Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/2LgtOWneA5YvGT4_RnemdJk10ZI.roa
File: 2LgtOWneA5YvGT4_RnemdJk10ZI.roa (raw, json)
Hash identifier: i3ijgdJkTo+0tXZivrTiqDYQJFUVEZ40sKvM/03kC6k=
Subject key identifier: D8:B8:2D:39:69:DE:03:96:2F:19:3E:3F:46:77:A6:74:99:35:D1:92
Certificate issuer: /CN=d0de618822b8af6f9ecaffcd7d5459b7cc11449a
Certificate serial: 0194221FEDFBA35EA518B2B9AE65DA8DA8DE
Authority key identifier: D0:DE:61:88:22:B8:AF:6F:9E:CA:FF:CD:7D:54:59:B7:CC:11:44:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/2LgtOWneA5YvGT4_RnemdJk10ZI.roa
Signing time: Wed 01 Jan 2025 13:48:25 +0000
ROA not before: Wed 01 Jan 2025 13:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34984
IP address blocks: 185.156.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:ed:fb:a3:5e:a5:18:b2:b9:ae:65:da:8d:a8:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0de618822b8af6f9ecaffcd7d5459b7cc11449a
Validity
Not Before: Jan 1 13:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d8b82d3969de03962f193e3f4677a6749935d192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e4:de:7b:68:45:e4:f9:bd:d1:4c:d1:02:93:
62:4c:44:63:26:6e:00:69:5d:df:b4:7c:22:5c:bc:
aa:e4:6b:43:b1:97:2e:08:ef:ec:df:c1:8b:fc:3a:
d4:7e:71:ac:80:c3:8c:c8:ae:3f:bd:71:55:2b:92:
90:6c:24:de:a8:ed:9e:b5:9f:81:78:e3:9a:90:0e:
f2:51:17:50:13:48:cf:63:ca:a2:99:44:82:05:50:
d8:25:0c:54:cd:b0:47:7b:40:c2:42:f2:4a:ad:0a:
94:36:4f:68:27:6c:82:ee:b6:21:1b:e1:78:61:bb:
e7:cb:7b:dd:8d:ce:10:4e:dc:4e:95:dd:f0:92:73:
c5:af:f3:3f:d4:c5:ba:70:9a:69:f1:02:ea:6d:ea:
67:c3:82:cb:c7:4c:02:3f:d3:df:c5:04:ce:44:7f:
51:80:dc:87:35:8e:ab:50:4a:36:86:fb:fc:f1:14:
ea:53:38:18:ca:a7:da:d8:6d:11:43:b2:44:73:d2:
06:d0:a1:47:94:af:eb:a4:30:8b:4b:97:ee:c7:81:
2a:64:21:35:4d:52:24:ae:23:73:84:48:d5:4f:48:
0a:64:eb:06:4e:99:d9:ed:dc:0d:c2:9f:07:81:91:
8f:47:21:f1:21:90:25:b1:0c:29:40:b5:c7:e4:c3:
f1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B8:2D:39:69:DE:03:96:2F:19:3E:3F:46:77:A6:74:99:35:D1:92
X509v3 Authority Key Identifier:
keyid:D0:DE:61:88:22:B8:AF:6F:9E:CA:FF:CD:7D:54:59:B7:CC:11:44:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/2LgtOWneA5YvGT4_RnemdJk10ZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.4.0/24
Signature Algorithm: sha256WithRSAEncryption
09:74:b0:c9:d1:f9:d8:de:a7:ce:40:53:60:73:74:61:47:6f:
65:28:2e:fe:07:22:55:12:2e:41:b9:62:b5:e6:16:ee:79:60:
a7:d7:97:a2:86:0d:13:b6:03:9c:41:0f:4e:04:72:a7:ce:30:
ed:0b:a1:10:d6:20:77:59:0b:b2:5f:bc:35:78:c8:17:5c:0b:
e0:a6:25:40:0d:f4:bd:e5:69:60:f2:31:e2:5c:f1:68:41:7a:
12:be:74:88:8c:80:e8:f1:14:19:3d:61:6e:4b:63:94:38:a8:
3f:aa:16:b3:86:9f:31:e6:92:34:f7:4b:f9:bb:86:96:36:11:
73:39:b2:bb:b1:34:ca:16:88:45:a1:eb:5d:2e:b2:33:95:0e:
03:5d:45:b4:43:36:90:67:13:ac:5c:08:f9:0a:81:d7:09:86:
c4:4c:d3:70:02:57:80:8d:7a:ec:31:af:44:d8:27:aa:f1:7f:
cc:82:2a:97:3e:e8:af:c3:4f:85:17:2d:48:2f:cd:42:d8:33:
0c:46:f0:01:d9:77:82:a2:e7:77:29:7c:69:63:da:71:d5:96:
6a:07:b3:4f:a0:76:33:c0:37:07:9a:d5:71:20:2c:b2:67:90:
5b:f6:52:5d:a2:35:17:80:68:e8:a5:df:34:ea:a1:9a:0d:a0:
7d:d7:f1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:36:52 2025 by rpki-client