Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/2EHY0ANqI6GjPJ3q8F_H43sabIk.roa
File: 2EHY0ANqI6GjPJ3q8F_H43sabIk.roa (raw, json)
Hash identifier: 6KKbNu6n/lBjRM28xxVSQgucF7edE6uzeJUy5fL1Psg=
Subject key identifier: D8:41:D8:D0:03:6A:23:A1:A3:3C:9D:EA:F0:5F:C7:E3:7B:1A:6C:89
Certificate issuer: /CN=2ebff6cfb8326b447295a11b107868212e665fdd
Certificate serial: 0194266A3538D2A7B1638195A5E999DE06E7
Authority key identifier: 2E:BF:F6:CF:B8:32:6B:44:72:95:A1:1B:10:78:68:21:2E:66:5F:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lr_2z7gya0RylaEbEHhoIS5mX90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/2EHY0ANqI6GjPJ3q8F_H43sabIk.roa
Signing time: Thu 02 Jan 2025 09:48:02 +0000
ROA not before: Thu 02 Jan 2025 09:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56428
IP address blocks: 91.223.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lr_2z7gya0RylaEbEHhoIS5mX90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:35:38:d2:a7:b1:63:81:95:a5:e9:99:de:06:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebff6cfb8326b447295a11b107868212e665fdd
Validity
Not Before: Jan 2 09:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d841d8d0036a23a1a33c9deaf05fc7e37b1a6c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:25:88:44:d3:b1:42:f8:07:06:b7:3e:c0:e6:
d0:5d:89:4b:49:b7:4f:7d:ed:35:47:6f:ea:35:66:
04:ea:1c:2a:1f:5f:d7:e2:0a:76:94:20:d2:99:c0:
18:4f:7b:1f:9b:aa:d0:52:4d:8c:a0:90:c8:86:6c:
72:43:c2:2a:dd:f6:ca:b6:1b:a9:aa:b3:13:d2:b2:
74:7f:ac:44:aa:41:3a:d3:04:2d:3c:9b:9b:a5:9e:
02:d5:7f:67:44:72:f1:38:1f:88:83:cd:09:a2:95:
4c:ac:91:05:bd:39:f3:7d:c3:67:2c:a2:9a:fb:5b:
84:76:b8:d4:94:59:a9:ef:a1:53:d2:76:13:90:19:
47:1c:30:62:ce:cf:04:97:67:f8:ba:0a:fd:b6:07:
13:a1:e4:78:df:63:09:72:41:e7:66:b8:8a:ba:28:
4c:b0:08:6c:3b:c6:73:3c:4f:fb:c9:7a:18:86:d5:
ca:ce:ae:9f:75:77:a2:f1:9b:4e:4b:97:11:3f:d2:
e6:07:d4:a4:27:22:08:68:5f:e1:d7:c4:5b:9a:09:
64:35:72:3a:ab:22:da:dc:8b:8a:ad:e2:5b:77:75:
f8:ac:82:9a:25:64:1c:be:7b:9e:c4:3d:eb:3a:c4:
77:d0:51:4d:7d:65:00:4b:d1:8a:37:e1:1e:47:31:
f6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:41:D8:D0:03:6A:23:A1:A3:3C:9D:EA:F0:5F:C7:E3:7B:1A:6C:89
X509v3 Authority Key Identifier:
keyid:2E:BF:F6:CF:B8:32:6B:44:72:95:A1:1B:10:78:68:21:2E:66:5F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lr_2z7gya0RylaEbEHhoIS5mX90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/2EHY0ANqI6GjPJ3q8F_H43sabIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.136.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:1b:69:6e:b6:9f:cc:c4:9b:d9:d9:2a:61:e5:32:ef:93:d7:
