Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/_2rlTorI9d4EskVB3Q2AELQgntg.roa
File: _2rlTorI9d4EskVB3Q2AELQgntg.roa (raw, json)
Hash identifier: MJ/JOjkufW/i3x6kFr8d78WsqqTFtkNpKnXIQ8qokdg=
Subject key identifier: FF:6A:E5:4E:8A:C8:F5:DE:04:B2:45:41:DD:0D:80:10:B4:20:9E:D8
Certificate issuer: /CN=cccd583c8d71a2427e0060e3cc924f32dc1a820b
Certificate serial: 01942067D39E6E23286FBA527C9673F953E5
Authority key identifier: CC:CD:58:3C:8D:71:A2:42:7E:00:60:E3:CC:92:4F:32:DC:1A:82:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/_2rlTorI9d4EskVB3Q2AELQgntg.roa
Signing time: Wed 01 Jan 2025 05:47:42 +0000
ROA not before: Wed 01 Jan 2025 05:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209059
IP address blocks: 93.177.126.0/24 maxlen: 24
176.124.196.0/24 maxlen: 24
176.124.197.0/24 maxlen: 24
2a10:880::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:d3:9e:6e:23:28:6f:ba:52:7c:96:73:f9:53:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cccd583c8d71a2427e0060e3cc924f32dc1a820b
Validity
Not Before: Jan 1 05:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff6ae54e8ac8f5de04b24541dd0d8010b4209ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:85:6e:71:96:05:94:1b:c7:22:d7:9b:c4:de:
84:8c:41:b2:1f:be:da:9a:ed:19:f6:ee:b9:e1:b9:
d9:59:e1:24:6c:be:30:53:16:12:80:b8:52:f7:d7:
ec:2a:5f:8b:57:02:bd:82:68:32:0f:8f:96:ea:d9:
1a:59:29:50:e6:8c:f4:ef:9d:a7:bb:cd:6f:2e:b7:
78:d7:3a:46:a6:74:7d:c6:b7:96:9b:9a:ea:a8:33:
73:96:13:8a:ca:05:d1:a2:4d:f9:11:7e:63:18:fd:
6d:13:eb:2b:34:ff:f0:7d:ee:07:76:c5:3b:5a:bb:
8f:6b:03:1d:a9:46:7c:64:c4:38:a7:33:52:7b:73:
8f:dd:0d:35:db:c6:e0:ba:8b:ff:b4:06:e6:e8:d7:
c5:84:81:1e:af:4f:41:8c:bd:a7:0f:c4:ff:aa:7b:
a8:42:49:1b:60:9a:ba:5b:66:c2:87:52:e9:96:00:
ef:ad:09:a4:fa:13:9b:27:10:e2:4d:0c:1a:66:d8:
d3:d9:d6:5b:b9:44:23:86:89:e6:ed:3b:1d:ee:59:
d5:1a:bc:0b:6f:ea:10:94:e5:60:d2:a2:36:0c:d9:
0c:94:6b:67:71:82:6e:bf:cd:aa:c9:a3:57:ed:1c:
07:df:3e:2e:84:57:1f:d9:00:e9:63:0a:81:af:5f:
28:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:6A:E5:4E:8A:C8:F5:DE:04:B2:45:41:DD:0D:80:10:B4:20:9E:D8
X509v3 Authority Key Identifier:
keyid:CC:CD:58:3C:8D:71:A2:42:7E:00:60:E3:CC:92:4F:32:DC:1A:82:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/_2rlTorI9d4EskVB3Q2AELQgntg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.126.0/24
176.124.196.0/23
IPv6:
2a10:880::/64
Signature Algorithm: sha256WithRSAEncryption
1b:99:2f:50:6a:c0:a5:9c:30:21:d9:89:72:10:40:66:c7:88:
39:a2:1e:3d:08:95:15:28:5e:a2:28:c0:3d:b6:02:61:64:14:
00:63:1a:51:a9:01:b4:f7:f2:38:be:3b:e2:16:04:2d:5e:3f:
40:80:0b:a8:6d:44:0b:b3:6a:e4:b4:6a:ff:71:77:07:30:8d:
38:82:ca:a5:3d:ca:a1:5a:07:b2:cc:0a:ee:2d:a9:ed:6f:14:
66:eb:82:c8:5b:cd:3e:4e:ca:fe:c6:66:f1:df:c1:fe:1c:dd:
b2:fc:30:46:d5:5e:67:d2:e2:39:72:01:a3:81:d4:97:4b:36:
89:19:21:bf:52:78:3b:6e:b1:d9:78:06:4f:18:62:64:06:c8:
9e:37:73:5b:79:64:6f:52:b0:b4:1a:31:3d:ca:98:11:f0:21:
41:6f:3f:e7:89:41:3e:26:30:67:d5:d8:5c:d7:1c:54:3a:d5:
b4:03:ea:79:6f:d8:73:de:e8:17:6f:3e:4e:40:5a:c4:ca:3c:
b9:9a:23:71:9f:0a:c7:54:b6:1c:04:35:15:f8:16:f0:2c:09:
77:db:58:c3:1d:87:8b:23:e3:3d:22:f7:26:46:d4:c9:f6:59:
85:7f:07:e7:bc:95:2b:15:de:da:39:ec:af:6b:64:a5:1b:bd:
79:58:5c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:30:55 2025 by rpki-client