Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/2jALWXrUHdgjUX5zlhdpK6sSdlM.roa
File: 2jALWXrUHdgjUX5zlhdpK6sSdlM.roa (raw, json)
Hash identifier: 8RfTZjDifCbecbNH8/rM1djQ0yiQ+ZD8IMgODoKAdaE=
Subject key identifier: DA:30:0B:59:7A:D4:1D:D8:23:51:7E:73:96:17:69:2B:AB:12:76:53
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019421B23AA959B7E1F9EF1ECE8E5993654D
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/2jALWXrUHdgjUX5zlhdpK6sSdlM.roa
Signing time: Wed 01 Jan 2025 11:48:36 +0000
ROA not before: Wed 01 Jan 2025 11:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48925
IP address blocks: 45.8.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:3a:a9:59:b7:e1:f9:ef:1e:ce:8e:59:93:65:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 11:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da300b597ad41dd823517e739617692bab127653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cd:0d:df:d5:6c:e2:51:3f:be:f1:4f:9f:d2:
e1:91:06:ae:11:bd:2c:78:9b:e1:2f:15:c1:79:30:
63:87:68:3b:93:5b:4f:b7:ba:bd:fd:3c:60:9d:8d:
c8:34:82:38:b6:ee:15:b1:b2:81:cd:a6:a9:00:db:
a7:e9:3b:9d:8c:03:aa:10:87:17:c5:9c:3e:10:3d:
a3:9c:2c:af:e8:de:21:a3:35:65:c0:9b:5d:62:00:
9a:58:1f:e9:04:93:e5:a7:73:57:e7:16:52:af:75:
57:33:06:3c:3d:16:46:46:6b:22:7f:ae:d4:99:98:
68:14:bd:9c:77:01:0e:ed:f0:85:a2:5e:60:6b:c6:
0c:3a:7f:40:af:aa:eb:ba:07:15:98:cb:4a:e7:f8:
1b:d3:0c:39:16:f9:a0:b4:f8:5d:49:c5:fe:2f:88:
3c:8b:8a:a7:be:b8:83:83:5a:ce:2e:85:d0:ab:1e:
c1:fd:12:8b:c6:c7:0e:09:1d:9d:a1:4f:99:d7:fa:
aa:c2:53:57:11:3a:b2:d9:9a:dc:f7:fc:e5:1c:62:
29:5f:cf:d0:0f:98:9a:cd:5e:83:77:a3:2b:26:f2:
89:4a:63:64:ad:1b:df:64:a0:de:b0:e2:33:62:2e:
ee:4a:f2:1a:af:43:43:b3:0c:98:e6:fb:48:14:25:
68:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:30:0B:59:7A:D4:1D:D8:23:51:7E:73:96:17:69:2B:AB:12:76:53
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/2jALWXrUHdgjUX5zlhdpK6sSdlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.187.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:32:aa:f8:64:56:0e:a6:f5:98:1e:21:a8:87:0e:3c:55:26:
64:0c:58:a6:44:91:99:24:c5:0a:08:18:75:4b:54:2c:a1:6d:
b5:d3:83:70:73:74:cc:a5:e9:34:b9:ad:0d:3c:53:8f:6f:30:
7b:88:ff:7c:47:eb:03:4e:30:c5:5b:f6:95:5d:19:d2:60:df:
68:14:d7:fc:7b:51:fa:b2:23:51:3b:5b:d4:a5:40:cf:e1:c5:
dc:5c:47:fd:96:8e:7e:3e:cf:90:c0:da:6b:2d:14:f2:68:46:
bb:f6:f1:8e:dc:8a:82:97:b0:d1:34:3f:06:b0:90:2b:73:19:
9e:06:62:15:d9:c1:e5:bc:c1:2d:cd:c7:fc:57:54:a2:03:0a:
cc:d5:fc:4e:a2:17:3c:b4:05:0c:5d:65:41:59:23:dd:bc:65:
ae:55:b4:22:61:ef:41:4a:04:55:28:82:c6:28:45:fe:76:d9:
27:c6:41:44:6e:1e:8e:0a:7a:00:b5:bf:00:2c:a3:b1:81:7d:
f6:da:3f:4e:33:ba:8e:66:8f:11:34:a3:70:cd:24:77:89:1a:
c1:5c:b0:bb:95:2f:e7:44:17:11:79:fc:1e:ff:72:91:d7:34:
6e:19:80:b2:c7:54:0d:20:eb:28:71:2a:17:b8:6f:d7:26:a6:
73:83:dd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:38:30 2025 by rpki-client