Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/a2-_iHh4YN4Wr0lF4kMnwNTdUjg.roa
File: a2-_iHh4YN4Wr0lF4kMnwNTdUjg.roa (raw, json)
Hash identifier: NCX+yhqphO2+j+enSysSgVP+APy0LNhhsqbikMxgPoA=
Subject key identifier: 6B:6F:BF:88:78:78:60:DE:16:AF:49:45:E2:43:27:C0:D4:DD:52:38
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 0194274800F36CF072AA7EC3F69ECB924D5E
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/a2-_iHh4YN4Wr0lF4kMnwNTdUjg.roa
Signing time: Thu 02 Jan 2025 13:50:17 +0000
ROA not before: Thu 02 Jan 2025 13:50:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205808
IP address blocks: 95.43.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:00:f3:6c:f0:72:aa:7e:c3:f6:9e:cb:92:4d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 2 13:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b6fbf88787860de16af4945e24327c0d4dd5238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:85:2c:66:22:5e:90:41:d6:2d:19:74:ae:59:
87:e5:56:f2:57:7f:d4:d4:b2:37:3e:dd:8d:92:0d:
3e:4b:73:cb:33:4f:b6:14:b2:e5:27:ad:07:7a:c2:
c5:3b:13:eb:47:d1:a1:65:e3:6f:03:ed:35:94:b9:
bd:d1:3c:db:a0:95:7b:f4:db:7d:55:eb:a1:c5:4a:
52:da:86:67:da:06:e1:16:99:62:36:ce:19:cf:53:
d9:d5:f4:b1:29:45:7b:d2:df:46:76:07:82:92:6c:
97:07:c5:1c:c4:2a:01:5f:67:d3:eb:9e:6e:e0:d7:
82:4d:ad:39:69:e8:d0:c6:69:b8:37:ea:16:bc:9c:
ef:09:a3:6d:ce:43:d4:2a:24:96:6a:99:dc:42:c4:
2c:e9:9c:1b:14:27:c7:e7:ec:b1:3c:0c:24:f0:c3:
6f:70:9f:dc:37:bb:8a:12:26:23:a0:e8:2a:2b:f0:
28:23:87:79:ab:79:ae:7b:37:8c:83:7c:cb:9f:de:
4a:ea:88:d2:21:6e:5d:c5:51:f5:42:e4:49:52:ba:
16:28:86:de:8c:29:ee:56:2e:3d:e1:cf:84:9e:98:
93:39:3e:c4:27:72:12:89:3a:79:59:50:fc:82:00:
7b:7b:22:e7:ed:65:99:59:1c:83:74:95:2e:6d:61:
0a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:6F:BF:88:78:78:60:DE:16:AF:49:45:E2:43:27:C0:D4:DD:52:38
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/a2-_iHh4YN4Wr0lF4kMnwNTdUjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.43.202.0/24
Signature Algorithm: sha256WithRSAEncryption
59:29:ab:1f:a2:65:04:7d:16:9d:1f:04:ce:b3:60:cf:61:6d:
a0:d5:7d:b5:ff:4d:39:64:ab:b1:2f:2d:f5:50:fe:9e:01:0b:
19:ff:17:17:51:12:f0:f1:a7:e0:6a:2d:1e:ab:76:11:de:5d:
a9:1c:f3:7c:d1:e8:ea:0d:82:90:a3:70:86:4c:bd:ed:af:55:
c5:8e:b1:18:70:e5:20:b2:9a:a6:a2:bf:e6:09:27:ec:6a:fa:
b8:39:d0:b7:dc:3b:02:14:e3:94:71:d1:20:0f:44:a2:fa:77:
f7:3c:db:eb:4e:c8:57:73:60:63:46:d2:20:9e:22:fd:2e:72:
ca:5b:94:88:c6:91:25:fb:7b:2d:2a:28:07:4f:51:a7:cf:4f:
6c:04:34:39:21:8b:9f:78:e2:4c:14:e7:68:22:0c:c4:7e:b5:
eb:b7:f5:3f:18:79:92:06:82:92:10:a5:9c:c4:75:e6:66:4a:
37:15:cf:68:6c:0d:4f:2b:67:5b:47:0c:b5:6d:49:ad:ff:7b:
67:8f:2c:c5:d3:34:b0:41:2d:de:44:4a:2f:76:05:06:74:08:
2f:fd:7c:38:c3:8f:e7:98:2e:6e:f1:e5:49:d7:21:ee:cc:b0:
88:eb:28:11:46:c3:90:86:e8:58:b9:35:ea:2a:2d:52:b4:21:
48:6c:ab:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:44:30 2025 by rpki-client