Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/P2j-hUrnI_G8_z_xhTDbKbOjagw.roa
File: P2j-hUrnI_G8_z_xhTDbKbOjagw.roa (raw, json)
Hash identifier: KXKpMQn72rg2fYHpKvlZTFcp58U/Tju8WHXUSLpo2kU=
Subject key identifier: 3F:68:FE:85:4A:E7:23:F1:BC:FF:3F:F1:85:30:DB:29:B3:A3:6A:0C
Certificate issuer: /CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Certificate serial: 019424B3B3700AA8FA51DD89451C6C7F356A
Authority key identifier: 21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/P2j-hUrnI_G8_z_xhTDbKbOjagw.roa
Signing time: Thu 02 Jan 2025 01:49:04 +0000
ROA not before: Thu 02 Jan 2025 01:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48716
IP address blocks: 90.156.230.0/24 maxlen: 24
185.247.17.0/24 maxlen: 24
188.225.31.0/24 maxlen: 24
217.151.230.0/24 maxlen: 24
2a03:6f06::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:b3:70:0a:a8:fa:51:dd:89:45:1c:6c:7f:35:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Validity
Not Before: Jan 2 01:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f68fe854ae723f1bcff3ff18530db29b3a36a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d2:5a:62:b8:06:d9:46:3a:4f:f9:b7:71:9b:
61:00:67:49:86:62:61:0f:b7:63:ac:b7:c8:45:f7:
ba:17:9c:c8:e4:78:41:07:06:18:89:c3:15:1d:23:
3c:13:b2:b3:10:22:d9:5a:de:ca:3e:b5:0b:d5:fd:
9e:99:e4:61:81:35:ce:b7:29:c3:73:1a:a6:3a:cb:
f7:92:f2:a1:21:63:e8:83:63:50:e2:92:6f:5a:1a:
1f:6f:2f:90:33:dc:fe:b4:8a:1a:06:d6:b6:1f:7c:
08:20:b6:e4:c7:6d:6a:f7:5a:8f:78:22:c8:d8:d0:
43:9c:b4:89:c2:6b:5d:d7:53:6e:7d:a6:59:55:00:
9d:e6:ca:1d:f8:17:36:31:37:0b:b8:af:70:2f:b3:
91:68:e5:e1:20:ad:70:76:d0:88:5f:b7:ce:a0:9c:
6b:75:d8:cc:af:98:d6:41:e3:c6:03:eb:f8:6a:8c:
9c:66:84:8b:b2:d4:03:e8:c9:4b:8c:7b:01:88:b1:
86:c8:8f:9c:21:1a:56:75:b6:49:94:b8:42:33:72:
b5:ab:59:0c:ca:d7:f3:6d:39:81:50:10:be:17:32:
b9:61:3a:a4:5a:0d:3a:6a:eb:ea:30:87:88:1d:e2:
e9:71:2b:79:c1:53:2f:ea:d2:01:05:62:d8:54:a7:
a2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:68:FE:85:4A:E7:23:F1:BC:FF:3F:F1:85:30:DB:29:B3:A3:6A:0C
X509v3 Authority Key Identifier:
keyid:21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/P2j-hUrnI_G8_z_xhTDbKbOjagw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.156.230.0/24
185.247.17.0/24
188.225.31.0/24
217.151.230.0/24
IPv6:
2a03:6f06::/32
Signature Algorithm: sha256WithRSAEncryption
24:02:e7:f4:de:3e:73:83:a1:5e:c7:e2:37:71:cc:cc:d9:59:
7b:e5:dc:ee:d9:51:94:b0:e5:b2:78:1a:ab:5c:d6:5b:09:1a:
ec:a7:20:c7:b5:89:f3:8a:95:d2:b7:09:a0:47:c6:a2:a8:a9:
1d:a2:ba:ae:d0:6a:0e:65:9c:d5:c9:9d:b1:5c:e4:7f:89:d6:
ee:e2:1b:c8:9d:a2:3b:00:70:5a:42:82:bb:64:b1:57:5e:93:
1e:9f:d6:3a:5e:bd:ed:ce:62:da:1d:52:64:8b:aa:3f:e9:21:
69:72:d8:11:cf:85:67:01:f1:fc:8c:8c:d6:03:ca:a0:48:58:
99:01:80:c6:58:8f:d2:e2:97:1e:c6:79:2c:7e:70:e2:0b:20:
4e:00:1b:c4:a4:4e:6d:eb:d7:2e:b4:3a:c8:92:55:5e:f5:2a:
7c:84:19:a1:a9:b7:a7:f9:be:36:50:1b:95:71:89:be:75:a2:
2e:c1:6a:04:00:38:90:cd:b1:26:bb:a4:f3:b9:ff:80:fb:38:
01:93:b4:c0:b3:cd:53:30:e2:14:41:2d:c0:44:ea:ed:81:f5:
93:0e:9a:b7:8b:bf:9b:42:3b:c3:d7:09:6d:35:66:99:d7:c3:
5d:7c:19:99:be:4b:9c:62:de:40:ae:36:5a:2c:ef:d5:64:e8:
da:e6:2f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:07:04 2025 by rpki-client