Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/2sJ6ZGpwbn2MD9cB-VLv0zGhn0c.roa
File: 2sJ6ZGpwbn2MD9cB-VLv0zGhn0c.roa (raw, json)
Hash identifier: 9pTsB3dCKKFbBl3Zhp4GXJNV4w/5Tt16+io9kuuIpls=
Subject key identifier: DA:C2:7A:64:6A:70:6E:7D:8C:0F:D7:01:F9:52:EF:D3:31:A1:9F:47
Certificate issuer: /CN=dc94bb69453f139a60029e22db0fb3424a906cee
Certificate serial: 019421B245A3BC3218E4CD35286ECD743525
Authority key identifier: DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/2sJ6ZGpwbn2MD9cB-VLv0zGhn0c.roa
Signing time: Wed 01 Jan 2025 11:48:38 +0000
ROA not before: Wed 01 Jan 2025 11:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13307
IP address blocks: 91.90.16.0/21 maxlen: 24
91.203.88.0/22 maxlen: 24
193.43.224.0/22 maxlen: 24
194.88.206.0/23 maxlen: 24
194.143.144.0/23 maxlen: 24
195.20.96.0/23 maxlen: 24
195.95.202.0/23 maxlen: 24
195.140.168.0/22 maxlen: 24
195.234.68.0/22 maxlen: 24
2a01:6d80::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:45:a3:bc:32:18:e4:cd:35:28:6e:cd:74:35:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc94bb69453f139a60029e22db0fb3424a906cee
Validity
Not Before: Jan 1 11:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dac27a646a706e7d8c0fd701f952efd331a19f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8b:a9:47:d6:b7:06:29:38:e7:b4:bb:ba:9b:
1a:0e:fb:fa:37:39:1c:9c:8d:f6:98:7b:9b:1c:24:
c5:3f:62:2c:f0:8a:57:4b:0f:96:86:80:aa:81:bf:
db:d8:74:99:91:3b:08:d8:39:c3:90:a5:e2:df:e1:
10:16:62:b4:95:d8:77:1c:13:25:85:6c:75:65:93:
64:f7:3b:38:1b:27:db:05:ca:e3:60:e9:9c:e8:5d:
c5:1f:74:c3:e5:c8:29:88:6a:9b:a6:37:6c:54:0a:
04:03:55:18:13:84:5a:ea:d8:bd:f8:a0:3f:60:98:
e4:79:08:f4:d5:b3:36:a6:26:cd:46:d3:11:0f:3b:
7e:85:f1:dd:14:8c:3c:e4:20:bb:c6:88:65:2c:28:
e9:b5:e1:7e:74:46:50:c1:35:7c:2e:3b:6a:5b:67:
84:4f:85:5e:08:20:51:d2:64:09:de:3f:01:67:d8:
47:ac:8c:d2:85:b2:a3:6f:3a:9b:0f:4b:38:02:af:
e1:8d:b8:fb:8a:e3:03:08:b5:28:ca:a7:35:52:09:
f2:c4:51:ac:ee:33:e9:97:09:d7:85:5c:9c:35:f4:
53:68:90:c4:f8:c0:b9:1d:38:3b:f4:09:2b:2c:58:
3b:cf:28:6e:68:a0:72:64:92:13:9f:3a:b0:ee:77:
ed:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C2:7A:64:6A:70:6E:7D:8C:0F:D7:01:F9:52:EF:D3:31:A1:9F:47
X509v3 Authority Key Identifier:
keyid:DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/2sJ6ZGpwbn2MD9cB-VLv0zGhn0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.90.16.0/21
91.203.88.0/22
193.43.224.0/22
194.88.206.0/23
194.143.144.0/23
195.20.96.0/23
195.95.202.0/23
195.140.168.0/22
195.234.68.0/22
IPv6:
2a01:6d80::/36
Signature Algorithm: sha256WithRSAEncryption
25:d9:7c:6a:35:5b:5e:31:7a:3b:43:dc:1e:75:10:e9:dd:af:
a7:19:36:6c:03:f4:8e:9e:c9:cd:00:f4:eb:91:ad:69:f2:61:
09:33:f0:84:91:f2:78:d2:a2:7d:4a:09:6e:33:ea:98:5e:42:
5d:20:91:2a:59:73:f4:86:e0:44:cf:bd:d0:49:29:99:d1:5c:
0e:21:f2:af:4b:77:51:f3:62:f3:62:44:e7:d9:68:c3:d9:13:
f8:c5:e3:71:f8:7a:86:49:ba:e2:3d:da:b6:08:e0:94:25:54:
2f:e4:da:38:10:bb:8f:1c:61:17:83:85:2a:bf:8f:76:3e:a9:
ba:b4:dd:4c:06:d0:4a:5b:9f:18:aa:cd:fe:10:ca:ff:4e:c9:
ef:ae:70:c5:be:d5:b0:9c:e2:4f:9e:cc:42:38:5d:de:2f:34:
a4:c2:48:c7:d2:c5:bd:cc:2b:60:b2:70:3d:dc:31:87:5d:d8:
2e:d1:a2:a4:58:b8:35:d4:63:cd:25:9e:da:14:89:92:33:40:
e3:94:91:82:23:60:f1:c0:75:6f:88:6d:dc:85:cf:6d:68:f2:
83:b9:bd:e4:e7:d9:bd:bb:9a:45:48:86:7f:12:e5:d0:ad:b1:
a9:cf:ce:74:a3:de:e9:f4:27:eb:02:d6:8d:9e:f0:cd:a1:c5:
45:90:3d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:02 2025 by rpki-client