Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/aSLrgRiEDgZrlPwMUYmfUSjYiJk.roa
File: aSLrgRiEDgZrlPwMUYmfUSjYiJk.roa (raw, json)
Hash identifier: Klm6eKylO8taKRIFczFA3N8O7vgb0EyD6ZTYgammZZE=
Subject key identifier: 69:22:EB:81:18:84:0E:06:6B:94:FC:0C:51:89:9F:51:28:D8:88:99
Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Certificate serial: 019427487766B17AEADDA640422C5F6AB441
Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/aSLrgRiEDgZrlPwMUYmfUSjYiJk.roa
Signing time: Thu 02 Jan 2025 13:50:48 +0000
ROA not before: Thu 02 Jan 2025 13:50:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 92.60.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:77:66:b1:7a:ea:dd:a6:40:42:2c:5f:6a:b4:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Validity
Not Before: Jan 2 13:50:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6922eb8118840e066b94fc0c51899f5128d88899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:28:f5:9e:92:93:f2:61:87:0f:c1:bb:ef:cc:
b0:90:d1:6c:8b:b4:5e:8b:e0:3e:27:be:eb:23:32:
09:1d:4e:f3:be:8e:24:cb:3b:a0:9a:47:bb:e9:5f:
e0:64:20:22:e0:dc:c0:04:75:a3:b4:8c:fb:be:a5:
bf:3e:82:26:22:86:35:8d:89:06:0d:a4:8a:11:3c:
40:84:8e:79:9f:cc:eb:64:83:d5:6d:26:7c:79:c7:
38:d7:bc:1b:dd:5f:4d:9e:78:68:e9:96:71:c5:f9:
c0:5f:cc:fd:38:fa:d4:71:ee:1e:c9:5f:f6:b3:dc:
bc:63:cf:2c:9d:48:ba:b4:63:f7:fb:31:66:73:cd:
e6:cc:cf:26:21:37:9c:0c:2d:23:33:fb:ce:bb:e9:
64:ce:32:b6:e8:e6:1b:95:74:b6:b5:5a:29:11:39:
c3:45:e1:db:3b:57:5b:ca:f6:8e:fb:b5:e0:7f:bb:
dc:23:f0:53:dc:fb:fc:a0:b2:55:3d:66:d5:aa:63:
34:85:eb:0f:16:64:d8:43:e4:7c:23:b5:c6:35:b9:
2e:97:ef:a6:28:0c:53:0e:21:a0:d4:06:80:c3:64:
97:21:10:d4:86:be:51:56:dd:69:34:68:4f:d6:07:
40:67:20:63:14:8e:40:07:a2:6c:b6:92:cb:52:e8:
7b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:22:EB:81:18:84:0E:06:6B:94:FC:0C:51:89:9F:51:28:D8:88:99
X509v3 Authority Key Identifier:
keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/aSLrgRiEDgZrlPwMUYmfUSjYiJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.60.69.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:7f:b8:79:05:b4:f5:4f:d8:d8:68:b2:bf:49:84:e9:22:c0:
ec:47:de:2c:b8:14:62:1c:d4:88:80:c6:5a:13:d5:e4:cc:75:
eb:c8:12:91:e2:4d:44:96:57:37:38:6e:9e:ec:15:77:13:95:
25:1e:de:41:57:33:ec:59:ca:ac:ad:fe:aa:55:f1:3f:69:e8:
81:d1:7d:cb:f8:28:ee:6e:0b:f4:ec:d6:6b:4a:03:2d:30:60:
16:01:67:ea:56:33:9d:a1:58:e6:7c:b5:42:4c:09:4e:d9:d4:
38:20:0c:c7:0b:14:36:2b:2f:12:cb:cb:55:60:6c:00:36:c0:
d1:81:d1:86:11:a5:e0:2c:03:7e:51:e8:98:bf:d0:d0:01:3e:
14:23:ae:15:e2:6e:28:f3:0d:10:a2:08:cc:15:c6:b2:2c:05:
7b:8b:3f:fb:7b:61:fd:09:bc:91:c2:e8:4e:7f:4f:d0:35:f6:
58:80:18:00:b5:d5:48:a0:dd:01:12:89:82:37:c7:fa:f3:05:
40:22:77:4b:27:94:5f:78:6d:f9:c0:2d:f6:47:c1:6f:d8:82:
fe:37:e4:fb:3d:a6:a5:fe:ae:34:6d:6c:eb:b0:b8:c2:18:7d:
66:d0:74:43:eb:5d:c8:db:40:60:72:26:31:74:80:9a:4a:1b:
e3:d4:85:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:09:10 2025 by rpki-client