Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/2vXIH18Rue3RrYkzroef5X-ZYy8.roa
File: 2vXIH18Rue3RrYkzroef5X-ZYy8.roa (raw, json)
Hash identifier: J19pgLm4GTRYsIukNk/OXDlFP5oFxlVa4nOWyYr+uA8=
Subject key identifier: DA:F5:C8:1F:5F:11:B9:ED:D1:AD:89:33:AE:87:9F:E5:7F:99:63:2F
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01942220289880A5D73586CC5DDE9D14E0AA
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/2vXIH18Rue3RrYkzroef5X-ZYy8.roa
Signing time: Wed 01 Jan 2025 13:48:40 +0000
ROA not before: Wed 01 Jan 2025 13:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 140736
IP address blocks: 91.188.204.0/22 maxlen: 24
185.255.36.0/22 maxlen: 24
188.240.224.0/22 maxlen: 24
193.23.128.0/22 maxlen: 24
213.232.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:28:98:80:a5:d7:35:86:cc:5d:de:9d:14:e0:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 13:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=daf5c81f5f11b9edd1ad8933ae879fe57f99632f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:84:c5:6b:70:cb:6e:65:d5:5f:2a:2d:6c:d3:
01:c5:36:ba:9e:69:17:29:68:f2:20:1f:57:69:a7:
05:a0:c1:27:4a:92:c5:28:29:79:bc:a9:85:3b:f4:
fd:1c:2c:0a:c6:de:09:d3:87:41:d4:a7:3f:60:df:
7b:04:d4:32:d4:53:5b:ca:ef:b8:32:ab:d6:b6:de:
34:17:1f:60:ff:b6:22:69:0a:c0:eb:2c:8e:93:63:
a0:a8:73:04:56:7b:3f:85:7e:2f:ea:ac:ce:eb:33:
66:6b:fc:32:9f:66:2a:dc:5f:51:90:71:0d:69:31:
64:0d:9e:fe:35:42:47:2a:7c:25:20:e2:42:74:69:
4f:81:67:14:d9:e3:b4:0c:ef:70:f9:8a:71:13:6c:
ec:49:22:c6:e2:57:9e:83:15:be:04:30:39:42:8e:
32:a6:a3:fc:1d:a0:75:ba:45:a9:77:af:58:8f:b8:
4b:33:d8:da:3e:7e:fe:25:94:ad:51:52:0b:62:8b:
f1:1c:59:be:56:34:bc:49:81:64:fd:c5:a0:8b:36:
ef:39:47:2f:d5:80:66:cc:64:fa:53:fc:93:7e:c7:
b3:bc:87:ef:29:a4:60:63:dd:46:4f:74:b4:25:6b:
75:45:45:08:51:6b:c4:a5:c2:47:c1:8d:8b:26:07:
90:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F5:C8:1F:5F:11:B9:ED:D1:AD:89:33:AE:87:9F:E5:7F:99:63:2F
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/2vXIH18Rue3RrYkzroef5X-ZYy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.188.204.0/22
185.255.36.0/22
188.240.224.0/22
193.23.128.0/22
213.232.92.0/22
Signature Algorithm: sha256WithRSAEncryption
82:1e:cd:54:4a:3c:24:7d:06:38:80:47:d7:24:16:a4:51:bf:
f2:60:69:14:e8:02:43:51:e4:4e:6f:58:8b:42:a0:1a:46:b5:
6b:47:9f:64:11:30:1c:be:eb:ac:8f:20:9f:50:77:1a:4c:7d:
7f:6d:cf:bc:e5:57:d9:6e:fc:de:51:3b:18:05:fd:a4:4a:eb:
52:11:59:03:1d:e5:c5:b1:21:47:e6:bb:a6:68:4f:e5:01:8b:
ab:e8:5f:e6:a8:41:3b:c2:43:b1:8e:3e:79:cb:b9:04:0b:b0:
81:60:ed:07:25:3c:cd:39:bf:3e:6d:0b:35:45:4f:1a:c0:06:
84:92:c7:66:1f:8b:58:83:2a:77:5a:4d:75:2d:2d:1f:05:89:
4b:b6:07:38:35:cf:51:be:53:3d:ae:d7:cc:5d:7c:1f:61:16:
d5:28:2b:a6:6b:ed:3c:a4:a7:4b:e3:ba:bc:39:f6:44:d4:95:
cc:b1:1a:39:87:ef:6f:a6:f9:81:85:b8:92:ab:7a:d1:e0:55:
a6:37:85:cd:86:91:37:3d:9a:b7:be:ed:fd:f4:8c:12:df:7b:
ef:c9:32:ef:15:ff:57:7b:a3:69:fe:c7:67:d9:6a:07:69:04:
b3:6b:83:65:71:53:bd:39:86:dd:92:15:2d:ae:43:0c:32:11:
1d:29:ec:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:52:01 2025 by rpki-client