Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/2eV3LLHue0F4_ix9uAQjG0RjeyM.roa
File: 2eV3LLHue0F4_ix9uAQjG0RjeyM.roa (raw, json)
Hash identifier: voDescMFunJFQQ5TLKb+tVFSLAofvJuHvYtHn/Yjp+c=
Subject key identifier: D9:E5:77:2C:B1:EE:7B:41:78:FE:2C:7D:B8:04:23:1B:44:63:7B:23
Certificate issuer: /CN=716842dc439836635a5c9ed6c0a495b3e6344a03
Certificate serial: 019420D5F75CE7DCA08C8924B8B92B38417E
Authority key identifier: 71:68:42:DC:43:98:36:63:5A:5C:9E:D6:C0:A4:95:B3:E6:34:4A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/2eV3LLHue0F4_ix9uAQjG0RjeyM.roa
Signing time: Wed 01 Jan 2025 07:48:00 +0000
ROA not before: Wed 01 Jan 2025 07:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61165
IP address blocks: 146.19.252.0/24 maxlen: 24
2a14:5d80::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:f7:5c:e7:dc:a0:8c:89:24:b8:b9:2b:38:41:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=716842dc439836635a5c9ed6c0a495b3e6344a03
Validity
Not Before: Jan 1 07:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9e5772cb1ee7b4178fe2c7db804231b44637b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:66:3b:c6:1f:33:c3:da:c7:13:eb:31:42:04:
0d:db:56:48:e2:39:c6:c7:a9:c5:aa:f4:9a:45:43:
2f:4a:cf:21:43:fb:23:28:79:09:7b:e2:96:d0:37:
f2:0b:a5:84:ba:61:b4:ec:57:2d:e9:42:cb:7a:8e:
1d:f0:83:07:fb:2e:dd:b6:a6:d1:e0:cb:65:42:bb:
3f:93:f6:e1:1d:41:8b:14:b6:a3:6e:95:8b:65:9d:
42:e7:62:68:a6:80:26:2a:f0:10:18:c6:be:a9:59:
7a:6b:55:08:e2:a5:3e:bf:94:f5:aa:be:f8:1c:f8:
c8:2a:0f:3f:a8:89:81:fa:43:8d:71:ea:00:10:2c:
6f:cf:76:2b:43:fc:6e:a4:ed:ae:65:44:8c:29:a7:
4f:47:7a:3c:4b:07:c8:d5:db:3a:f2:ec:51:7c:ff:
b7:d4:e5:d6:44:7b:38:eb:bb:d5:2f:c5:78:b7:83:
e7:53:b1:d5:0e:66:34:4c:e2:37:72:d7:0e:ac:f6:
93:62:c1:c1:85:30:49:38:d7:2c:0d:ca:9d:88:8f:
0c:0b:9f:d8:7c:d7:33:03:f7:a3:28:1b:b7:ee:97:
6b:f2:7d:8f:a7:b6:99:e0:a4:48:1d:90:98:25:9d:
d9:91:98:d4:c9:0f:fa:c2:c0:8d:cb:c4:ef:f4:dc:
51:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E5:77:2C:B1:EE:7B:41:78:FE:2C:7D:B8:04:23:1B:44:63:7B:23
X509v3 Authority Key Identifier:
keyid:71:68:42:DC:43:98:36:63:5A:5C:9E:D6:C0:A4:95:B3:E6:34:4A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/2eV3LLHue0F4_ix9uAQjG0RjeyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.252.0/24
IPv6:
2a14:5d80::/29
Signature Algorithm: sha256WithRSAEncryption
0c:f5:e1:4e:ad:a8:c4:93:85:bf:fa:90:f5:52:dd:f7:4d:5d:
e1:66:e9:01:dc:80:36:53:1d:b3:d1:95:76:39:36:ed:da:85:
27:3e:ab:f2:cf:fa:8d:05:6e:95:6b:f9:8e:26:ac:af:b9:c4:
f7:ce:f4:c4:82:cc:f9:57:14:9e:ee:da:6f:12:37:46:93:45:
32:bf:00:77:40:ca:1f:1e:39:dd:66:1c:de:01:09:aa:e9:ee:
76:93:1d:27:ce:ff:3a:24:65:57:af:13:e7:7a:c6:98:84:73:
82:6d:a9:91:5a:54:da:4a:68:60:86:29:3f:ac:76:38:7a:b7:
e2:03:85:be:0b:01:40:86:ff:70:34:bf:b0:d4:11:60:2d:f7:
b8:66:82:d8:53:3a:ca:95:b3:e3:31:a9:bd:f3:8c:36:71:7d:
38:e5:51:8e:4b:b2:5d:49:f0:a6:2d:d5:c8:d8:a2:5f:f1:e3:
ec:5a:f8:9d:f2:98:55:eb:50:f8:bf:24:69:27:2c:a6:cf:66:
28:ed:78:2d:f2:98:48:d0:fc:c1:96:36:f3:26:50:e5:ae:19:
99:d6:2c:f1:54:8c:1f:73:6e:4f:42:4d:39:4b:40:51:23:32:
56:55:d4:5d:97:e1:e4:02:5d:5d:1e:15:3c:9d:51:1e:1e:9a:
5c:8f:fc:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:57:03 2025 by rpki-client