Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/2T0ylluLZU5IRXTIsZCaSueUWbM.roa
File: 2T0ylluLZU5IRXTIsZCaSueUWbM.roa (raw, json)
Hash identifier: udIR5t7k2pJaVqMVtuXWgauNi5zcnt5mr94dfqv8MFY=
Subject key identifier: D9:3D:32:96:5B:8B:65:4E:48:45:74:C8:B1:90:9A:4A:E7:94:59:B3
Certificate issuer: /CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8
Certificate serial: 019422FC1057DD99D5F5F512B6C58865AE6C
Authority key identifier: 4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/2T0ylluLZU5IRXTIsZCaSueUWbM.roa
Signing time: Wed 01 Jan 2025 17:48:52 +0000
ROA not before: Wed 01 Jan 2025 17:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47377
IP address blocks: 194.62.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:10:57:dd:99:d5:f5:f5:12:b6:c5:88:65:ae:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8
Validity
Not Before: Jan 1 17:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d93d32965b8b654e484574c8b1909a4ae79459b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:89:d3:a8:36:30:1c:15:0e:b9:ac:84:70:4a:
e5:71:57:bb:dd:b8:0e:ce:2b:28:df:a0:f5:23:3f:
40:c5:69:65:1c:ca:e2:f6:d6:13:58:73:a1:de:b7:
c1:07:8c:21:1d:a2:b4:19:68:f1:d1:13:56:e2:0c:
69:da:60:58:ae:d7:4b:45:2b:2a:44:77:0c:77:b2:
53:50:18:8f:19:3a:fe:71:98:2c:f8:6b:0c:be:ca:
a5:c4:f6:13:f4:64:4d:89:dc:8e:1f:ab:ad:c9:bd:
7e:74:c0:7f:93:0c:e7:91:c6:6c:34:56:f1:e2:9d:
df:52:8c:8d:eb:40:29:2e:8a:ae:e0:bb:8c:14:1c:
08:71:84:16:48:b1:e4:6c:6f:b1:32:7e:0e:ad:b4:
d3:be:27:61:d9:b3:c8:59:2a:88:a9:93:e9:39:a2:
65:10:fc:53:24:f5:39:36:40:4e:4d:cd:75:7c:dc:
ab:33:6a:ca:fb:8e:6d:e9:3e:bb:b8:63:05:a8:48:
5c:cc:e7:b9:6e:31:39:c0:e2:41:5f:20:66:b2:54:
87:68:ed:64:87:da:af:da:c9:80:fb:42:52:9d:d6:
87:b8:cf:c0:29:ee:7e:8e:68:43:dc:e7:55:bd:c7:
9e:6e:18:1d:50:e6:fc:05:78:aa:6d:5f:a3:a7:2a:
8b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:3D:32:96:5B:8B:65:4E:48:45:74:C8:B1:90:9A:4A:E7:94:59:B3
X509v3 Authority Key Identifier:
keyid:4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/2T0ylluLZU5IRXTIsZCaSueUWbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.72.0/24
Signature Algorithm: sha256WithRSAEncryption
87:ff:4b:a1:e9:52:52:b5:c9:6e:ef:db:39:38:48:a1:da:34:
ee:be:b4:7e:11:c4:ab:29:48:02:4f:21:b2:56:e5:84:84:19:
8b:34:91:c0:61:43:40:89:e7:f3:d3:20:9c:46:7e:98:7e:dd:
02:d5:8a:f8:3e:08:81:5f:71:51:b6:b6:e6:f4:d1:e0:a3:a4:
5d:c6:de:74:db:70:d8:f5:f9:94:3c:2d:0b:53:ce:ae:80:6f:
fb:fe:e2:c2:ea:86:2d:26:16:d8:06:c7:74:a4:3f:06:37:66:
5e:78:35:8a:df:35:55:54:fe:c7:e5:2b:27:1b:f3:85:9e:12:
eb:33:12:25:18:5e:ab:12:1f:d5:11:1f:15:66:76:a8:61:28:
ec:0d:79:5f:e4:6f:d9:d2:0a:93:eb:bd:4f:fd:80:d7:d8:11:
b2:29:be:27:23:11:8a:5f:7d:34:83:4a:aa:77:c5:d2:77:df:
91:41:01:7c:6f:d7:7e:dd:1f:22:3f:fb:84:58:79:71:d2:1c:
e4:a6:c3:cf:d7:62:b8:1f:b5:58:10:0a:12:a3:dc:bc:39:71:
02:36:b2:5e:55:c6:b2:7d:76:dd:b4:a3:75:b5:c4:b9:e7:f2:
e1:4d:13:5a:e8:96:96:73:9c:5e:11:ad:a5:76:33:4c:0a:b9:
a5:b1:60:a7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi/BBX3ZnV9fUStsWIZa5sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNDAzYmM2MGI0YTEzYzNkYWEzNDExYWM5MjNjNjM3MmQ0
MjNlYjgwHhcNMjUwMTAxMTc0ODUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTNkMzI5NjViOGI2NTRlNDg0NTc0YzhiMTkwOWE0YWU3OTQ1OWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4nTqDYwHBUOuayEcErlcVe73bgO
ziso36D1Iz9AxWllHMri9tYTWHOh3rfBB4whHaK0GWjx0RNW4gxp2mBYrtdLRSsq
RHcMd7JTUBiPGTr+cZgs+GsMvsqlxPYT9GRNidyOH6utyb1+dMB/kwznkcZsNFbx
4p3fUoyN60ApLoqu4LuMFBwIcYQWSLHkbG+xMn4OrbTTvidh2bPIWSqIqZPpOaJl
EPxTJPU5NkBOTc11fNyrM2rK+45t6T67uGMFqEhczOe5bjE5wOJBXyBmslSHaO1k
h9qv2smA+0JSndaHuM/AKe5+jmhD3OdVvceebhgdUOb8BXiqbV+jpyqLSwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNk9MpZbi2VOSEV0yLGQmkrnlFmzMB8GA1UdIwQY
MBaAFExAO8YLShPD2qNBGskjxjctQj64MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEVBN3hndEtFOFBhbzBFYXlTUEdOeTFDUHJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8wOGI5YzQtMGFmZC00ODc2LTllZjct
MmU4NGI4ZDE4ZTRlLzEvMlQweWxsdUxaVTVJUlhUSXNaQ2FTdWVVV2JNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi8wOGI5YzQtMGFmZC00ODc2LTllZjctMmU4NGI4ZDE4ZTRl
LzEvVEVBN3hndEtFOFBhbzBFYXlTUEdOeTFDUHJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwj5IMA0G
CSqGSIb3DQEBCwUAA4IBAQCH/0uh6VJStclu79s5OEih2jTuvrR+EcSrKUgCTyGy
VuWEhBmLNJHAYUNAiefz0yCcRn6Yft0C1Yr4PgiBX3FRtrbm9NHgo6Rdxt5023DY
9fmUPC0LU86ugG/7/uLC6oYtJhbYBsd0pD8GN2ZeeDWK3zVVVP7H5SsnG/OFnhLr
MxIlGF6rEh/VER8VZnaoYSjsDXlf5G/Z0gqT671P/YDX2BGyKb4nIxGKX300g0qq
d8XSd9+RQQF8b9d+3R8iP/uEWHlx0hzkpsPP12K4H7VYEAoSo9y8OXECNrJeVcay
fXbdtKN1tcS55/LhTRNa6JaWc5xeEa2ldjNMCrmlsWCn
-----END CERTIFICATE-----
Generated at Sun Apr 13 02:46:25 2025 by rpki-client