Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/2j26Wb_0raCGxspq8-CRAEdS8CA.roa
File: 2j26Wb_0raCGxspq8-CRAEdS8CA.roa (raw, json)
Hash identifier: IWSUpm2IMLrh6G4T1G4gf0s40nGd5SL/hMLUB0/qICA=
Subject key identifier: DA:3D:BA:59:BF:F4:AD:A0:86:C6:CA:6A:F3:E0:91:00:47:52:F0:20
Certificate issuer: /CN=52e86b141c51c65eeabd6e62ea522edc5988526e
Certificate serial: 01942747766E449AA728F30CFC6F7BB0B5CD
Authority key identifier: 52:E8:6B:14:1C:51:C6:5E:EA:BD:6E:62:EA:52:2E:DC:59:88:52:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UuhrFBxRxl7qvW5i6lIu3FmIUm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/2j26Wb_0raCGxspq8-CRAEdS8CA.roa
Signing time: Thu 02 Jan 2025 13:49:42 +0000
ROA not before: Thu 02 Jan 2025 13:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21423
IP address blocks: 194.0.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UuhrFBxRxl7qvW5i6lIu3FmIUm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:76:6e:44:9a:a7:28:f3:0c:fc:6f:7b:b0:b5:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e86b141c51c65eeabd6e62ea522edc5988526e
Validity
Not Before: Jan 2 13:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da3dba59bff4ada086c6ca6af3e091004752f020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4b:89:8f:2c:b9:a0:c3:3f:08:e7:4e:e3:43:
be:6a:8c:a7:8b:3b:3c:e8:69:b7:65:36:fc:0e:8d:
f8:8a:a1:cc:a6:e3:47:d3:f1:b0:ee:c7:66:18:a2:
77:4c:0d:25:a6:0c:f0:a3:00:c6:ee:0e:16:f4:d8:
a8:b6:85:7c:9e:d8:72:b3:52:ff:d7:28:9e:b8:8e:
48:ff:01:a3:eb:ef:6f:35:d8:ba:b0:4e:c0:75:f0:
7f:e6:ba:ff:7a:be:78:da:1c:4c:1a:f1:3a:fa:a6:
b9:73:7a:87:b0:0c:14:81:95:97:cf:f7:c1:0b:82:
5b:09:4f:6c:fb:30:6d:97:78:14:9c:0b:f4:47:71:
8f:07:82:84:f0:c4:6d:a5:64:c3:ee:29:cc:d2:bc:
e7:6e:d2:3f:6e:05:c8:f3:ed:e9:ea:8b:58:af:10:
0e:12:6e:e8:6b:42:3c:79:3f:cb:bc:f9:8c:f3:b3:
fd:68:ca:95:19:03:73:ef:e8:74:33:b1:7f:d0:30:
4c:03:8f:8a:8f:df:fb:26:65:4a:c5:4f:1c:56:7a:
7b:88:00:0a:b9:4a:63:e5:f7:16:e1:c8:06:65:a7:
2d:27:f7:d2:49:c4:f5:48:0f:9a:fd:61:83:fc:44:
d1:fd:ca:dd:48:0c:65:15:34:09:59:0f:b2:e4:77:
b5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:3D:BA:59:BF:F4:AD:A0:86:C6:CA:6A:F3:E0:91:00:47:52:F0:20
X509v3 Authority Key Identifier:
keyid:52:E8:6B:14:1C:51:C6:5E:EA:BD:6E:62:EA:52:2E:DC:59:88:52:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuhrFBxRxl7qvW5i6lIu3FmIUm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/2j26Wb_0raCGxspq8-CRAEdS8CA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.198.0/24
Signature Algorithm: sha256WithRSAEncryption
75:26:7d:3e:cf:5d:36:44:83:9c:c5:f5:77:5d:a8:27:ae:2c:
bf:c4:09:11:91:e4:e6:d0:cf:70:79:92:70:37:86:d4:4d:54:
f1:e8:c1:c2:16:55:c3:96:79:19:6a:80:03:a0:e8:6c:53:cd:
19:f7:dc:42:fd:59:c0:3b:c8:31:60:76:bb:38:c9:ad:83:c7:
6d:f0:30:0e:02:ea:41:c4:e5:be:2e:2a:c5:50:42:7b:c5:cb:
b6:81:d0:9d:c7:f6:11:6e:e7:a1:10:df:71:d1:02:84:41:90:
4a:b4:52:9e:d1:64:cd:54:fb:7d:3a:14:c4:ce:34:21:e5:4b:
fb:92:37:73:bf:26:01:05:e0:45:f6:52:03:c8:ba:7a:bf:60:
35:4a:4d:e6:c2:54:a4:ae:24:8a:2d:41:64:d9:1e:55:01:82:
4c:df:90:c6:81:ef:3c:76:2e:55:9d:e2:a6:59:13:8c:1d:90:
58:69:33:61:2a:7c:51:df:c9:c2:a6:5c:f0:b8:76:24:08:a5:
49:4d:65:ae:60:09:90:d2:de:4d:d2:49:97:9c:10:61:62:ab:
12:78:46:0f:80:87:67:66:6f:c1:91:e5:5d:be:bb:ce:c9:19:
91:7a:c0:c7:83:eb:04:34:98:a4:48:9b:be:74:2a:ce:55:59:
34:98:71:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:05:13 2025 by rpki-client