:1d:ad:5a:8e:fa:f2:93:
55:e0:98:ac:eb:99:fa:ed:d4:96:8d:61:a3:fe:50:ca:bd:d2:
5f:c2:84:89:80:f4:69:7f:19:0f:5d:83:ac:f2:bf:08:64:19:
ac:cf:48:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:42:14 2025 by rpki-client