Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/2PjElAAJU3KrVInjZlxeKaqsURQ.roa
File: 2PjElAAJU3KrVInjZlxeKaqsURQ.roa (raw, json)
Hash identifier: E5/GwvtnZzLjYWDNMf6Xqpe3KvrLvjhM7f3dCAih0vU=
Subject key identifier: D8:F8:C4:94:00:09:53:72:AB:54:89:E3:66:5C:5E:29:AA:AC:51:14
Certificate issuer: /CN=89d3a9145973c79a3e7b95531e3d0df7d28c4a04
Certificate serial: 0194258E32FE992A05A657E7CB474D2F8F1D
Authority key identifier: 89:D3:A9:14:59:73:C7:9A:3E:7B:95:53:1E:3D:0D:F7:D2:8C:4A:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idOpFFlzx5o-e5VTHj0N99KMSgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/2PjElAAJU3KrVInjZlxeKaqsURQ.roa
Signing time: Thu 02 Jan 2025 05:47:43 +0000
ROA not before: Thu 02 Jan 2025 05:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61124
IP address blocks: 85.193.144.0/20 maxlen: 24
148.252.32.0/19 maxlen: 24
176.123.32.0/20 maxlen: 24
185.13.188.0/22 maxlen: 24
2a03:3ec0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/idOpFFlzx5o-e5VTHj0N99KMSgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 14:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:32:fe:99:2a:05:a6:57:e7:cb:47:4d:2f:8f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d3a9145973c79a3e7b95531e3d0df7d28c4a04
Validity
Not Before: Jan 2 05:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d8f8c49400095372ab5489e3665c5e29aaac5114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:10:3e:58:4c:60:5a:da:9b:9b:ab:14:77:3b:
24:eb:58:01:31:c7:07:03:8e:b4:d0:61:ec:0b:85:
f7:42:d8:9d:b0:75:f9:be:c8:e9:99:82:a7:08:c3:
16:bc:3e:c0:1e:00:ae:dd:a4:93:f0:1c:9e:bf:36:
42:32:fd:26:5e:81:b1:d0:73:4d:b9:7d:38:d5:ea:
42:a0:48:c9:44:32:7f:dd:50:c5:17:39:a1:b6:40:
23:35:3b:97:40:b8:20:0c:7f:1b:36:f7:c2:f5:8d:
47:bc:bb:6c:08:30:d1:e2:4a:4e:be:5e:ee:a3:84:
10:8c:52:36:d4:c8:d0:11:60:3d:5e:e0:0b:78:37:
8a:21:cd:d4:7b:eb:c5:53:7a:29:b0:08:eb:67:18:
02:bd:c5:82:e9:3e:5c:18:b6:fc:bc:e5:05:ea:a2:
cc:20:0c:ab:84:95:f8:34:62:a1:aa:4d:e3:26:1b:
e0:4f:b8:e9:d9:6a:e9:25:c3:35:36:d7:25:93:7a:
fc:3e:c4:d5:9d:a9:9a:ad:9c:aa:9a:74:1e:7b:20:
76:02:ad:94:94:ad:ca:5b:33:dc:59:a9:4d:b6:99:
cd:30:53:ef:c7:1e:d0:13:df:5c:c4:9f:cc:1c:28:
45:78:83:23:e4:07:a8:64:f4:2a:07:1c:8c:3e:ef:
99:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F8:C4:94:00:09:53:72:AB:54:89:E3:66:5C:5E:29:AA:AC:51:14
X509v3 Authority Key Identifier:
keyid:89:D3:A9:14:59:73:C7:9A:3E:7B:95:53:1E:3D:0D:F7:D2:8C:4A:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idOpFFlzx5o-e5VTHj0N99KMSgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/2PjElAAJU3KrVInjZlxeKaqsURQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.193.144.0/20
148.252.32.0/19
176.123.32.0/20
185.13.188.0/22
IPv6:
2a03:3ec0::/32
Signature Algorithm: sha256WithRSAEncryption
c3:c7:cc:7a:7e:e4:08:c2:4d:cf:f5:2c:2f:a6:61:d8:29:7d:
95:9f:b7:bd:f1:7c:7d:a7:ff:cd:93:bc:77:a1:53:ac:10:fb:
fd:f8:55:ed:b9:af:67:72:f7:dd:ac:8e:6d:63:5e:a3:eb:d4:
13:d7:f5:ac:61:48:81:25:68:1a:2d:52:cd:9d:23:7f:cd:f7:
49:1f:78:43:4b:19:08:95:34:db:55:ec:47:a9:ea:a3:ec:07:
ac:36:13:59:f6:6f:83:b0:6d:86:85:7d:a4:7e:15:1e:19:4e:
26:4e:6d:df:05:8e:69:47:20:b3:20:bf:be:21:2c:d9:3c:d4:
c9:50:a5:80:12:d7:41:04:39:0f:77:1e:1b:2c:ab:33:76:b2:
57:cc:1a:b5:8f:cf:cd:b6:e0:f9:00:0d:6b:ca:96:c9:a2:e9:
b7:6b:f0:c0:25:8c:0f:18:f8:0d:d9:90:49:f7:c6:e7:1c:59:
de:79:25:60:bf:48:f5:c5:7b:79:10:25:ed:b1:d9:70:75:9f:
6b:4a:89:e9:a7:9c:52:57:e9:ef:70:d1:59:4f:a7:14:87:ee:
ef:60:a7:3d:70:5b:03:2f:8f:ac:9f:15:db:31:63:06:83:7e:
99:7d:d7:c6:bc:bc:0b:83:83:b6:b4:f0:bf:2e:d7:0e:30:60:
b4:b8:c7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 19:11:39 2025 by rpki-client