Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/2qVUszqlyuVT0tEP7WJf9nN8lO0.roa
File: 2qVUszqlyuVT0tEP7WJf9nN8lO0.roa (raw, json)
Hash identifier: wmcsgU6wglaJJBGIpzY50l05qBBcm4nCWcT/kMgV8PU=
Subject key identifier: DA:A5:54:B3:3A:A5:CA:E5:53:D2:D1:0F:ED:62:5F:F6:73:7C:94:ED
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 019427476BC2754A654FFB0C87EB62CC4AD8
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/2qVUszqlyuVT0tEP7WJf9nN8lO0.roa
Signing time: Thu 02 Jan 2025 13:49:39 +0000
ROA not before: Thu 02 Jan 2025 13:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142111
IP address blocks: 87.254.9.0/24 maxlen: 24
87.254.18.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 11:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:6b:c2:75:4a:65:4f:fb:0c:87:eb:62:cc:4a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Jan 2 13:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=daa554b33aa5cae553d2d10fed625ff6737c94ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b4:e6:9e:c5:71:44:b3:65:54:d4:3f:eb:88:
1c:2f:c4:1e:94:a9:1e:9a:52:af:0c:05:6d:6d:95:
68:f5:ce:d1:96:c2:e4:f4:f4:25:0c:8b:7b:62:7b:
62:ea:36:ba:07:d2:5e:9a:a1:56:a0:41:94:5d:69:
88:34:b4:a4:86:91:88:50:33:71:9f:cc:bc:bc:24:
f7:94:52:1f:54:76:0f:3a:c4:ed:0c:64:0b:4f:85:
a4:d7:21:ef:1a:79:aa:ef:b6:b1:c5:94:19:ea:cb:
4e:93:d2:da:59:65:87:e5:30:42:97:8b:69:2b:32:
73:8c:4e:de:87:55:70:c2:aa:dd:04:ee:f3:cc:b0:
d5:28:80:26:f4:e8:e3:dd:19:ac:d2:23:31:87:ed:
88:a8:50:3f:11:ea:d4:47:f0:a2:f1:94:f1:61:d4:
28:ba:45:08:d1:4a:38:8e:e3:15:5b:d5:05:e0:46:
b5:84:ea:c6:d3:6a:09:e8:6e:69:d9:a7:ed:4e:ff:
51:5e:2f:6c:5f:75:ff:d7:e4:10:84:ee:fc:1f:d0:
58:1c:c1:ea:2a:ec:ae:25:8e:d1:70:09:46:ff:f5:
11:96:bf:25:e7:c5:8e:65:7c:df:ab:22:1f:71:6a:
5f:44:50:38:03:cc:26:ab:96:1f:56:37:f8:16:6c:
3a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A5:54:B3:3A:A5:CA:E5:53:D2:D1:0F:ED:62:5F:F6:73:7C:94:ED
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/2qVUszqlyuVT0tEP7WJf9nN8lO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.9.0/24
87.254.18.0/23
Signature Algorithm: sha256WithRSAEncryption
40:26:cb:66:ae:29:08:95:24:04:b2:62:32:63:ad:5a:cb:d7:
4c:35:a8:3a:34:ae:4a:47:c3:58:92:eb:17:5b:10:f5:58:9d:
74:5a:34:50:18:97:13:17:16:4b:69:c4:5c:67:7d:82:59:ec:
10:b2:fa:1e:07:19:e6:63:7e:a6:2d:c4:83:6d:0e:2e:fc:b4:
ff:cf:ea:70:b7:4c:00:39:20:be:5d:2e:9e:4a:80:51:9d:c6:
c6:bf:22:12:74:fb:95:09:d8:f9:96:78:a2:52:6f:39:80:35:
2f:9d:11:02:9c:7e:40:e7:05:26:44:84:c1:9d:b8:f8:96:d6:
9a:2d:99:49:b9:bd:7d:ed:1e:14:16:20:f9:24:a7:a3:d5:b2:
0d:1e:cf:dd:9d:9e:14:be:05:fa:33:93:cd:49:c3:17:fe:f6:
ee:9c:87:0d:ee:9e:15:90:25:40:c2:2e:78:31:64:1f:22:b2:
85:5f:4f:b9:a9:99:07:5c:aa:64:82:a2:32:0e:52:f2:23:b7:
a7:16:8a:82:8e:88:f3:71:55:6c:e5:f3:fa:5d:ac:06:bb:3b:
b0:af:40:55:b4:2a:ac:c3:aa:91:e9:d5:b3:86:2f:85:63:d0:
b4:d3:6f:4f:c8:c5:41:4f:ce:24:c4:20:fa:46:a5:37:7f:c5:
4b:3f:6a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 19:03:02 2025 by rpki-client