Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/2I0oOXYbhXHZylyf-kFn5MY1Bow.roa
File: 2I0oOXYbhXHZylyf-kFn5MY1Bow.roa (raw, json)
Hash identifier: aSJseF9prqWznLCSm3ToATrOmfQLXB1xxYnDC7T9Z2c=
Subject key identifier: D8:8D:28:39:76:1B:85:71:D9:CA:5C:9F:FA:41:67:E4:C6:35:06:8C
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 0194266BC5BE0B48A18A09FE67280C741B02
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/2I0oOXYbhXHZylyf-kFn5MY1Bow.roa
Signing time: Thu 02 Jan 2025 09:49:44 +0000
ROA not before: Thu 02 Jan 2025 09:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33917
IP address blocks: 193.80.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:c5:be:0b:48:a1:8a:09:fe:67:28:0c:74:1b:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Jan 2 09:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d88d2839761b8571d9ca5c9ffa4167e4c635068c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:53:5c:d7:05:a9:bf:0f:5a:7f:82:40:2c:43:
c4:ed:22:2c:c0:2d:47:93:13:66:d9:ca:ac:ec:30:
62:9d:3a:95:fb:b9:31:09:33:f9:24:ae:88:09:69:
87:40:d5:9d:7c:75:1b:1f:77:e2:14:51:01:cc:77:
88:7d:f4:a7:4e:ac:2f:63:0e:d0:90:70:57:31:9f:
5f:14:3c:1b:a3:44:c7:cf:50:42:b7:0a:0a:52:72:
90:25:8e:d5:ed:b2:8e:30:d6:86:8f:b9:9c:68:c8:
c1:87:5b:46:b2:b8:0e:0d:e8:88:b9:58:1d:d6:48:
14:a3:bc:e5:5e:d5:c5:59:a3:8c:58:3e:7f:68:d4:
98:2a:b8:8a:d8:66:d6:15:7d:b0:2c:b6:5d:87:6e:
83:e6:bd:a1:f4:55:98:21:3a:d4:51:86:9c:79:e0:
7b:13:28:29:01:96:ba:55:f0:8c:11:83:c0:6d:83:
f6:34:f4:24:4d:38:27:b2:cf:c6:c6:cb:59:a6:c3:
5a:b7:4c:1f:23:01:aa:26:34:fc:5e:42:33:1e:05:
95:4f:e8:13:f8:8c:b3:15:d9:5b:32:ef:4d:5d:f5:
0a:e4:3a:73:97:5b:3f:7f:f6:0b:bf:8b:dd:3d:a4:
ff:35:b0:cf:0d:6e:25:99:73:b5:45:9a:c1:42:5e:
5a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:8D:28:39:76:1B:85:71:D9:CA:5C:9F:FA:41:67:E4:C6:35:06:8C
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/2I0oOXYbhXHZylyf-kFn5MY1Bow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.80.191.0/24
Signature Algorithm: sha256WithRSAEncryption
72:ca:0a:90:09:af:1f:4e:04:28:c5:22:7f:d7:a4:16:e1:be:
ac:0b:78:f2:34:64:f5:a7:67:fb:11:34:14:ee:0d:aa:2d:4c:
77:fc:8c:94:2e:5c:ac:f8:9a:87:38:a8:de:c0:ca:af:24:81:
28:43:c6:8b:0e:af:bf:1e:cd:13:22:f9:00:ee:07:c8:ab:cb:
08:89:7d:b2:8f:75:16:b9:06:75:f4:8d:21:a4:53:2c:41:d8:
65:e8:7b:43:0a:51:31:27:9b:da:89:b3:d9:a9:12:8f:72:b3:
c8:6b:d0:c5:d6:88:85:f7:ca:85:29:97:56:69:f4:6a:0c:c8:
70:39:07:9d:f7:bc:bc:31:cd:93:c6:54:15:53:fb:e0:4c:ac:
f9:27:d2:9a:08:f2:5d:7d:0c:ae:93:12:85:e9:08:46:19:a3:
37:62:7a:0c:61:7a:d6:52:1a:c3:19:ed:a8:56:18:93:fe:4e:
99:60:ce:43:7f:4c:c0:69:16:21:fe:19:2e:95:8d:24:05:7e:
08:39:29:68:39:c9:f5:99:cc:44:e6:93:4d:67:6b:cf:34:90:
22:c9:13:9f:bf:b5:21:58:ee:78:72:46:30:b9:1d:7c:60:56:
4c:a4:1b:ec:ff:d7:4c:72:c8:66:59:81:6b:7a:92:53:1b:ba:
15:d3:41:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:53:41 2025 by rpki-client