Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/92YX8_mKsRYRDoG9l3vH6epU_24.roa
File: 92YX8_mKsRYRDoG9l3vH6epU_24.roa (raw, json)
Hash identifier: R3F3U2oxwWbOLay+ACJCalTUQG9HKAHuMPfnBBPm6HM=
Subject key identifier: F7:66:17:F3:F9:8A:B1:16:11:0E:81:BD:97:7B:C7:E9:EA:54:FF:6E
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 0194266B9212F315568B4B54CE3A8FFFF839
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/92YX8_mKsRYRDoG9l3vH6epU_24.roa
Signing time: Thu 02 Jan 2025 09:49:31 +0000
ROA not before: Thu 02 Jan 2025 09:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 399641
IP address blocks: 193.160.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:92:12:f3:15:56:8b:4b:54:ce:3a:8f:ff:f8:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Jan 2 09:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f76617f3f98ab116110e81bd977bc7e9ea54ff6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:00:02:e8:87:1c:14:8b:b0:f5:ce:01:94:34:
65:97:7f:ad:ab:e0:a3:61:8f:b9:67:ff:df:c4:5e:
38:04:62:52:dd:b9:9e:9e:b8:32:ee:63:0c:12:09:
a4:0b:26:32:08:15:85:56:4e:db:28:7d:48:77:25:
a4:f7:fe:6b:d3:04:3f:72:f2:66:69:23:51:9f:56:
b4:8c:b9:b8:58:e9:43:ed:87:88:ae:e2:52:6b:24:
54:eb:b6:5c:e8:b9:fd:0d:49:2f:bc:fe:03:02:95:
81:46:53:38:2c:a2:52:c1:11:1b:ec:05:89:70:cc:
cd:d6:7e:fe:49:e5:bc:dc:47:a1:f9:09:3d:cb:a5:
67:6a:61:c6:86:0f:ec:05:68:28:c9:42:80:d7:b9:
cc:a1:d3:b0:87:28:20:09:3d:04:09:25:22:1c:19:
57:fc:e4:bb:2a:e7:a4:a1:29:e0:81:53:0c:85:af:
2c:7f:e3:a2:45:de:82:4b:80:bb:17:7b:84:16:c9:
e6:c4:df:1f:78:46:a7:53:1e:02:16:d9:2a:8d:4c:
9d:83:ab:ec:7b:c7:c4:08:5c:87:7d:2e:21:21:29:
b1:77:d3:f7:be:72:5c:85:c4:be:f6:4e:f8:6e:4b:
59:c2:98:ff:06:35:4d:2a:67:8d:2e:9c:d7:4f:0b:
0b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:66:17:F3:F9:8A:B1:16:11:0E:81:BD:97:7B:C7:E9:EA:54:FF:6E
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/92YX8_mKsRYRDoG9l3vH6epU_24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.8.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:ff:4a:0c:30:62:20:f7:b1:a6:71:e8:36:8b:45:47:71:75:
b7:91:0a:6c:77:b1:e3:2a:cf:8a:40:65:b9:ff:21:ba:83:64:
08:5f:ee:7c:f7:bb:cb:31:2f:e5:cd:73:ab:df:8b:09:b2:e7:
28:f6:50:9a:1e:5d:fb:d3:29:2e:95:c9:0e:73:9d:2f:f8:b1:
1c:4e:36:6a:6a:1a:53:0c:e1:c6:6c:52:ab:0b:e4:88:3b:4e:
d3:da:06:ce:32:6e:a8:f7:a0:82:d7:53:14:ca:d2:c0:bf:36:
d2:53:d3:ab:df:2c:78:fd:e8:93:09:8d:94:5e:e2:11:31:e6:
d6:28:07:6e:69:b2:31:b1:4b:61:dd:02:1b:ff:1a:80:44:57:
dc:1d:01:67:64:87:66:67:32:1a:ef:bb:13:d2:1d:4f:ac:23:
6b:a6:60:e8:24:70:c7:42:a0:be:53:30:b3:9f:90:62:5c:a1:
61:73:2a:13:31:20:57:65:ba:0f:5f:89:d4:88:8c:d4:dc:f0:
d2:0d:98:ed:fa:88:a6:23:e7:49:96:23:7c:18:e9:cd:fb:21:
88:a6:14:4e:2c:a0:2e:77:fc:60:f9:9d:a3:ef:01:e0:28:aa:
54:39:2e:85:67:ae:9a:99:f7:ee:6a:72:fc:df:05:15:7a:ad:
f6:9a:96:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:43:31 2025 by rpki-client