Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/Mf9Ftgoq8hNaUlnWSE1OgssDPng.roa
File: Mf9Ftgoq8hNaUlnWSE1OgssDPng.roa (raw, json)
Hash identifier: 2OpCIxzpIQdhVjJD4azKWQqbRjrwZgvvuIiGX67bBpw=
Subject key identifier: 31:FF:45:B6:0A:2A:F2:13:5A:52:59:D6:48:4D:4E:82:CB:03:3E:78
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 0194D592F9E0116BB261C1B8D9CD1BCA59C7
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/Mf9Ftgoq8hNaUlnWSE1OgssDPng.roa
Signing time: Wed 05 Feb 2025 10:06:06 +0000
ROA not before: Wed 05 Feb 2025 10:06:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212283
IP address blocks: 92.62.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d5:92:f9:e0:11:6b:b2:61:c1:b8:d9:cd:1b:ca:59:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Feb 5 10:06:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31ff45b60a2af2135a5259d6484d4e82cb033e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:2f:59:dc:97:9a:8d:8b:29:20:ba:47:d8:58:
64:ac:49:86:70:81:d9:ad:dc:38:0f:48:3c:0e:f1:
10:d2:f6:91:f8:b4:5c:1c:c1:dd:b1:80:b3:49:53:
50:0d:1f:34:22:ef:a2:1a:3c:57:84:b4:8b:ab:10:
45:6c:cf:16:f5:63:b3:04:ed:6c:3d:9f:fe:2e:2d:
9d:38:d9:4f:5b:fa:85:f6:5a:16:11:43:2d:0d:a6:
13:77:0f:ec:62:31:49:cf:e9:65:54:42:3d:bf:b6:
ce:e6:ab:0d:d4:08:47:3b:ba:d9:ef:93:16:f8:3d:
4d:7a:b3:e3:c3:03:c2:3e:11:d2:2b:17:a9:e8:7a:
99:48:d0:a9:e3:8d:18:74:5a:58:fd:e1:1d:21:8e:
ec:de:ae:1f:b4:13:c1:47:e3:63:06:e0:cb:c9:fe:
5b:81:fd:4f:4f:41:81:59:da:01:42:91:29:f7:b9:
28:09:4f:53:33:bd:62:fb:75:05:73:f2:ea:5d:90:
79:89:8f:bc:1b:9d:18:f7:82:54:b3:d2:3a:2b:6d:
58:f6:ad:d4:e1:fe:d0:a7:8c:50:0e:01:d8:12:f0:
57:e5:5b:d7:a3:99:1c:e0:12:87:9c:06:47:9c:d1:
ca:a7:d3:a8:c7:bc:75:d4:e5:9d:32:2c:b3:82:23:
83:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:FF:45:B6:0A:2A:F2:13:5A:52:59:D6:48:4D:4E:82:CB:03:3E:78
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/Mf9Ftgoq8hNaUlnWSE1OgssDPng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.62.242.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:8e:23:e0:ab:0f:aa:2e:8a:97:00:92:7f:4b:6b:f0:97:76:
42:72:3e:7e:f8:df:96:83:e2:b5:02:ac:bb:8d:86:3a:18:34:
b9:fc:f2:29:40:6a:98:af:d4:32:16:a2:54:f6:f1:fe:60:8c:
32:a1:1c:7b:b3:57:0e:7d:97:16:b3:c3:95:60:c2:9e:04:08:
c5:47:6a:33:ba:c8:ff:a7:bd:99:fe:5f:ce:e0:60:e8:94:35:
28:39:32:77:8b:70:ec:8c:1e:7c:b6:d2:e2:53:8d:13:78:54:
b3:c0:75:c6:0c:3e:c0:c5:3f:b2:3a:d7:d6:b7:f1:e3:af:8d:
5b:e9:3e:bb:6f:64:ca:e2:6d:be:74:da:3c:52:04:3f:82:b6:
dc:54:6d:8b:77:52:71:a1:5f:e4:0a:25:49:76:7d:88:a5:23:
30:9a:e7:62:3a:c6:a5:dd:d6:e6:2b:d0:aa:ba:89:17:a4:db:
00:25:0f:86:d5:ed:da:06:4f:ff:84:e5:aa:25:fa:8e:53:70:
ef:a2:1d:d0:0b:f5:8a:b7:7e:90:16:01:ca:3d:8a:09:41:db:
5a:78:1b:b5:44:8e:4a:6c:3d:e8:1e:26:b8:26:96:ab:d3:cc:
eb:c3:f8:e4:a3:82:c3:02:75:de:ee:59:f0:fd:60:ef:ca:c9:
a1:83:1c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:01 2025 by rpki-client