Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/2JWsXELeyx7EyyyZ3YWZM719O70.roa
File: 2JWsXELeyx7EyyyZ3YWZM719O70.roa (raw, json)
Hash identifier: FZod/ic6qTKIkUVMr3hWJLyceYOdcHo1fQ2FEaICWK0=
Subject key identifier: D8:95:AC:5C:42:DE:CB:1E:C4:CB:2C:99:DD:85:99:33:BD:7D:3B:BD
Certificate issuer: /CN=4b23b06d60ec3e76b4920b2b64141fa3af6e5fbb
Certificate serial: 019420D665D86CB7B28B30F90A6F5F0EA793
Authority key identifier: 4B:23:B0:6D:60:EC:3E:76:B4:92:0B:2B:64:14:1F:A3:AF:6E:5F:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/2JWsXELeyx7EyyyZ3YWZM719O70.roa
Signing time: Wed 01 Jan 2025 07:48:29 +0000
ROA not before: Wed 01 Jan 2025 07:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20983
IP address blocks: 193.109.244.0/23 maxlen: 24
195.242.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:65:d8:6c:b7:b2:8b:30:f9:0a:6f:5f:0e:a7:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b23b06d60ec3e76b4920b2b64141fa3af6e5fbb
Validity
Not Before: Jan 1 07:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d895ac5c42decb1ec4cb2c99dd859933bd7d3bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4e:d7:6e:9d:6e:33:73:84:82:8c:45:a4:2e:
47:dd:53:70:bd:3a:0e:62:c7:70:2d:26:df:59:60:
05:2a:d6:17:76:96:fa:1e:23:0a:eb:50:3f:9e:17:
94:db:d3:e0:33:f7:e8:cf:21:7f:55:68:2e:38:5c:
91:86:f0:2d:49:c9:f9:2a:fe:b9:06:b8:57:43:a9:
30:bc:35:73:97:f4:45:41:1a:91:a2:59:3a:f6:fe:
83:09:26:6c:44:ec:b1:c4:28:06:02:9b:c1:c7:0b:
d0:29:1c:11:e3:c3:9a:27:11:3d:c0:6e:af:89:27:
14:bf:b4:b7:1f:1a:6f:d9:9e:85:38:d7:c4:db:f0:
25:ae:8a:04:11:b9:b4:99:15:7c:30:94:fd:14:27:
25:64:4b:c9:b9:2a:4c:de:aa:f9:d7:ab:82:1f:97:
38:5b:be:ae:94:61:5c:6b:76:4c:1a:37:e0:c6:65:
f8:c2:84:4d:f1:c8:50:de:fe:08:5b:00:d7:4f:1a:
97:0e:2a:6d:2a:62:2d:b2:1e:88:5b:49:21:38:44:
f3:00:db:31:57:c0:25:13:c7:d8:b7:b9:8e:ad:db:
8f:4c:93:16:57:45:53:f0:31:3b:52:80:75:1a:26:
9d:00:d5:1f:46:19:bb:4b:92:a4:59:77:bb:8f:31:
72:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:95:AC:5C:42:DE:CB:1E:C4:CB:2C:99:DD:85:99:33:BD:7D:3B:BD
X509v3 Authority Key Identifier:
keyid:4B:23:B0:6D:60:EC:3E:76:B4:92:0B:2B:64:14:1F:A3:AF:6E:5F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/2JWsXELeyx7EyyyZ3YWZM719O70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.244.0/23
195.242.183.0/24
Signature Algorithm: sha256WithRSAEncryption
56:4b:d7:39:e4:17:9e:40:29:6e:99:21:bd:18:8c:ae:78:46:
04:f3:26:3d:d9:de:26:d5:d1:d7:09:30:7a:21:af:c3:7e:07:
72:b7:d9:12:ff:3d:97:47:e6:73:7b:79:81:f9:cf:63:c0:11:
b8:a0:a9:6e:8c:e4:cc:5b:48:43:5a:19:e4:09:25:1a:ee:07:
c7:59:a9:3c:a5:f7:18:bb:54:07:77:cb:18:34:e0:22:36:68:
c9:5f:95:c9:3f:85:ee:2c:40:2e:7c:42:97:11:6e:09:af:e6:
bc:cc:f0:74:83:07:54:b5:76:3c:47:ed:58:b4:8b:ae:ec:5a:
42:85:b1:4a:ac:5b:e0:42:21:6b:47:60:f2:ef:7c:a1:99:63:
78:b8:84:c3:d8:26:a9:6e:9a:1b:2b:55:38:ef:13:61:b8:f5:
be:31:3d:22:76:12:90:50:f4:67:aa:17:03:b1:0e:6c:a1:7d:
f9:e6:da:9d:b9:fb:0b:47:0e:f5:81:cf:a8:f9:30:f8:cc:36:
16:2c:08:a0:22:3f:5e:4e:41:14:4e:a1:45:e8:c1:bc:11:14:
50:7f:2a:25:52:57:b5:bd:89:ab:2a:b9:a6:e1:b9:90:b1:e7:
fc:84:8a:c9:d2:91:4a:5e:65:2b:b3:eb:33:f0:3a:2c:10:06:
29:1e:28:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:04:11 2025 by rpki-client