Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/c2WtzyhUfMkOGeOzdwQ4aAJh8HI.roa
File: c2WtzyhUfMkOGeOzdwQ4aAJh8HI.roa (raw, json)
Hash identifier: IBQc5DSsXoXGwdNqC6nTgm0duz6K2dumf2SofrBrlpQ=
Subject key identifier: 73:65:AD:CF:28:54:7C:C9:0E:19:E3:B3:77:04:38:68:02:61:F0:72
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 0194258F2A2652A705DAD237505E5B13D81C
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/c2WtzyhUfMkOGeOzdwQ4aAJh8HI.roa
Signing time: Thu 02 Jan 2025 05:48:46 +0000
ROA not before: Thu 02 Jan 2025 05:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215181
IP address blocks: 194.116.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:2a:26:52:a7:05:da:d2:37:50:5e:5b:13:d8:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jan 2 05:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7365adcf28547cc90e19e3b3770438680261f072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:72:67:bb:84:5c:ea:70:06:de:4d:30:66:36:
bf:d4:8f:d7:9d:16:67:57:37:3c:04:78:4c:76:19:
3f:22:3d:f1:14:f7:47:2f:31:95:7a:b5:0c:a4:98:
36:11:83:3b:77:04:12:a5:2b:b1:10:f0:65:e0:8c:
f2:d3:aa:b6:0d:d5:45:5e:f7:00:69:bf:06:07:17:
35:54:94:13:27:a9:6a:58:e2:f3:6d:7f:31:63:56:
b7:6a:d0:ea:45:8a:c5:10:b7:ca:7d:20:e2:f9:ff:
0b:16:a2:bb:bb:94:1f:e0:99:23:25:cd:2d:bf:a7:
0d:75:07:86:5b:56:59:17:d4:bf:fb:ec:53:12:f5:
d9:0e:8b:f5:cf:f3:ae:17:00:66:21:61:62:6d:18:
6b:56:8c:6f:aa:dd:3a:75:70:90:33:5c:0f:9d:ca:
65:fc:5b:36:82:13:e7:b6:e8:4a:7a:02:cb:4d:d3:
4c:98:1f:74:7e:e4:39:21:28:71:9c:1c:fc:94:75:
94:33:3c:7c:d2:76:bb:4d:08:b4:75:7a:53:2d:f5:
ae:76:cd:8e:90:a4:17:2a:ca:19:15:2b:53:45:d9:
69:36:e9:72:bd:ab:fa:a4:54:09:81:16:19:c1:74:
6d:84:9b:a4:0c:1e:72:b1:e8:d5:15:3f:ed:45:25:
f2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:65:AD:CF:28:54:7C:C9:0E:19:E3:B3:77:04:38:68:02:61:F0:72
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/c2WtzyhUfMkOGeOzdwQ4aAJh8HI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.116.229.0/24
Signature Algorithm: sha256WithRSAEncryption
43:05:cd:46:e7:bf:3c:aa:0e:c2:cd:bf:53:19:31:21:32:4c:
36:4b:64:64:60:79:8b:ec:f7:03:5b:d5:cb:60:ac:ea:81:e4:
56:79:b0:2c:9f:74:5d:1a:e5:3f:12:30:73:05:57:65:8c:f0:
3a:f8:ab:90:d4:8d:b5:4c:94:fc:33:1b:08:55:3b:b8:ed:8b:
95:32:b8:80:26:ac:94:34:52:13:d3:15:50:87:63:6f:d2:70:
3d:04:89:f8:ca:d4:5c:d4:09:41:65:ef:ee:74:7c:fc:fd:e6:
04:6d:98:28:64:20:aa:19:a3:9d:bf:03:ae:f2:e9:3b:4c:88:
0f:86:78:bf:5f:de:ec:16:de:f2:a6:b1:46:96:7a:50:ad:86:
22:26:7e:94:b0:e4:12:64:62:f2:04:3b:ec:d9:b8:12:1a:50:
ef:25:0b:60:63:4c:86:0e:0f:f7:0c:e9:b3:e3:f9:d8:8c:60:
b8:20:01:a2:34:9c:51:c5:e8:62:69:f4:2e:72:9f:24:c8:5e:
39:75:80:3a:e9:64:cb:f0:ad:3a:a7:8b:e0:83:d4:b3:a6:8a:
cf:4f:9b:2c:d1:08:b9:3a:bc:5e:56:3a:79:19:fb:ba:1a:3a:
7c:d1:a9:90:ce:ad:94:3e:0f:52:e1:53:f5:34:87:d7:c2:29:
af:06:75:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:28 2025 by rpki-client