Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/2vvTx_yFrt5UrJ0WVDTO--gQh60.roa
File: 2vvTx_yFrt5UrJ0WVDTO--gQh60.roa (raw, json)
Hash identifier: eB4HsG9FbYTVRCz9S1t9E+zrZDYTm7BTeCXp3dMiZIo=
Subject key identifier: DA:FB:D3:C7:FC:85:AE:DE:54:AC:9D:16:54:34:CE:FB:E8:10:87:AD
Certificate issuer: /CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
Certificate serial: 0194266C2F4B7B8FA9D7151F5C642D7954C1
Authority key identifier: 7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/2vvTx_yFrt5UrJ0WVDTO--gQh60.roa
Signing time: Thu 02 Jan 2025 09:50:11 +0000
ROA not before: Thu 02 Jan 2025 09:50:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44090
IP address blocks: 185.129.232.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 16:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:2f:4b:7b:8f:a9:d7:15:1f:5c:64:2d:79:54:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
Validity
Not Before: Jan 2 09:50:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dafbd3c7fc85aede54ac9d165434cefbe81087ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f4:a7:0b:87:14:9b:57:03:6c:30:00:6e:89:
ca:1c:29:ba:7c:7a:ad:46:ed:5c:e2:c3:52:b9:c6:
43:a8:7f:5f:f3:8e:09:22:75:6f:eb:2a:b7:1b:e8:
df:1c:fd:05:38:00:71:ef:e2:fa:17:7e:d9:c6:df:
dd:2c:d9:e2:cd:b4:cd:c6:1e:54:51:fd:77:cc:cd:
ad:5b:ce:41:8e:e6:f5:4a:9f:ea:29:e3:1a:e1:28:
57:bc:27:18:f8:57:a7:f5:b4:d5:95:da:32:87:ea:
fa:be:45:e0:8d:69:e4:b6:53:e1:31:d3:c7:6f:ba:
fb:aa:e8:f9:c4:8f:7e:f4:17:00:7f:de:45:d7:43:
30:ac:48:54:65:27:90:91:9a:6c:d2:d4:29:75:8c:
a7:29:ce:3f:77:e7:53:ea:32:24:c0:b9:80:58:20:
d5:66:35:54:17:9e:c0:26:07:c6:96:c2:61:3e:00:
51:1a:20:bf:34:22:11:15:10:5b:0a:eb:8a:f7:d4:
02:8e:7e:ea:88:f2:73:b6:65:6c:4f:5e:bc:69:f6:
64:10:59:6e:64:4d:a4:8f:27:d4:aa:f0:3c:b3:38:
ff:79:8f:1d:05:03:5b:38:07:df:d2:a8:f7:0d:c4:
8a:ae:c1:49:29:bc:7c:ef:df:2f:cb:f8:b7:a3:6c:
f0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:FB:D3:C7:FC:85:AE:DE:54:AC:9D:16:54:34:CE:FB:E8:10:87:AD
X509v3 Authority Key Identifier:
keyid:7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/2vvTx_yFrt5UrJ0WVDTO--gQh60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.232.0/21
Signature Algorithm: sha256WithRSAEncryption
9e:4e:c1:05:78:ed:b2:1a:21:be:a9:a5:ce:fa:c4:6e:5b:d0:
07:cd:f4:fc:c5:10:85:da:c2:91:75:2f:18:1b:33:91:57:8b:
db:43:df:d2:c4:92:d6:bb:99:06:c6:17:90:93:8e:c7:5a:45:
20:23:3c:ab:52:71:a2:06:ed:ef:19:ce:5e:1a:25:08:a2:98:
8b:b3:33:45:23:6b:3c:5c:ba:d2:53:6c:14:14:35:14:67:31:
09:0c:5d:b5:e2:a1:73:e3:28:45:46:56:d4:02:7b:9b:8a:6c:
59:c5:10:a2:db:e0:2c:04:d2:18:6b:8b:49:04:20:e4:84:0c:
97:1f:1b:92:05:9c:a7:de:a1:86:f6:64:9f:e8:52:8b:5e:c5:
ea:96:58:b0:1c:de:1d:fb:2b:62:67:40:0f:e8:8e:51:5b:3f:
61:b3:e4:3b:7c:5d:f2:39:1d:26:f7:98:91:aa:1e:b4:89:e7:
1d:95:9c:9a:d4:4a:00:5e:71:29:12:53:30:72:27:7d:59:f5:
c4:f5:46:b8:f1:7b:b0:bb:9f:38:78:f9:5e:b6:1b:9d:36:de:
ef:1b:e0:55:cf:64:6e:af:57:42:ce:1e:af:45:dd:f9:34:2e:
48:49:ae:6c:6c:34:f5:3a:6b:01:ac:1a:1d:df:6f:b5:93:f9:
e6:52:d1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:15:11 2025 by rpki-client