Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/0SO2bdDSFS2jl_PJgU_l_j97XeY.roa
File: 0SO2bdDSFS2jl_PJgU_l_j97XeY.roa (raw, json)
Hash identifier: b5x4PF/4pc6ecIpAqqWDUvsSnbLqRaDPB8YvR8rbRKg=
Subject key identifier: D1:23:B6:6D:D0:D2:15:2D:A3:97:F3:C9:81:4F:E5:FE:3F:7B:5D:E6
Certificate issuer: /CN=ebb016f46de2db5cc3116599ee871c76c2c834c6
Certificate serial: 019420D60DCB780394FC4D936AF6B5880E92
Authority key identifier: EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/0SO2bdDSFS2jl_PJgU_l_j97XeY.roa
Signing time: Wed 01 Jan 2025 07:48:06 +0000
ROA not before: Wed 01 Jan 2025 07:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209102
IP address blocks: 2.56.128.0/22 maxlen: 22
2.56.128.0/24 maxlen: 24
2.56.129.0/24 maxlen: 24
2.56.130.0/24 maxlen: 24
2.56.131.0/24 maxlen: 24
2a09:c3c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:0d:cb:78:03:94:fc:4d:93:6a:f6:b5:88:0e:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb016f46de2db5cc3116599ee871c76c2c834c6
Validity
Not Before: Jan 1 07:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d123b66dd0d2152da397f3c9814fe5fe3f7b5de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:48:30:0c:86:54:81:c6:e4:6a:16:ec:3a:04:
29:66:12:27:37:ef:0f:1c:98:e1:61:56:68:2c:c6:
4e:6f:4d:6e:00:5a:78:44:db:fc:68:0c:bf:c9:2c:
3e:dc:43:2b:f5:69:1d:68:5c:d7:4c:b9:bc:0a:93:
40:0b:fd:bf:e3:72:ca:39:96:0d:21:f6:13:53:11:
8e:7d:94:50:2f:66:61:6d:e3:f8:2e:b0:86:22:e8:
74:5a:6d:77:3f:cf:18:56:b7:a5:8e:0d:ec:68:15:
51:02:59:5d:8a:78:24:d1:63:6f:8a:0c:d5:10:a9:
37:d5:a2:8d:3f:f7:7e:3c:ec:c5:0d:ef:96:41:6c:
05:f7:50:22:b2:b5:92:66:b7:1f:17:17:a3:80:64:
6b:9a:10:c9:37:ef:71:d3:8e:9d:32:69:85:55:62:
a5:ae:2c:f7:3e:2e:e8:f9:26:e5:51:5e:8d:f6:d9:
f6:a7:5a:75:d9:34:01:ab:22:0f:e3:22:55:92:0a:
60:3b:0c:9c:de:2b:1a:e3:a3:e6:4d:05:a0:0f:79:
6f:f2:82:15:24:d4:aa:e0:f7:76:00:ee:aa:f0:5f:
fc:78:05:39:48:7a:e4:ca:87:f0:ae:61:82:31:26:
78:0c:6f:12:25:79:1b:f4:f8:50:4a:8b:d7:be:2c:
59:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:23:B6:6D:D0:D2:15:2D:A3:97:F3:C9:81:4F:E5:FE:3F:7B:5D:E6
X509v3 Authority Key Identifier:
keyid:EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/0SO2bdDSFS2jl_PJgU_l_j97XeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.128.0/22
IPv6:
2a09:c3c0::/29
Signature Algorithm: sha256WithRSAEncryption
0d:25:e2:92:c4:29:bb:a3:8a:f8:f7:e4:fa:3e:b7:ce:ff:a7:
a5:ec:89:53:27:0a:2b:1d:d1:2f:d8:b5:5f:52:27:51:63:08:
c2:95:f3:12:e8:30:d0:1d:9a:4f:2d:4e:eb:74:50:18:37:b7:
ed:58:06:68:86:f9:10:3d:08:97:04:f1:4e:f7:12:da:ac:47:
7b:1e:2b:ce:8f:7e:14:38:80:22:b5:d0:43:33:3e:ea:81:51:
d2:21:24:f8:9c:78:e1:9b:29:3d:59:7c:40:8a:e1:cd:89:2a:
5a:49:c1:5e:89:e9:68:be:70:31:6a:21:ba:bf:91:7a:50:d5:
f8:98:f7:db:ec:0e:0c:d3:49:32:d8:77:97:f5:cd:19:f9:5b:
e5:ef:da:bf:c1:e7:47:ad:5c:52:d7:ce:7a:cc:65:9d:08:75:
b5:d9:ca:6a:04:f1:f7:c0:ac:27:81:d3:ba:0b:8e:71:62:c3:
bb:c3:8f:ec:9c:e2:a3:06:5d:e3:2b:39:50:c1:b7:8d:2f:73:
e9:f9:ba:86:23:26:20:f9:30:3c:0a:a5:1c:d1:06:50:b6:82:
36:c5:18:32:b0:16:67:73:c3:c6:d1:80:02:8f:40:9a:fb:c2:
cb:1b:5d:0d:20:6f:f5:6e:4a:9b:ab:08:3d:ec:97:44:71:0b:
dd:81:ce:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:11:49 2025 by rpki-client