Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/2JIOSCKb1yPGO4sxkBE8Pq2m1SI.roa
File: 2JIOSCKb1yPGO4sxkBE8Pq2m1SI.roa (raw, json)
Hash identifier: 6wJtQ966GopPabKniSig2Pa6Q5RXd/Jr37kv2JhiMao=
Subject key identifier: D8:92:0E:48:22:9B:D7:23:C6:3B:8B:31:90:11:3C:3E:AD:A6:D5:22
Certificate issuer: /CN=c32ed45fcea9c71bbef56a5325c297cafae91e6e
Certificate serial: 01941F8C3C5E15BFC6ABD3003B407C882A03
Authority key identifier: C3:2E:D4:5F:CE:A9:C7:1B:BE:F5:6A:53:25:C2:97:CA:FA:E9:1E:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wy7UX86pxxu-9WpTJcKXyvrpHm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/2JIOSCKb1yPGO4sxkBE8Pq2m1SI.roa
Signing time: Wed 01 Jan 2025 01:47:51 +0000
ROA not before: Wed 01 Jan 2025 01:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 559
IP address blocks: 129.129.0.0/16 maxlen: 16
192.33.118.0/23 maxlen: 23
192.33.120.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/wy7UX86pxxu-9WpTJcKXyvrpHm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/wy7UX86pxxu-9WpTJcKXyvrpHm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wy7UX86pxxu-9WpTJcKXyvrpHm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 19:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:3c:5e:15:bf:c6:ab:d3:00:3b:40:7c:88:2a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c32ed45fcea9c71bbef56a5325c297cafae91e6e
Validity
Not Before: Jan 1 01:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d8920e48229bd723c63b8b3190113c3eada6d522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3d:64:ed:f4:fc:20:f6:44:3c:63:98:ff:1c:
1c:93:38:74:d8:4a:02:92:18:57:30:32:3a:bc:0a:
34:85:74:79:76:de:82:60:25:ed:6a:e5:d4:d2:99:
12:a7:22:d7:fd:04:34:3a:a3:4c:1a:12:0a:91:ac:
a0:74:c9:b1:04:3c:ac:f9:18:12:f3:0d:9d:fa:f6:
80:97:56:c3:39:0d:c3:c5:db:46:96:bf:54:6e:34:
b9:74:35:e7:ec:56:e9:f4:5a:59:80:67:56:52:81:
0a:36:5a:cc:ab:f2:72:f4:8c:3d:bb:9c:b4:f1:54:
d7:27:80:71:5a:b3:d9:d7:40:15:cb:29:49:ba:ae:
02:bd:80:66:b5:e5:9d:52:ae:40:3c:b0:a5:96:01:
d3:4b:0d:03:a2:35:4b:45:01:62:22:23:8e:40:c1:
b2:5a:00:b1:f7:36:de:43:f0:1c:3a:89:d0:2c:52:
4f:9e:e4:b8:40:28:f0:12:3c:6e:cd:98:4d:fb:1e:
34:20:79:5a:94:91:2f:14:6c:01:0a:24:70:dd:1c:
2f:7a:8e:71:93:99:ac:a1:18:51:61:c7:e7:35:78:
1e:30:a3:55:c9:df:79:65:33:e0:41:93:8b:89:30:
9a:ea:08:d4:4b:f2:ec:11:5e:f5:c0:6d:e9:57:03:
c0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:92:0E:48:22:9B:D7:23:C6:3B:8B:31:90:11:3C:3E:AD:A6:D5:22
X509v3 Authority Key Identifier:
keyid:C3:2E:D4:5F:CE:A9:C7:1B:BE:F5:6A:53:25:C2:97:CA:FA:E9:1E:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wy7UX86pxxu-9WpTJcKXyvrpHm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/2JIOSCKb1yPGO4sxkBE8Pq2m1SI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/wy7UX86pxxu-9WpTJcKXyvrpHm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.129.0.0/16
192.33.118.0-192.33.127.255
Signature Algorithm: sha256WithRSAEncryption
5e:27:ea:84:b2:80:de:a7:c9:a5:d0:c3:87:c8:a4:03:7a:e9:
0f:ee:56:96:6d:a1:a3:f8:c3:dd:9b:b7:63:85:85:0d:ca:01:
f4:13:c6:f5:91:77:9e:7c:f0:d5:33:2a:e3:b7:52:1b:5b:ee:
a1:0f:31:3f:b4:ce:37:54:c0:4e:65:a2:ce:df:0c:35:ac:df:
a3:a5:11:cc:ae:38:c1:6c:9c:06:72:d4:db:90:c9:82:64:d9:
78:5c:b3:65:60:0f:98:12:2a:ca:37:66:cf:68:4e:b6:78:ba:
70:49:72:26:d2:29:08:3e:7d:2f:ac:5f:ff:a5:b7:e1:5e:89:
0a:1c:5d:44:b0:68:b3:8f:88:0e:4d:90:95:1d:31:32:1a:15:
57:f3:09:85:24:d8:ad:08:78:36:51:30:b3:2f:44:11:98:68:
44:3e:43:41:75:17:66:d0:0f:4d:ef:23:7d:38:3d:a1:f5:9b:
f8:f7:0a:b9:7e:08:02:36:0d:70:99:80:80:11:16:97:bc:d3:
cd:0f:83:e0:f0:38:87:bf:eb:16:55:09:80:e3:8e:c8:de:a2:
a6:3e:5b:26:f0:e3:14:b8:c7:4c:cd:4a:96:ef:08:b2:6e:4e:
8d:1c:31:8e:74:a1:7a:b1:3a:aa:2f:55:e0:ad:e7:e3:74:ec:
10:96:b1:8f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 11 05:26:48 2025 by rpki-client