Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/cZRy7XY5dDHs5DQ2e6HdBH1PnmM.roa
File: cZRy7XY5dDHs5DQ2e6HdBH1PnmM.roa (raw, json)
Hash identifier: 3JeVGhOmnf8UAWFgpjcbUPRndvwOtl5MmVpvoRBsyvw=
Subject key identifier: 71:94:72:ED:76:39:74:31:EC:E4:34:36:7B:A1:DD:04:7D:4F:9E:63
Certificate issuer: /CN=5f92bff7a89a8590e6abbaec0282b0f24e0afeb2
Certificate serial: 019420686344AFC9FC3C2791728892D5E4AF
Authority key identifier: 5F:92:BF:F7:A8:9A:85:90:E6:AB:BA:EC:02:82:B0:F2:4E:0A:FE:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5K_96iahZDmq7rsAoKw8k4K_rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/cZRy7XY5dDHs5DQ2e6HdBH1PnmM.roa
Signing time: Wed 01 Jan 2025 05:48:19 +0000
ROA not before: Wed 01 Jan 2025 05:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41075
IP address blocks: 91.236.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5K_96iahZDmq7rsAoKw8k4K_rI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:63:44:af:c9:fc:3c:27:91:72:88:92:d5:e4:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f92bff7a89a8590e6abbaec0282b0f24e0afeb2
Validity
Not Before: Jan 1 05:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=719472ed76397431ece434367ba1dd047d4f9e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2d:29:b1:79:41:25:99:03:4c:1d:b7:9d:d1:
a1:64:19:67:40:06:37:7d:2b:21:75:ed:d8:4b:15:
b5:36:7a:84:97:fc:0f:df:8d:ed:b5:06:a6:b8:75:
21:68:8d:3c:80:54:94:18:c2:15:b0:c7:fc:43:36:
33:63:02:ba:96:89:93:ef:7a:f9:73:83:3f:bb:ef:
6b:36:0e:cf:6d:fb:07:8d:83:e3:da:04:7d:84:b7:
c1:97:90:74:19:1b:73:15:a1:83:f2:d7:27:a7:22:
45:ab:34:81:0f:75:e3:a6:fc:6a:96:f4:02:47:8f:
c0:ab:ba:d9:14:a6:4d:93:d8:0b:03:08:bb:a5:b1:
4a:b6:f0:6e:d4:43:5d:87:55:4d:7b:54:20:ff:dc:
2f:a0:4d:6b:83:ed:cd:26:bf:22:3b:f8:3d:a6:f8:
93:95:ef:de:ff:41:fb:4c:25:fb:93:9c:9f:27:13:
83:8b:e3:f3:e1:c8:ba:07:b2:93:f2:c2:de:d6:53:
a0:28:a2:ed:10:0f:92:b6:d4:25:7b:ed:b6:99:46:
61:4e:0e:95:3b:e2:f0:f5:bc:b5:02:4c:a8:de:7f:
e7:59:14:74:d8:62:2c:41:41:ac:b7:d7:4e:2f:f2:
f8:20:9c:0c:ac:3c:fe:20:c3:44:f6:4d:49:06:99:
66:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:94:72:ED:76:39:74:31:EC:E4:34:36:7B:A1:DD:04:7D:4F:9E:63
X509v3 Authority Key Identifier:
keyid:5F:92:BF:F7:A8:9A:85:90:E6:AB:BA:EC:02:82:B0:F2:4E:0A:FE:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5K_96iahZDmq7rsAoKw8k4K_rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/cZRy7XY5dDHs5DQ2e6HdBH1PnmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.182.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:72:0b:69:24:3c:e9:b3:8f:1e:cc:f5:54:c1:d2:ce:86:5e:
67:f7:bd:d2:aa:d4:69:0c:59:42:94:fc:cf:5f:96:70:27:c7:
0c:d1:e3:6d:57:d1:19:6d:ac:8e:a7:19:84:4a:b9:6f:0a:2e:
6f:fd:55:63:7e:87:d6:2a:53:b5:0e:ad:c9:37:91:a9:3e:f1:
f2:de:e0:2f:36:26:9e:03:de:37:d4:de:a8:8d:22:1c:6c:ac:
34:bb:86:2a:e9:56:e9:9a:27:52:20:36:f5:0c:1e:20:b1:76:
e4:f3:a0:52:30:00:10:d1:a7:02:aa:1e:c4:f7:d9:d4:a0:e7:
4a:f4:83:c4:a5:37:60:46:7c:97:41:61:96:48:82:69:a5:48:
f4:4f:29:42:95:75:08:f2:00:24:bd:39:c3:61:e1:83:80:33:
bc:e2:4f:3b:85:7c:d6:d5:93:2c:da:44:99:2e:08:e8:01:8d:
6f:f9:5a:37:43:22:46:08:2f:41:5a:9b:84:23:88:af:0e:2e:
c4:e7:1e:b7:c5:ed:43:73:62:af:3d:28:df:49:52:5a:88:73:
e6:ca:8d:70:c0:18:1a:91:c3:ed:3f:67:bb:37:aa:c3:f6:50:
b2:71:ce:57:9c:bd:8e:7b:b0:9d:2f:73:7a:69:53:a9:c4:f7:
b1:51:cb:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:38:36 2025 by rpki-client