Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/2V2wgHU2PI3brwoPOMDaDc7IkC4.roa
File: 2V2wgHU2PI3brwoPOMDaDc7IkC4.roa (raw, json)
Hash identifier: 5qFS24zNGXVe6S2Vcqz/MzGu4AiLpsxGOww3SFLkJW8=
Subject key identifier: D9:5D:B0:80:75:36:3C:8D:DB:AF:0A:0F:38:C0:DA:0D:CE:C8:90:2E
Certificate issuer: /CN=39ce4c0abe2785d46a5571852170370423b5c59a
Certificate serial: 019426D9B5220C2B50650D27F6B929C8DA9E
Authority key identifier: 39:CE:4C:0A:BE:27:85:D4:6A:55:71:85:21:70:37:04:23:B5:C5:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/2V2wgHU2PI3brwoPOMDaDc7IkC4.roa
Signing time: Thu 02 Jan 2025 11:49:49 +0000
ROA not before: Thu 02 Jan 2025 11:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206276
IP address blocks: 91.103.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:b5:22:0c:2b:50:65:0d:27:f6:b9:29:c8:da:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ce4c0abe2785d46a5571852170370423b5c59a
Validity
Not Before: Jan 2 11:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d95db08075363c8ddbaf0a0f38c0da0dcec8902e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:da:f0:7a:41:e7:76:a6:f6:37:98:2f:47:5b:
d5:ce:91:5e:88:1a:39:ee:6f:4d:9d:b0:99:11:46:
16:af:58:a3:fd:bd:6a:86:fb:e7:a0:4f:70:54:0b:
0e:de:8d:70:bf:18:97:b2:34:f9:b1:a3:85:85:10:
f1:94:d8:86:28:8c:ec:aa:73:7f:85:d2:d5:1e:62:
86:10:c6:bf:86:7e:03:9f:60:43:77:fb:0b:f4:4a:
9d:00:0b:94:08:40:b3:03:a0:3c:3a:56:0a:a6:95:
e1:6f:05:50:86:50:67:03:c3:33:de:30:ce:5b:72:
8e:97:dd:2c:fd:2f:7d:42:b8:42:b3:78:8c:27:8c:
78:9f:13:83:e9:b5:6b:ba:ff:f1:94:42:c5:c9:50:
5d:d8:74:fd:67:53:41:83:79:d3:0c:67:08:25:d8:
73:90:2e:0c:8c:da:e4:4d:9e:ad:e6:b2:99:d5:1c:
fc:1a:8d:c9:c4:32:71:ab:49:d8:4e:e3:a8:49:c4:
3e:2a:61:14:38:e2:4a:31:7c:9b:ef:48:c4:cc:57:
18:aa:ed:3b:2d:a5:65:d5:22:84:ec:df:99:b7:90:
16:c9:df:5d:f4:6c:e2:0e:3e:78:ee:e4:af:58:cf:
db:e8:87:89:09:df:a4:8f:82:2b:3c:62:d1:21:98:
b6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:5D:B0:80:75:36:3C:8D:DB:AF:0A:0F:38:C0:DA:0D:CE:C8:90:2E
X509v3 Authority Key Identifier:
keyid:39:CE:4C:0A:BE:27:85:D4:6A:55:71:85:21:70:37:04:23:B5:C5:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/2V2wgHU2PI3brwoPOMDaDc7IkC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.151.0/24
Signature Algorithm: sha256WithRSAEncryption
02:55:81:12:1e:2c:d1:c7:63:be:1d:0a:a3:bb:98:47:5a:eb:
94:c5:17:cd:9b:6a:bf:6f:3a:ff:5e:b8:f8:1d:bf:85:33:b6:
d0:c1:3d:a5:f0:f3:19:48:05:cd:64:c5:b8:c5:cf:b0:4f:e2:
89:db:49:74:38:af:61:d1:b6:19:e9:c5:74:ed:e9:66:1b:f6:
5e:fd:da:de:46:8d:62:70:7a:45:7c:c1:d4:ec:2e:a5:68:f3:
80:1e:c7:10:94:4b:ca:ec:e3:93:20:fe:96:c2:11:da:13:aa:
bc:6f:9b:56:44:40:d4:1a:45:46:e4:78:f0:d7:17:cb:03:44:
64:86:a0:8f:94:7b:35:92:6f:97:3b:16:a3:56:de:49:04:49:
9a:c6:bf:e1:ee:ea:f5:3d:a1:f3:63:29:0b:6e:06:84:21:00:
54:25:1a:cf:d5:81:91:58:84:7a:ba:f3:9a:13:a7:c4:83:92:
f4:f3:98:2e:e3:96:b1:05:07:ed:25:c2:25:f0:62:9b:68:2c:
5b:8f:60:b9:68:e8:93:03:1c:c2:c3:d7:1a:e4:b3:bd:14:12:
83:f5:f8:cf:04:45:6f:c5:a2:93:5c:3f:fb:33:cf:9d:cc:2c:
18:70:c9:37:1c:c3:2d:72:9c:59:72:e7:6a:5a:a9:9b:42:35:
8b:61:63:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:11 2025 by rpki-client