Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/2tZ8QlZM2m2IpNLIvJ0W7pbf-Z0.roa
File: 2tZ8QlZM2m2IpNLIvJ0W7pbf-Z0.roa (raw, json)
Hash identifier: 9Uhvy9O+l0zHDpQPVkCj98q8JIdj7ZhjiR3rxLVvfII=
Subject key identifier: DA:D6:7C:42:56:4C:DA:6D:88:A4:D2:C8:BC:9D:16:EE:96:DF:F9:9D
Certificate issuer: /CN=f4b762950eb7916668bbfa8d1b870560b1ca7739
Certificate serial: 019538D5611CB6886538D2826BA3FD58A25C
Authority key identifier: F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/2tZ8QlZM2m2IpNLIvJ0W7pbf-Z0.roa
Signing time: Mon 24 Feb 2025 16:41:02 +0000
ROA not before: Mon 24 Feb 2025 16:41:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51540
IP address blocks: 84.17.64.0/24 maxlen: 24
84.17.66.0/24 maxlen: 24
84.17.77.0/24 maxlen: 24
84.17.78.0/24 maxlen: 24
84.17.80.0/24 maxlen: 24
84.17.81.0/24 maxlen: 24
84.17.82.0/24 maxlen: 24
84.17.85.0/24 maxlen: 24
84.17.92.0/24 maxlen: 24
84.17.94.0/24 maxlen: 24
193.254.252.0/24 maxlen: 24
193.254.253.0/24 maxlen: 24
195.128.32.0/24 maxlen: 24
195.128.33.0/24 maxlen: 24
195.128.34.0/24 maxlen: 24
195.128.36.0/24 maxlen: 24
195.128.38.0/24 maxlen: 24
195.128.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 19:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:38:d5:61:1c:b6:88:65:38:d2:82:6b:a3:fd:58:a2:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b762950eb7916668bbfa8d1b870560b1ca7739
Validity
Not Before: Feb 24 16:41:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dad67c42564cda6d88a4d2c8bc9d16ee96dff99d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e9:82:e9:63:d8:5a:d4:43:0e:72:75:04:16:
60:4c:54:17:bb:dd:ee:13:47:7c:80:f4:94:f4:7a:
7e:88:34:47:04:4e:fd:dc:21:64:f9:49:54:6b:95:
d8:a3:0a:bd:cd:7c:c9:d3:ee:e6:d8:e9:62:dc:81:
f1:c5:49:58:9b:17:a8:16:ef:9d:33:b9:9a:12:88:
bb:b8:b2:f6:c2:04:72:e2:21:f6:6c:52:55:93:e6:
d7:df:dd:90:3c:fc:ac:d6:b7:1e:d9:dc:36:f9:8e:
76:71:1b:17:5a:e5:c4:f8:93:d7:32:28:d3:14:68:
5d:20:63:8a:bb:c6:3f:d9:08:8d:9c:be:c9:ea:9d:
27:dc:77:bf:e9:3d:21:d6:b6:f8:ae:a2:f7:0e:d9:
df:51:02:ff:02:c7:93:db:49:a6:06:c6:cd:7a:80:
8e:8f:f9:b6:5a:7e:39:fd:90:32:88:ed:1a:4e:98:
4e:9c:55:88:9b:ee:74:84:4b:fa:cd:01:be:d4:35:
1c:d8:8d:da:14:ac:3d:4a:01:a7:ae:58:40:6f:30:
2a:ce:a1:3e:1c:33:be:51:51:49:e6:b6:a6:ef:ab:
46:1b:3c:1d:17:7e:3f:10:53:64:d5:82:f9:3e:f7:
7f:3c:fb:fb:89:6a:3c:6c:65:d6:7b:ae:67:b8:df:
b2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D6:7C:42:56:4C:DA:6D:88:A4:D2:C8:BC:9D:16:EE:96:DF:F9:9D
X509v3 Authority Key Identifier:
keyid:F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/2tZ8QlZM2m2IpNLIvJ0W7pbf-Z0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.17.64.0/24
84.17.66.0/24
84.17.77.0-84.17.78.255
84.17.80.0-84.17.82.255
84.17.85.0/24
84.17.92.0/24
84.17.94.0/24
193.254.252.0/23
195.128.32.0-195.128.34.255
195.128.36.0/24
195.128.38.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:41:86:ca:2a:27:5d:58:c0:bb:60:17:7f:04:2d:6f:b0:aa:
19:da:25:62:ee:09:c7:b9:f6:a2:c9:8e:d8:c4:84:8a:eb:87:
91:62:1e:30:db:74:3e:5d:f2:91:54:3c:f3:2f:37:a6:4e:05:
f0:2d:32:37:b7:97:57:5a:c5:00:b7:1c:b2:0b:57:ce:90:f3:
b8:33:cb:23:eb:19:f1:08:39:a2:8e:b4:b6:8c:40:05:f5:3e:
ce:c7:b3:51:02:1d:47:9c:ea:78:6b:67:4a:d0:0b:0c:07:ff:
86:ab:da:b4:5b:bf:92:45:47:f6:1d:ca:1d:55:99:0c:83:14:
1b:15:d3:44:d8:e4:21:c3:4d:dd:d6:d8:ea:b6:d1:37:3e:89:
56:6a:a2:49:74:94:c6:b4:02:d7:89:b5:0e:d0:ef:5b:69:50:
d9:b6:18:e4:9a:a8:7f:ea:58:62:eb:07:ff:7a:84:56:0b:46:
70:68:87:0a:3d:41:66:80:cc:5f:ec:0c:60:de:6c:23:67:db:
f8:66:71:af:41:02:bc:ac:6e:be:7e:00:02:72:cf:7e:ad:72:
e9:84:7d:12:7e:e4:62:47:80:82:65:98:2e:15:94:ab:08:01:
49:fa:c2:ae:0b:ba:59:2a:92:74:df:d7:b2:3d:0f:c1:10:ba:
1b:f1:9d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:09:14 2025 by rpki-client