Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/6f598d-a5c5-4c99-a1f0-548263eb6fb4/1/2bWZH-siKv9yamXLxhMW4gBTBXs.roa
File: 2bWZH-siKv9yamXLxhMW4gBTBXs.roa (raw, json)
Hash identifier: xWCLh4hIiubp753R08bjE0GaWYotTbdn6hf3WZPct+A=
Subject key identifier: D9:B5:99:1F:EB:22:2A:FF:72:6A:65:CB:C6:13:16:E2:00:53:05:7B
Certificate issuer: /CN=7a0a06564d3c717d2d6daa1e833c495976b0bada
Certificate serial: 019420D62C8AE17FB856D9EE2DF72A01BE61
Authority key identifier: 7A:0A:06:56:4D:3C:71:7D:2D:6D:AA:1E:83:3C:49:59:76:B0:BA:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egoGVk08cX0tbaoegzxJWXawuto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/6f598d-a5c5-4c99-a1f0-548263eb6fb4/1/2bWZH-siKv9yamXLxhMW4gBTBXs.roa
Signing time: Wed 01 Jan 2025 07:48:14 +0000
ROA not before: Wed 01 Jan 2025 07:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15404
IP address blocks: 149.249.0.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/6f598d-a5c5-4c99-a1f0-548263eb6fb4/1/egoGVk08cX0tbaoegzxJWXawuto.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/6f598d-a5c5-4c99-a1f0-548263eb6fb4/1/egoGVk08cX0tbaoegzxJWXawuto.mft
rsync://rpki.ripe.net/repository/DEFAULT/egoGVk08cX0tbaoegzxJWXawuto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:2c:8a:e1:7f:b8:56:d9:ee:2d:f7:2a:01:be:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a0a06564d3c717d2d6daa1e833c495976b0bada
Validity
Not Before: Jan 1 07:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9b5991feb222aff726a65cbc61316e20053057b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:64:7e:58:71:7b:4f:b3:b8:7a:ea:5e:ed:ed:
c2:b2:f2:c6:cb:0b:8f:6f:bd:13:f1:d1:a1:41:53:
5f:00:76:c9:ba:0e:e9:d6:21:79:dc:e6:74:ef:3a:
37:f1:a8:cf:dd:4e:c8:21:a3:a9:2e:d7:fa:e4:ab:
b2:50:56:bd:ee:bb:5b:f2:e6:d7:61:4a:31:85:9b:
c9:7e:dd:87:21:db:d3:23:d2:ab:bd:85:be:20:62:
5f:70:05:5d:57:51:1b:4c:83:69:56:cd:b1:a4:f9:
30:dd:59:88:ff:02:e4:17:65:d7:da:04:b9:9d:05:
14:90:68:df:14:bf:54:eb:7b:fc:76:22:96:f1:2b:
4c:e3:d2:e1:44:a8:a1:62:f1:e1:c7:85:ab:75:90:
d5:41:ce:08:9f:24:ea:da:c9:a8:39:d8:f2:4f:ab:
46:13:f6:a1:79:2a:64:47:7b:a3:a8:ec:5b:63:62:
50:d5:76:ff:04:31:8f:53:66:5b:f9:d7:36:ed:ee:
55:ab:a4:07:d3:83:7e:0a:44:d1:0e:ed:7c:41:28:
21:15:84:11:62:a9:7b:13:85:da:0e:7b:ff:1e:4e:
3c:ae:e5:d1:5a:f7:77:0e:36:35:d5:64:63:7e:ef:
68:74:1a:2e:d3:48:2a:2a:07:1a:07:d5:f6:81:74:
bf:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B5:99:1F:EB:22:2A:FF:72:6A:65:CB:C6:13:16:E2:00:53:05:7B
X509v3 Authority Key Identifier:
keyid:7A:0A:06:56:4D:3C:71:7D:2D:6D:AA:1E:83:3C:49:59:76:B0:BA:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egoGVk08cX0tbaoegzxJWXawuto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6f598d-a5c5-4c99-a1f0-548263eb6fb4/1/2bWZH-siKv9yamXLxhMW4gBTBXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6f598d-a5c5-4c99-a1f0-548263eb6fb4/1/egoGVk08cX0tbaoegzxJWXawuto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.249.0.0/21
Signature Algorithm: sha256WithRSAEncryption
59:70:86:0b:5f:e5:96:3d:63:dd:2e:90:ef:5f:2c:38:a6:41:
ce:cd:95:1c:00:fe:2d:57:b3:d1:a5:55:62:2e:8d:c0:8a:12:
76:63:8e:50:44:85:b6:6b:34:ba:8d:6f:db:c1:63:4c:08:75:
19:4e:b7:6c:4d:ae:33:08:c0:c1:78:86:a0:c1:c0:8c:e4:0c:
61:bc:69:8d:b6:ae:24:0c:04:19:ad:a2:aa:2d:87:fc:51:48:
d7:d9:0d:8b:56:79:ee:5a:4d:ff:60:44:02:e0:bc:b8:46:d7:
71:64:4b:76:6f:8f:b0:53:a2:0c:30:e9:d7:10:80:c8:33:17:
56:72:7c:3f:67:10:d5:fb:a6:7f:00:d1:28:10:7a:02:d3:93:
5c:d8:f3:13:cc:95:dd:fa:eb:26:bd:f1:8e:04:c6:ed:81:48:
10:eb:07:6c:ad:f7:91:80:4d:26:6e:e8:e7:b9:be:13:09:be:
98:4f:6d:33:2f:35:37:d8:34:06:77:1f:ef:7c:d2:1f:d0:af:
90:c5:50:e7:8f:97:c6:b6:f2:98:0b:0e:0d:79:6e:08:45:5a:
67:e7:2a:a6:6b:be:c6:06:b5:5d:0f:21:d5:61:a7:d0:d4:68:
be:d8:67:0f:0f:19:5c:23:24:17:46:ad:d6:49:29:b2:4d:e9:
f4:de:db:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:52:51 2025 by rpki-client