Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/2kWJV5ySHmFBy_qzr4NhO3KI5wc.roa
File: 2kWJV5ySHmFBy_qzr4NhO3KI5wc.roa (raw, json)
Hash identifier: JYS4TlWi4jvBTV2k+Ckt8FzhuUVkKTbIPmoOZ158kEw=
Subject key identifier: DA:45:89:57:9C:92:1E:61:41:CB:FA:B3:AF:83:61:3B:72:88:E7:07
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 019421B25341700DBDE1D89A67F395F04C98
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/2kWJV5ySHmFBy_qzr4NhO3KI5wc.roa
Signing time: Wed 01 Jan 2025 11:48:42 +0000
ROA not before: Wed 01 Jan 2025 11:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5480
IP address blocks: 195.208.224.0/22 maxlen: 22
195.208.232.0/23 maxlen: 23
195.208.237.0/24 maxlen: 24
195.208.239.0/24 maxlen: 24
195.208.240.0/23 maxlen: 23
195.208.243.0/24 maxlen: 24
195.208.244.0/22 maxlen: 22
195.208.248.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:53:41:70:0d:bd:e1:d8:9a:67:f3:95:f0:4c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 11:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da4589579c921e6141cbfab3af83613b7288e707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c0:6e:4b:8c:6a:b9:90:6d:18:ae:9b:53:30:
c5:f7:91:c0:72:13:37:72:b3:3a:36:cb:06:b2:ea:
5b:fe:95:7d:58:13:bd:e9:66:08:09:38:55:67:4a:
e3:ed:b2:2c:b7:76:ca:9e:a5:f2:1d:44:ac:87:b2:
3f:75:40:9a:13:5e:9c:30:2f:73:08:72:00:d1:c1:
f0:2a:21:a7:ca:e3:53:86:8d:a2:65:4c:0e:e1:1c:
0f:7f:81:e7:3f:0e:38:03:1a:d1:6b:3e:38:74:eb:
02:74:06:b3:ea:75:9c:16:8f:ec:c5:03:4d:1d:f5:
bc:01:7b:84:57:b4:a0:15:00:c3:f6:bf:93:71:67:
1c:f9:75:ac:c9:89:39:93:91:9d:30:93:5d:7c:7f:
a6:c2:da:96:16:17:07:59:ec:c5:df:2f:20:93:08:
c3:bd:c0:0f:1c:5a:70:26:a2:63:a8:f5:f5:28:fd:
ec:6f:e4:11:4a:fe:e0:70:22:45:fd:73:0e:29:d7:
3f:f1:27:de:a8:77:e9:30:db:ab:05:3e:47:0a:d4:
9a:4c:bc:e0:47:dc:df:bf:43:bc:d4:e1:4c:27:d1:
84:0a:ed:d2:66:55:22:b3:1f:97:d6:b7:f5:67:36:
8b:f5:ab:cd:35:3f:f6:7a:9b:b8:f0:51:48:c6:34:
db:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:45:89:57:9C:92:1E:61:41:CB:FA:B3:AF:83:61:3B:72:88:E7:07
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/2kWJV5ySHmFBy_qzr4NhO3KI5wc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.208.224.0/22
195.208.232.0/23
195.208.237.0/24
195.208.239.0-195.208.241.255
195.208.243.0-195.208.255.255
Signature Algorithm: sha256WithRSAEncryption
30:78:28:e5:d8:df:75:90:ed:1a:12:fa:87:3b:91:e9:40:7b:
f7:7d:9f:e2:50:f1:37:58:ac:e0:97:47:ad:b6:ae:40:ff:e2:
d1:33:26:31:a3:e6:61:4c:e7:95:15:da:3b:70:48:50:01:95:
84:91:af:52:ef:58:09:e4:b5:a8:9a:17:44:e0:53:1b:f7:d6:
29:7e:d4:e8:33:12:0e:9e:ba:7a:0a:78:6c:e9:59:3a:f6:e6:
b7:ba:39:8e:6a:7d:2c:86:c5:77:3f:91:99:43:7c:51:d1:09:
1f:ed:1d:28:26:35:d2:31:b1:ca:df:bd:73:58:8c:10:df:c2:
70:c2:d5:de:08:c7:5e:52:1d:a8:e6:5d:f4:fb:d5:84:31:ed:
3f:bf:4e:47:4f:86:b1:1e:fa:a7:74:2b:15:66:6f:2a:99:d2:
a7:27:44:24:4f:d2:dc:a1:c0:22:dd:91:58:fc:cd:80:81:77:
e1:e3:78:2f:a2:54:5c:01:42:1a:8d:c9:ac:69:0d:16:e0:7f:
7e:cc:21:17:88:87:d7:1c:86:30:a5:4e:4e:78:5f:fe:62:6c:
57:f7:61:9f:7a:6e:d9:8f:e2:96:36:b6:76:b4:e9:11:82:fd:
92:5f:90:72:e4:be:8c:ae:5c:67:82:8e:a2:ef:b6:db:fe:62:
4a:b3:5e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 18:27:41 2025 by rpki-client