Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/2y9heUGpm4IABGcsawt9m5ijUw8.roa
File: 2y9heUGpm4IABGcsawt9m5ijUw8.roa (raw, json)
Hash identifier: 3R+JVKPGvS+pF/oreszpE7P3zqEvUvswY+6b0jSRI3s=
Subject key identifier: DB:2F:61:79:41:A9:9B:82:00:04:67:2C:6B:0B:7D:9B:98:A3:53:0F
Certificate issuer: /CN=2f407dea499d73d7ebd4e68825188687559cb1f9
Certificate serial: 0194221F66C9A79A20890ABC10227BF46367
Authority key identifier: 2F:40:7D:EA:49:9D:73:D7:EB:D4:E6:88:25:18:86:87:55:9C:B1:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/2y9heUGpm4IABGcsawt9m5ijUw8.roa
Signing time: Wed 01 Jan 2025 13:47:50 +0000
ROA not before: Wed 01 Jan 2025 13:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207143
IP address blocks: 194.56.188.0/24 maxlen: 24
194.56.189.0/24 maxlen: 24
194.56.190.0/24 maxlen: 24
194.56.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:66:c9:a7:9a:20:89:0a:bc:10:22:7b:f4:63:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f407dea499d73d7ebd4e68825188687559cb1f9
Validity
Not Before: Jan 1 13:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db2f617941a99b820004672c6b0b7d9b98a3530f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6c:1a:c7:ab:cc:c1:b0:d6:e8:55:74:b5:8b:
95:e4:b8:68:70:e5:20:39:98:93:3b:21:d6:bf:e0:
8e:08:fb:85:53:1f:90:33:50:e1:b7:fa:30:51:1c:
bf:55:8d:f6:39:d3:97:ee:9b:e5:af:c2:85:b8:4f:
29:59:6b:2d:dc:c1:ea:f2:3f:35:d2:2c:e5:cc:5c:
f4:1e:32:90:15:d9:08:10:97:48:84:8c:4e:a8:bb:
0f:4a:a7:94:0f:29:29:dc:ce:bd:ab:3d:d4:a7:d3:
e8:b9:db:2a:79:af:49:5b:08:40:bb:c8:a5:c5:f5:
a5:f7:e7:8a:ab:eb:e5:85:25:06:ab:b8:0d:ae:9a:
11:44:ef:35:b0:64:66:13:7b:8a:62:80:fd:18:4e:
31:bf:32:b3:b0:36:18:17:f9:c1:3e:2f:14:a4:bb:
c4:43:4d:dd:13:60:77:ff:2b:41:83:a9:53:96:3f:
4e:e8:39:3d:77:81:74:a3:98:c6:72:dc:d0:eb:90:
ba:5d:1b:7e:1f:09:7f:56:0e:63:82:48:c9:08:90:
e0:ff:fb:ca:f9:22:8a:7a:04:de:6f:0b:e2:9a:d6:
b5:17:30:32:a3:e5:71:d6:d3:34:c5:36:f0:00:04:
2e:44:a8:0a:af:fb:c4:26:06:16:86:8d:73:56:96:
2f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:2F:61:79:41:A9:9B:82:00:04:67:2C:6B:0B:7D:9B:98:A3:53:0F
X509v3 Authority Key Identifier:
keyid:2F:40:7D:EA:49:9D:73:D7:EB:D4:E6:88:25:18:86:87:55:9C:B1:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/2y9heUGpm4IABGcsawt9m5ijUw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.188.0/22
Signature Algorithm: sha256WithRSAEncryption
43:29:e3:6c:1f:d3:02:b0:bb:89:bc:f7:7b:31:07:f5:8a:dd:
2f:7b:ae:bc:fe:c3:a0:2f:ff:b9:69:42:a4:82:88:1c:1b:b0:
d4:ff:17:c8:0d:8a:57:8a:4c:6e:03:aa:d1:ab:c7:4b:9c:19:
76:ae:a3:e3:b8:34:ec:66:40:77:33:94:65:90:a7:de:7a:4e:
b7:08:ab:9b:c5:5d:ca:af:5c:54:88:81:9e:bc:c7:90:bc:4f:
d3:32:18:45:f0:c9:6d:03:95:a8:42:5b:d3:6e:83:fb:7d:5c:
17:51:9d:83:2b:4a:21:fc:f4:11:5f:52:74:4a:89:08:09:0d:
12:16:4a:68:a9:4b:1d:cb:00:28:40:fa:32:1e:28:6a:b8:47:
ba:be:20:5b:98:28:4d:a0:e4:82:ce:ad:b3:f1:99:fa:e3:c0:
05:b8:c5:49:bf:d0:fc:29:86:e8:63:d9:fe:49:65:d7:34:6b:
17:92:11:eb:2f:84:62:65:7f:26:d9:fa:b2:2d:70:fe:de:95:
da:5c:f3:84:a0:a3:64:3e:ce:31:e5:00:76:68:51:5e:9f:b6:
0e:16:a2:94:3a:2c:e2:79:c3:4c:fa:a0:6b:72:dc:8e:8c:19:
4d:e1:8d:f8:7a:6f:0e:55:25:ab:18:5c:92:1c:9f:d6:84:1b:
a7:e6:41:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:14:17 2025 by rpki-client