Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2ScandQxey4X_6VF8DLG8BS2aqk.roa
File: 2ScandQxey4X_6VF8DLG8BS2aqk.roa (raw, json)
Hash identifier: M82d7GovSxtnh89Ai0IpN3uS84yxxgarSQK3XQ9YCVQ=
Subject key identifier: D9:27:1A:9D:D4:31:7B:2E:17:FF:A5:45:F0:32:C6:F0:14:B6:6A:A9
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01962577083C4DF51A22A84EF8A87F0381A7
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2ScandQxey4X_6VF8DLG8BS2aqk.roa
Signing time: Fri 11 Apr 2025 15:27:59 +0000
ROA not before: Fri 11 Apr 2025 15:27:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 64.226.54.0/23 maxlen: 23
64.226.156.0/22 maxlen: 22
2a0e:1a80:1::/48 maxlen: 48
2a0e:c785:1::/48 maxlen: 48
2a0e:f200::/48 maxlen: 48
2a0f:1203::/32 maxlen: 32
2a0f:1580::/32 maxlen: 32
2a0f:1e80:d9a8::/48 maxlen: 48
2a0f:3043::/32 maxlen: 32
2a0f:3d80:bac::/48 maxlen: 48
2a0f:7d06:102::/48 maxlen: 48
2a0f:e847:acab::/48 maxlen: 48
2a10:67c2:3::/48 maxlen: 48
2a12:ac43:1::/48 maxlen: 48
2a13:18c0:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:25:77:08:3c:4d:f5:1a:22:a8:4e:f8:a8:7f:03:81:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 11 15:27:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9271a9dd4317b2e17ffa545f032c6f014b66aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:36:c8:1a:93:79:d7:5d:f5:64:ec:07:b8:cd:
06:61:4e:6a:59:3a:8f:e7:d5:85:36:ae:ae:c5:12:
fb:be:d1:9e:29:2e:ec:02:f5:d8:c1:d9:e5:dc:ee:
39:ae:39:74:c6:5f:7c:25:e9:4f:33:a2:2f:65:5b:
50:9c:07:2c:dc:f4:6b:4b:db:08:a3:32:45:fa:0a:
3b:4a:65:fc:71:42:a9:98:a6:c9:52:03:09:0d:25:
7b:aa:10:a2:26:99:13:e0:81:a4:55:66:45:cf:c4:
0f:8b:3c:a1:7a:ff:ff:3b:79:14:db:2d:bd:2a:b8:
85:1b:24:7d:d2:2e:45:d9:0e:be:57:7a:dc:d8:10:
cc:92:d8:8e:aa:7e:7b:ff:7e:a3:cd:2d:e4:d4:fd:
a6:fa:9c:c1:ee:c1:3c:9b:af:27:87:22:17:43:9b:
93:d8:00:0b:89:56:24:a1:60:0a:3a:99:56:5b:87:
3a:4a:e6:5a:72:8c:a3:51:94:43:0c:57:14:d9:f8:
04:e6:46:c0:ed:c1:c7:52:3d:d9:ac:ae:b2:fa:3d:
2e:26:1a:ac:ff:77:a0:5e:84:ed:45:33:99:6d:d6:
e9:98:f7:65:d7:2d:84:c7:50:93:63:82:92:23:9c:
10:4d:de:92:5b:50:e9:34:49:68:e7:9c:8c:f5:8a:
fb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:27:1A:9D:D4:31:7B:2E:17:FF:A5:45:F0:32:C6:F0:14:B6:6A:A9
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2ScandQxey4X_6VF8DLG8BS2aqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.226.54.0/23
64.226.156.0/22
IPv6:
2a0e:1a80:1::/48
2a0e:c785:1::/48
2a0e:f200::/48
2a0f:1203::/32
2a0f:1580::/32
2a0f:1e80:d9a8::/48
2a0f:3043::/32
2a0f:3d80:bac::/48
2a0f:7d06:102::/48
2a0f:e847:acab::/48
2a10:67c2:3::/48
2a12:ac43:1::/48
2a13:18c0:2::/48
Signature Algorithm: sha256WithRSAEncryption
7a:44:13:5e:66:72:ce:be:86:9f:e1:2e:18:45:2b:ed:1d:e3:
cb:28:c0:0f:45:7d:1f:c8:d4:4b:65:6a:b9:88:50:6f:e5:73:
c6:dc:e7:0b:07:36:b9:ea:cc:7c:f2:ac:33:97:7d:a2:99:5b:
0c:fe:ee:50:df:a7:13:52:c7:71:1d:46:c0:d5:15:54:a5:56:
f7:6b:68:b4:68:a6:08:75:10:91:0d:d1:af:96:5a:cd:79:5c:
86:c2:88:97:d6:a7:bc:15:22:81:f4:55:b2:eb:ee:36:ba:ec:
ec:1b:44:d8:67:d1:eb:b5:06:d1:68:22:03:6d:6e:f3:cc:a4:
b1:08:7d:43:6c:4b:78:4b:7a:6d:73:b8:aa:77:ff:07:fb:44:
94:f4:b0:3b:43:ef:80:69:19:4e:43:70:09:68:55:e5:ef:20:
bf:1b:c6:e1:e6:ef:5e:b9:f3:1d:55:2d:62:89:c5:b3:24:cd:
d8:92:22:b6:dd:44:34:76:7c:11:2b:65:82:31:99:0b:3b:42:
53:8f:59:4f:52:28:82:c0:b3:8c:31:80:57:13:69:57:92:d3:
c5:59:e6:0c:43:11:b0:2c:96:a3:c5:06:a2:48:d2:ad:5d:0c:
21:6c:e1:93:91:aa:13:64:3e:4a:4b:02:81:05:69:a8:a5:39:
89:ab:d8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:13:26 2025 by rpki-client