Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/2i2Vy05Tg_e1ak_1Uk12CnilxHg.roa
File: 2i2Vy05Tg_e1ak_1Uk12CnilxHg.roa (raw, json)
Hash identifier: NqduqZJuAkmB6MV5SKQihh3yDbwkeeFnfpDnTNMY130=
Subject key identifier: DA:2D:95:CB:4E:53:83:F7:B5:6A:4F:F5:52:4D:76:0A:78:A5:C4:78
Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Certificate serial: 019424449D80B123045E432427F443CC23D5
Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/2i2Vy05Tg_e1ak_1Uk12CnilxHg.roa
Signing time: Wed 01 Jan 2025 23:47:43 +0000
ROA not before: Wed 01 Jan 2025 23:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205368
IP address blocks: 77.95.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 11:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:9d:80:b1:23:04:5e:43:24:27:f4:43:cc:23:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Validity
Not Before: Jan 1 23:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da2d95cb4e5383f7b56a4ff5524d760a78a5c478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:23:69:d4:2b:66:8d:46:44:48:d7:76:bb:39:
e9:3f:f7:70:05:a5:86:99:a3:34:a4:8e:fe:20:db:
c0:92:b7:d7:df:e4:1f:ee:4d:3f:89:9a:79:01:bb:
30:e1:dd:2f:f2:47:ed:a3:20:81:bd:c4:06:de:14:
92:87:9e:ee:81:1a:0d:67:88:bc:8c:1d:72:2c:51:
38:29:b7:6e:cc:02:ce:09:a3:18:fc:5d:6a:19:3c:
eb:51:91:8b:89:71:cd:35:11:c6:a0:ac:b4:78:c3:
dd:9f:c7:95:a8:cd:c2:fd:d7:08:6d:79:e7:ab:24:
1e:d8:63:60:99:1d:2f:03:7d:af:0e:84:49:c1:b9:
04:f4:63:7d:90:c0:13:49:d7:b2:15:4d:5d:ac:53:
56:2d:66:2e:9a:fd:4c:a4:ff:59:04:03:18:2d:ea:
b7:59:cb:f3:d2:4d:02:bd:4c:a5:2b:48:e7:07:09:
fa:69:a5:61:f8:40:5c:22:2c:76:6c:b8:c4:15:95:
fb:d9:a8:31:70:11:59:47:02:df:b8:6e:fd:a7:c5:
43:d3:8e:2b:19:b7:4e:80:85:fe:09:b3:dd:06:89:
46:39:32:0b:71:84:aa:57:db:2f:fb:36:93:b2:32:
95:22:fe:0c:dc:4f:f9:fc:ec:2b:15:f3:c0:3d:24:
92:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:2D:95:CB:4E:53:83:F7:B5:6A:4F:F5:52:4D:76:0A:78:A5:C4:78
X509v3 Authority Key Identifier:
keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/2i2Vy05Tg_e1ak_1Uk12CnilxHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.95.185.0/24
Signature Algorithm: sha256WithRSAEncryption
38:3a:0a:f2:a5:5a:d9:4b:c9:d2:c5:66:ec:84:d6:93:56:fc:
46:72:93:00:e1:2a:ce:0a:fb:37:82:bf:9f:b9:16:fe:91:b8:
a1:5f:15:bf:d3:52:85:a1:0b:04:a7:a6:8d:a5:b3:cc:0c:83:
28:a6:49:ca:50:f9:a0:38:0f:53:3f:a1:f8:2c:71:dd:71:24:
eb:14:71:57:ab:ec:d7:de:0d:94:ed:f9:74:22:31:27:7c:e2:
d1:26:81:9a:e1:a4:d5:92:9c:f6:52:e2:e0:24:db:37:4f:bb:
8f:cc:c7:ff:96:2a:da:6e:39:0f:22:e0:05:16:37:9b:19:60:
78:4a:45:f0:14:f1:5c:42:f9:6b:b7:80:03:7a:88:79:e3:2a:
5b:4e:18:68:e1:c5:59:1b:c2:c0:59:02:eb:c1:8c:ab:ef:bd:
40:ed:ff:5a:c6:c2:53:5d:bd:dc:6b:27:f5:7e:3c:8b:3d:a3:
58:12:9f:b0:7a:0f:8a:42:22:a0:c6:32:e2:dd:6f:56:ad:bc:
15:e9:4f:ae:f6:32:9c:0f:6f:2b:4d:16:04:8e:65:37:fa:39:
65:ba:a8:37:d9:21:7f:f1:ef:71:bc:32:dd:fb:1c:de:34:52:
d2:4c:59:30:41:a1:66:3f:e1:8f:11:d0:1a:6e:ea:b4:72:97:
ee:74:2c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:16:59 2025 by rpki-client