Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/1gCNF0infgdQK7vG9hr6sTtscNI.roa
File: 1gCNF0infgdQK7vG9hr6sTtscNI.roa (raw, json)
Hash identifier: gWiE0Pg38BFsOepEyhUFjPHlaQuFw5fcis0anm8dYRU=
Subject key identifier: D6:00:8D:17:48:A7:7E:07:50:2B:BB:C6:F6:1A:FA:B1:3B:6C:70:D2
Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Certificate serial: 01942748766D50AC2F3E5584DB40C20D0D0A
Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/1gCNF0infgdQK7vG9hr6sTtscNI.roa
Signing time: Thu 02 Jan 2025 13:50:47 +0000
ROA not before: Thu 02 Jan 2025 13:50:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 92.60.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:76:6d:50:ac:2f:3e:55:84:db:40:c2:0d:0d:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Validity
Not Before: Jan 2 13:50:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6008d1748a77e07502bbbc6f61afab13b6c70d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:58:84:d8:8d:2e:24:34:79:0d:de:06:85:a5:
99:30:d6:7e:56:a6:2b:b6:37:60:6e:b2:6c:8f:d4:
00:01:16:0e:5e:cb:a8:a9:a5:64:f6:96:0b:ab:8d:
aa:77:84:b9:25:54:b5:65:4d:fd:30:b1:fe:93:e3:
09:46:ee:6d:68:c4:1a:1a:27:97:5e:25:94:62:f6:
a3:15:f8:f9:28:41:f8:2e:ab:92:fd:10:f8:47:ca:
2c:cd:9f:b0:d9:dc:3f:65:73:25:1d:b4:4c:4b:15:
d9:5b:18:f5:07:8a:7a:29:e2:62:a5:c7:18:dc:50:
5d:a5:58:f8:0a:31:c2:d3:f7:d9:d5:17:ed:aa:5f:
21:04:a8:59:34:e3:ab:6f:c9:45:d5:c5:c0:13:60:
d1:76:88:58:7c:39:b4:ee:fe:22:6f:21:b6:bc:78:
a8:a7:3e:bf:c7:1b:14:f9:2c:c0:54:ad:64:34:4d:
c6:66:a1:7f:47:9c:cc:c7:bb:c5:60:87:61:dd:49:
05:14:f6:75:9b:05:81:2e:3b:31:0e:45:64:31:e5:
5e:68:62:0e:53:47:21:f3:63:5c:20:36:bb:b4:ff:
a3:f2:ca:24:35:c8:7d:b5:1a:8e:e2:2d:de:1f:d0:
28:d8:e7:45:7e:8a:69:15:03:74:9b:4a:6e:e2:5b:
07:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:00:8D:17:48:A7:7E:07:50:2B:BB:C6:F6:1A:FA:B1:3B:6C:70:D2
X509v3 Authority Key Identifier:
keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/1gCNF0infgdQK7vG9hr6sTtscNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.60.74.0/24
Signature Algorithm: sha256WithRSAEncryption
10:7c:8e:5d:2b:ba:3f:68:c0:a8:2f:04:68:0f:00:8b:91:d7:
d5:47:71:95:66:6c:b6:5d:b3:86:6b:51:23:20:51:54:c3:98:
b6:83:f1:d3:a1:21:a3:68:03:12:f3:46:13:b7:73:27:df:e5:
3c:7c:91:78:fd:76:61:0b:e2:21:85:62:75:df:cf:c9:29:c3:
ab:d5:00:a4:02:da:b8:f7:3b:42:b7:ea:45:22:67:8a:26:7d:
d8:01:e7:b0:f5:5a:8e:ec:fd:66:e9:43:b4:28:0c:2f:c1:8d:
8f:26:2c:13:76:ec:14:1f:d9:f2:21:74:e2:3a:5f:99:20:a5:
a1:4f:86:e8:a4:75:2c:a9:47:7f:eb:9e:b7:79:56:0a:2e:7a:
46:28:5d:21:a3:54:4b:e2:20:aa:c5:0a:d2:64:97:d2:33:a4:
54:33:39:35:04:58:94:01:8f:9d:eb:13:13:33:de:1a:e0:23:
57:c0:0b:1f:09:fd:ae:57:c3:3a:bb:d1:92:b8:f3:0e:2c:c0:
e2:ff:90:77:e8:78:18:cb:3d:a9:0c:aa:1f:ac:92:58:01:4e:
a0:30:e7:b4:1f:fe:48:16:9d:1d:13:aa:d9:bb:31:ac:d1:70:
22:96:84:55:8e:96:7b:90:82:5f:ba:73:a3:95:ff:2a:9c:18:
3a:a4:32:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:53:00 2025 by rpki-client