Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/0XFFlKCTNtLLZVV9p2_pc1DjY7Y.roa
File: 0XFFlKCTNtLLZVV9p2_pc1DjY7Y.roa (raw, json)
Hash identifier: G/O9gZ9u/NceLqv5QuJkBjT9iTS4og+QgrA6j/G80us=
Subject key identifier: D1:71:45:94:A0:93:36:D2:CB:65:55:7D:A7:6F:E9:73:50:E3:63:B6
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C32936B31460810ED65F9897EDC77
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/0XFFlKCTNtLLZVV9p2_pc1DjY7Y.roa
Signing time: Wed 01 Jan 2025 01:47:49 +0000
ROA not before: Wed 01 Jan 2025 01:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60909
IP address blocks: 85.120.92.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:32:93:6b:31:46:08:10:ed:65:f9:89:7e:dc:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1714594a09336d2cb65557da76fe97350e363b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:54:5e:75:26:25:25:47:d7:98:15:34:8c:80:
b9:83:92:63:6b:d8:5c:d8:16:af:cd:8b:a6:cc:75:
5d:8e:29:9b:45:27:a6:48:e9:0e:a2:5b:e5:13:a1:
73:80:f4:2d:d9:9c:bd:b3:d4:7e:42:fd:b4:59:17:
34:cf:f3:83:fc:0a:b8:93:d8:f0:b1:10:77:c2:2e:
f1:75:01:59:0f:ab:9a:43:7e:d2:93:54:45:4c:20:
51:37:22:98:36:04:69:85:bc:8b:85:e7:59:65:35:
f5:89:a8:b6:37:23:25:79:a4:6c:5d:d4:41:18:69:
a9:9d:94:72:77:62:0d:06:1f:87:3f:0d:ee:93:a9:
fc:ea:cc:d2:ff:54:b9:45:de:7c:74:5b:8a:d4:bc:
76:8d:05:6f:ca:9b:a8:31:2c:22:fb:00:78:b1:8e:
9e:c5:e3:9f:ed:9e:bb:0b:df:dd:f8:7e:da:ec:84:
78:74:2c:6b:2e:3c:68:25:67:f8:ec:cb:e0:4b:9b:
38:13:9f:d9:8f:0e:ec:90:be:cd:af:3c:67:8c:e2:
11:27:8f:ca:53:a1:c6:e9:e9:25:8f:df:92:43:64:
d2:a1:af:c0:0e:ee:58:46:99:3d:23:ba:cb:6e:94:
a3:7b:0f:30:f2:27:55:8e:b7:2a:1b:a9:38:2a:39:
66:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:71:45:94:A0:93:36:D2:CB:65:55:7D:A7:6F:E9:73:50:E3:63:B6
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/0XFFlKCTNtLLZVV9p2_pc1DjY7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.92.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:13:0d:30:a6:d2:d6:a1:c1:5d:c9:75:6e:ba:3a:07:6e:57:
34:ca:5a:b0:cb:ea:e2:7c:b1:04:66:c8:00:9f:7e:4c:5a:82:
dd:61:e8:17:d2:01:5b:1d:4a:2e:0a:8a:d1:69:c6:f1:51:0c:
9a:17:2b:f8:76:61:c0:ff:c2:29:21:b9:30:00:73:1e:a5:95:
b3:4b:e7:98:2d:06:19:eb:a1:74:5d:d0:3f:ff:91:11:33:ad:
30:ef:30:06:9c:18:b0:3f:1d:cc:1d:f3:64:57:86:36:05:33:
0f:da:96:07:4f:45:37:f8:de:fb:0e:6b:6d:9c:6b:82:76:d3:
92:fe:61:d1:b8:53:70:5f:c2:74:24:0d:57:88:ef:d0:f5:6f:
0c:8a:cf:59:70:25:e8:48:2c:27:2e:34:1b:3b:48:b4:3d:59:
bd:71:3b:68:08:f2:fb:f5:03:b8:65:cf:6e:2c:60:8a:fe:82:
60:a9:fc:eb:13:af:2f:e6:06:1f:cd:27:25:58:ed:c9:a1:76:
54:47:ec:52:d2:b1:a4:63:bd:96:19:d2:03:74:8c:28:eb:46:
86:01:22:c9:01:3f:64:bf:29:d0:0c:b8:dd:4c:6f:20:77:71:
9c:16:39:35:a7:70:00:bb:9d:72:c3:95:d6:e6:12:8e:f1:10:
a5:9e:71:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:52:30 2025 by rpki-client