d7:63:b6:4b:bb:cf:b1:b2:63:38:0c:46:87:84:b1:3b:cd:1f:
2d:56:8b:3d:d2:e8:da:01:79:55:3b:6b:f6:ce:00:4a:f3:e4:
72:bf:84:13:24:b5:42:a3:65:98:79:75:fe:54:62:e9:5a:21:
ed:e3:f5:f6:0f:eb:09:65:95:78:bf:c4:c1:d5:4c:cd:8f:20:
7d:93:38:4b:b4:d9:23:a6:68:58:ce:f1:07:cd:c4:2e:62:15:
df:03:53:fe:1f:50:a6:8e:0a:34:28:df:2f:f5:11:25:c2:f3:
ea:cc:26:6e:c3:50:98:65:6f:3b:db:2c:e9:f3:e3:03:02:5d:
6b:20:f7:28:59:73:c7:43:68:16:27:1c:a3:99:50:b7:95:f4:
53:64:12:28:d9:a4:7e:85:b5:fb:4c:98:f6:86:8c:5e:74:db:
6f:2e:65:a2:f0:44:9a:3d:a4:f2:57:7a:9e:46:c0:86:5b:5a:
5c:45:5f:a2:ec:8d:00:aa:d1:ba:4b:fc:52:95:d4:d1:a7:c6:
b8:fe:50:87:14:dc:95:e9:d5:c0:3a:83:44:d4:f3:31:ac:1d:
8a:fd:57:82:0e:4f:25:43:ea:4d:df:48:1c:97:6d:48:d5:5a:
7b:6f:d6:d1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQmajU40qexY4GVpemZ3gbnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlYmZmNmNmYjgzMjZiNDQ3Mjk1YTExYjEwNzg2ODIxMmU2
NjVmZGQwHhcNMjUwMTAyMDk0ODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODQxZDhkMDAzNmEyM2ExYTMzYzlkZWFmMDVmYzdlMzdiMWE2Yzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyWIRNOxQvgHBrc+wObQXYlLSbdP
fe01R2/qNWYE6hwqH1/X4gp2lCDSmcAYT3sfm6rQUk2MoJDIhmxyQ8Iq3fbKthup
qrMT0rJ0f6xEqkE60wQtPJubpZ4C1X9nRHLxOB+Ig80JopVMrJEFvTnzfcNnLKKa
+1uEdrjUlFmp76FT0nYTkBlHHDBizs8El2f4ugr9tgcToeR432MJckHnZriKuihM
sAhsO8ZzPE/7yXoYhtXKzq6fdXei8ZtOS5cRP9LmB9SkJyIIaF/h18RbmglkNXI6
qyLa3IuKreJbd3X4rIKaJWQcvnuexD3rOsR30FFNfWUAS9GKN+EeRzH2xwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNhB2NADaiOhozyd6vBfx+N7GmyJMB8GA1UdIwQY
MBaAFC6/9s+4MmtEcpWhGxB4aCEuZl/dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHJfMno3Z3lhMFJ5bGFFYkVIaG9JUzVtWDkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8yZGFmYmMtNTJlZS00YzdiLWIwMDYt
YTc4NmNlYmUyMGQzLzEvMkVIWTBBTnFJNkdqUEozcThGX0g0M3NhYklrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8yZGFmYmMtNTJlZS00YzdiLWIwMDYtYTc4NmNlYmUyMGQz
LzEvTHJfMno3Z3lhMFJ5bGFFYkVIaG9JUzVtWDkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9+IMA0G
CSqGSIb3DQEBCwUAA4IBAQClG2lutp/MxJvZ2Sph5TLvk9fXY7ZLu8+xsmM4DEaH
hLE7zR8tVos90ujaAXlVO2v2zgBK8+Ryv4QTJLVCo2WYeXX+VGLpWiHt4/X2D+sJ
ZZV4v8TB1UzNjyB9kzhLtNkjpmhYzvEHzcQuYhXfA1P+H1Cmjgo0KN8v9RElwvPq
zCZuw1CYZW872yzp8+MDAl1rIPcoWXPHQ2gWJxyjmVC3lfRTZBIo2aR+hbX7TJj2
hoxedNtvLmWi8ESaPaTyV3qeRsCGW1pcRV+i7I0AqtG6S/xSldTRp8a4/lCHFNyV
6dXAOoNE1PMxrB2K/VeCDk8lQ+pN30gcl21I1Vp7b9bR
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:06:34 2025 by rpki-client