Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/2PiS2J9-ItXkVvnefA7xUJmmHco.roa
File: 2PiS2J9-ItXkVvnefA7xUJmmHco.roa (raw, json)
Hash identifier: fm4Z7vvzHDMokg8lvCFW4L0Rre6/U9BEbHKtNsNHxxs=
Subject key identifier: D8:F8:92:D8:9F:7E:22:D5:E4:56:F9:DE:7C:0E:F1:50:99:A6:1D:CA
Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Certificate serial: 019426D9542501E50733DCBFF6EB37400D8E
Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/2PiS2J9-ItXkVvnefA7xUJmmHco.roa
Signing time: Thu 02 Jan 2025 11:49:24 +0000
ROA not before: Thu 02 Jan 2025 11:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211590
IP address blocks: 89.104.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:54:25:01:e5:07:33:dc:bf:f6:eb:37:40:0d:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Validity
Not Before: Jan 2 11:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d8f892d89f7e22d5e456f9de7c0ef15099a61dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c9:05:99:73:49:3c:2f:91:ab:17:be:37:98:
65:ea:75:27:c9:61:6e:a8:54:cf:3f:2c:e4:94:70:
4c:e4:c0:7c:91:f8:1c:ac:ac:b2:a3:66:2f:ec:dd:
fe:c3:90:8b:26:27:24:5e:fa:ae:11:4b:88:40:48:
7f:cc:d6:20:a7:f7:c2:9d:ab:1e:f3:b0:8a:ff:c0:
d5:5d:1c:04:82:c8:d5:04:d9:d3:5c:d7:26:d9:23:
6f:6c:32:b3:a0:d9:19:db:c8:6c:e9:2b:98:e0:cd:
e5:d0:b2:d7:de:99:9a:4b:6f:fa:ac:09:6e:2a:25:
25:4a:93:c5:83:85:58:c8:80:c9:1d:5b:5d:48:d8:
cb:e5:9a:7c:c8:bc:1b:46:fb:6c:a8:51:f1:00:d6:
61:6b:c2:0e:39:5a:46:f1:fd:66:b9:d9:8c:00:7b:
f8:39:9d:77:84:8c:ce:87:21:11:fa:d3:9c:ea:c1:
36:17:ee:95:47:7a:13:70:6b:d5:97:5d:9b:49:c9:
9d:ec:d7:16:26:79:6c:dd:e1:94:ae:9d:ac:40:6c:
f0:85:b7:fa:07:ef:bc:70:cf:ba:cd:bf:d9:e8:28:
07:86:e2:0a:7d:a6:05:47:38:e9:d6:24:fb:ca:2f:
d7:20:9e:3e:50:28:9c:0b:31:4f:27:e2:aa:67:f2:
e4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F8:92:D8:9F:7E:22:D5:E4:56:F9:DE:7C:0E:F1:50:99:A6:1D:CA
X509v3 Authority Key Identifier:
keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/2PiS2J9-ItXkVvnefA7xUJmmHco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.104.126.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:ad:40:95:0d:28:fc:2f:bd:8e:09:b5:8a:26:21:9f:85:dc:
df:1d:23:60:b3:01:38:2c:9f:7d:65:f6:e4:6e:ae:24:1c:da:
21:4d:02:8b:b1:03:06:6d:e5:c8:ad:da:5a:70:c4:15:e4:5f:
cc:25:cf:dd:ba:22:39:d3:4d:90:56:2b:88:3f:da:5e:eb:4f:
3f:83:de:aa:49:51:99:3f:62:18:13:76:ef:fd:d7:02:2d:7b:
e1:97:34:45:c8:6b:f0:2c:b1:45:c6:e1:93:87:f1:5f:39:d4:
57:d9:07:36:8a:29:1d:88:b9:13:66:66:32:3c:60:78:27:3c:
d4:94:20:68:9f:15:f7:29:dd:90:4b:46:6d:50:18:bf:3f:ac:
45:24:e7:fe:85:00:45:d2:86:26:db:1e:d5:c4:8e:d0:94:95:
a5:44:49:b2:ac:5e:d3:06:1a:4c:6b:80:d8:90:f3:c2:33:cf:
7d:46:b2:6b:0a:44:bb:a3:5c:8b:88:a9:cc:fe:fe:70:19:9e:
e6:8f:90:8e:f7:ad:df:04:a0:b6:ea:ae:1c:eb:65:85:09:83:
18:8f:d7:cb:d4:43:16:85:50:00:b3:f2:14:61:88:d0:69:b9:
d4:26:be:ef:59:93:b3:32:38:5a:e7:e2:8a:3d:e6:6a:46:4d:
82:a4:46:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:18:51 2025 by rpki-client