Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/n2_eVP33y04IubuQqwNJXDAbIlk.roa
File: n2_eVP33y04IubuQqwNJXDAbIlk.roa (raw, json)
Hash identifier: HFY2y68gkBIKxp7LauCrgUgasru4O6u6ooJHkj70swU=
Subject key identifier: 9F:6F:DE:54:FD:F7:CB:4E:08:B9:BB:90:AB:03:49:5C:30:1B:22:59
Certificate issuer: /CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Certificate serial: 01942747ABB4CBC3EA91D8C64243C2F103BE
Authority key identifier: 95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/n2_eVP33y04IubuQqwNJXDAbIlk.roa
Signing time: Thu 02 Jan 2025 13:49:55 +0000
ROA not before: Thu 02 Jan 2025 13:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62651
IP address blocks: 185.147.212.0/24 maxlen: 24
185.147.213.0/24 maxlen: 24
185.147.214.0/24 maxlen: 24
185.147.215.0/24 maxlen: 24
2a03:efc0:500::/40 maxlen: 40
2a03:efc0:700::/40 maxlen: 40
2a03:efc0:900::/40 maxlen: 40
2a03:efc0:1100::/40 maxlen: 40
2a03:efc0:1500::/40 maxlen: 40
2a03:efc0:1700::/40 maxlen: 40
2a03:efc0:2300::/40 maxlen: 40
2a03:efc0:2500::/40 maxlen: 40
2a03:efc0:2700::/40 maxlen: 40
2a03:efc0:2900::/40 maxlen: 40
2a03:efc0:3100::/40 maxlen: 40
2a03:efc0:3300::/40 maxlen: 40
2a03:efc0:3500::/40 maxlen: 40
2a03:efc0:3700::/40 maxlen: 40
2a03:efc0:4100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 23:34:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:ab:b4:cb:c3:ea:91:d8:c6:42:43:c2:f1:03:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Validity
Not Before: Jan 2 13:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f6fde54fdf7cb4e08b9bb90ab03495c301b2259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:26:43:cd:fd:bd:4a:a0:ce:38:8e:27:75:fc:
30:fb:e5:dd:97:74:88:32:26:ea:77:45:0e:52:7f:
06:0b:8c:0f:b7:27:c3:cd:41:f0:19:01:e1:c2:2d:
79:9b:52:7b:2c:98:a3:b2:09:82:11:5d:7b:ab:6e:
a2:a9:14:ad:c2:24:31:41:3f:b5:84:a0:06:2f:b6:
f4:f3:5c:0d:f6:4e:b3:9d:f5:5a:e4:dd:81:1c:b8:
d1:83:8a:7a:ec:98:1d:b2:a8:e5:27:c4:92:dc:66:
4b:cf:eb:45:bf:c8:69:04:1d:08:98:74:58:83:96:
ac:ce:5e:a9:44:35:2d:f4:fa:11:4b:c6:5b:da:fe:
fa:54:48:c2:60:33:61:db:58:5a:fe:af:ab:23:ec:
b3:61:f8:4a:78:85:c6:1e:5a:dd:0f:27:d2:d8:99:
18:b8:e9:0c:ce:c4:54:76:07:dc:0b:a2:ef:37:ad:
92:9d:82:8f:14:8a:12:64:68:80:6a:6b:dd:94:15:
e9:5d:d1:7f:87:d2:e1:5e:6d:71:9c:46:ed:34:96:
5d:3f:44:ee:44:06:30:8f:10:9a:66:d5:b2:83:3f:
38:8b:e6:a0:90:21:2d:5d:6c:9f:33:2a:f4:10:d9:
2f:ae:9d:7e:87:1e:51:54:dc:23:51:69:9c:7b:c4:
c4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6F:DE:54:FD:F7:CB:4E:08:B9:BB:90:AB:03:49:5C:30:1B:22:59
X509v3 Authority Key Identifier:
keyid:95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/n2_eVP33y04IubuQqwNJXDAbIlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.212.0/22
IPv6:
2a03:efc0:500::/40
2a03:efc0:700::/40
2a03:efc0:900::/40
2a03:efc0:1100::/40
2a03:efc0:1500::/40
2a03:efc0:1700::/40
2a03:efc0:2300::/40
2a03:efc0:2500::/40
2a03:efc0:2700::/40
2a03:efc0:2900::/40
2a03:efc0:3100::/40
2a03:efc0:3300::/40
2a03:efc0:3500::/40
2a03:efc0:3700::/40
2a03:efc0:4100::/40
Signature Algorithm: sha256WithRSAEncryption
a5:0e:af:ff:0c:82:6b:fc:c0:a1:a6:0c:24:50:79:fb:a7:7b:
07:15:58:2c:48:7a:34:12:e2:e8:63:9a:cf:08:18:1f:25:a7:
85:5c:07:e6:c9:c2:7a:5b:7d:57:93:c4:e3:e1:66:a9:c8:6a:
a6:82:c0:9e:cf:e2:45:30:59:f6:40:fa:77:8b:a0:ce:87:01:
9b:f2:2f:4c:21:e8:bf:d4:3c:3d:69:02:7e:04:8c:b9:47:80:
5e:78:2d:8a:59:08:30:e1:66:73:0d:87:ed:4a:20:35:75:26:
9d:90:8b:d1:79:7d:76:26:8c:7e:84:ae:a9:da:7d:2b:e3:31:
34:42:f0:7c:90:ac:51:c1:47:be:57:c0:be:0d:e7:11:f4:ff:
34:d9:8a:2b:82:e6:19:48:6e:2f:f4:a0:03:78:ba:46:a2:2d:
eb:c2:f0:cd:48:c8:70:31:cf:c6:b1:cc:7f:83:62:95:ac:f0:
58:57:c4:3a:24:05:a1:73:c6:73:2e:89:53:5b:95:37:a3:47:
75:0a:9e:58:4a:1f:5a:97:f6:60:ae:d7:6e:f7:1d:dc:1c:a2:
46:70:da:7c:5a:a1:7d:17:7f:96:8c:57:a0:18:4c:28:c7:48:
28:b5:ee:ec:bc:1a:fa:b7:90:1c:9e:e8:bd:a5:b4:bf:f7:13:
a8:e2:6b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:45:09 2025 by rpki-client