Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/2rRfCyoNB-FJKFhJjElIAYCjuZM.roa
File: 2rRfCyoNB-FJKFhJjElIAYCjuZM.roa (raw, json)
Hash identifier: BxYRtCrYD8JZ1KlROq/oLLjDfPXIXRywkgLQEAE4Bdo=
Subject key identifier: DA:B4:5F:0B:2A:0D:07:E1:49:28:58:49:8C:49:48:01:80:A3:B9:93
Certificate issuer: /CN=577cd086d6b82925abb8bb815e658852522e0921
Certificate serial: 019421B20F62EE64749335F5369C952C2FFB
Authority key identifier: 57:7C:D0:86:D6:B8:29:25:AB:B8:BB:81:5E:65:88:52:52:2E:09:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3zQhta4KSWruLuBXmWIUlIuCSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/2rRfCyoNB-FJKFhJjElIAYCjuZM.roa
Signing time: Wed 01 Jan 2025 11:48:25 +0000
ROA not before: Wed 01 Jan 2025 11:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44329
IP address blocks: 194.50.28.0/24 maxlen: 24
2001:67c:ac::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/V3zQhta4KSWruLuBXmWIUlIuCSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:0f:62:ee:64:74:93:35:f5:36:9c:95:2c:2f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=577cd086d6b82925abb8bb815e658852522e0921
Validity
Not Before: Jan 1 11:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dab45f0b2a0d07e1492858498c49480180a3b993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:20:54:f1:36:56:e5:60:27:86:e0:16:89:69:
3f:d0:b9:94:d3:5a:e3:1e:bd:b8:a7:2f:35:08:b5:
80:14:5f:52:95:96:6c:8f:7f:ab:4b:57:16:87:8c:
68:3b:e3:02:d2:16:31:ab:1b:da:62:b7:b0:d0:0a:
ec:88:11:9d:c2:9c:a9:96:63:97:fa:85:d8:9b:2c:
b8:94:3e:41:58:9c:6b:e3:26:46:7a:4e:1b:f2:bd:
f6:8d:54:f8:31:c8:7d:2f:c6:75:ef:a5:d7:e1:cc:
ea:f8:99:c3:d6:a2:8f:19:18:ae:6f:6f:a3:d0:a9:
78:a2:f7:33:b5:1c:47:f3:ea:d5:06:2d:9c:86:b1:
4d:27:d3:33:2b:9a:f2:f3:ea:10:ed:a7:60:42:9a:
c4:4a:3f:ce:55:ff:2a:5a:29:30:0a:56:90:6a:c2:
6b:83:84:cf:bf:85:03:d4:8f:2b:ba:11:7b:09:0e:
42:d5:be:b5:8a:e9:79:6d:84:bc:be:35:66:73:60:
ce:e3:f4:90:a0:85:73:ba:98:ae:e5:a5:27:80:2c:
5a:2f:a6:01:cc:07:05:54:fd:dc:55:0c:60:76:bb:
ee:a3:7c:43:c2:6e:59:2e:e3:1f:21:5b:ff:7b:dc:
a0:6f:05:7f:a6:c5:21:dd:dd:cc:c4:61:d4:a2:ac:
22:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B4:5F:0B:2A:0D:07:E1:49:28:58:49:8C:49:48:01:80:A3:B9:93
X509v3 Authority Key Identifier:
keyid:57:7C:D0:86:D6:B8:29:25:AB:B8:BB:81:5E:65:88:52:52:2E:09:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3zQhta4KSWruLuBXmWIUlIuCSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/2rRfCyoNB-FJKFhJjElIAYCjuZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.28.0/24
IPv6:
2001:67c:ac::/48
Signature Algorithm: sha256WithRSAEncryption
61:53:82:b6:aa:a9:85:04:40:a8:ed:33:aa:f7:8c:d7:0a:d0:
45:5d:d8:3a:ed:43:ea:09:34:15:8f:3e:54:b1:a4:6b:2b:39:
d3:de:01:53:7a:39:52:c8:74:00:43:a9:6c:8b:99:1a:d8:17:
d8:70:e6:c1:32:b1:e7:68:a5:f9:06:ec:43:b6:87:c3:7d:c1:
a1:f1:68:58:57:ae:35:f3:2d:06:4a:34:e9:89:e8:44:fd:62:
5e:27:f5:a0:c1:4b:49:9b:9f:00:77:ce:62:91:4e:26:69:f8:
a5:a8:57:e7:01:d2:84:ca:f0:9f:ac:29:2e:18:4f:00:3f:04:
09:83:e8:8d:a4:4c:75:8c:fa:88:12:8a:c8:5c:dd:0e:13:e4:
49:a1:66:8e:57:0d:05:51:06:6c:25:02:25:1d:93:4e:a2:ba:
de:06:78:0e:a1:51:f5:27:a5:55:24:aa:a3:e5:ee:8e:82:d8:
c9:58:10:bb:a6:35:5d:21:53:4f:6a:98:58:9b:61:cd:12:6c:
db:3a:7b:21:ad:3f:6c:de:99:b3:c9:5d:22:b4:24:93:a4:49:
d2:9b:6f:13:d8:59:a0:d2:1f:01:11:f3:35:3a:6d:cf:62:38:
07:60:e5:f4:32:3f:7a:f2:1f:08:46:9f:34:ad:0f:14:ed:6b:
c5:5d:93:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:27:07 2025 by rpki-client