Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/57HaC7393494-Kydk1JdAp5sP5I.roa
File: 57HaC7393494-Kydk1JdAp5sP5I.roa (raw, json)
Hash identifier: MC5zLYnL7jsECqxeDtP30qM0sWScy6N43eUhfx207aw=
Subject key identifier: E7:B1:DA:0B:BD:FD:DF:8F:78:F8:AC:9D:93:52:5D:02:9E:6C:3F:92
Certificate issuer: /CN=dc1089c942b68033683b4dd506c0c36f74be0ea3
Certificate serial: 01942067CC19AA78BD9490082DB823C0815B
Authority key identifier: DC:10:89:C9:42:B6:80:33:68:3B:4D:D5:06:C0:C3:6F:74:BE:0E:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/57HaC7393494-Kydk1JdAp5sP5I.roa
Signing time: Wed 01 Jan 2025 05:47:40 +0000
ROA not before: Wed 01 Jan 2025 05:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197753
IP address blocks: 92.118.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:cc:19:aa:78:bd:94:90:08:2d:b8:23:c0:81:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1089c942b68033683b4dd506c0c36f74be0ea3
Validity
Not Before: Jan 1 05:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7b1da0bbdfddf8f78f8ac9d93525d029e6c3f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ec:c2:6f:c5:80:ac:45:44:e1:cd:fe:90:87:
4d:da:5d:9d:cc:5c:4b:45:7d:eb:1c:d5:6c:94:1c:
9f:4a:1e:32:eb:ef:bc:07:a3:2b:80:d7:9e:37:df:
eb:b7:d6:9d:61:52:25:6c:ab:59:86:2d:e9:c8:34:
c0:4c:90:c2:2f:08:82:af:e2:96:91:65:8d:f7:c6:
80:14:c8:b8:65:4e:20:f5:e1:15:93:d9:c4:b3:43:
d7:0f:61:25:07:59:e6:62:8e:b7:46:6f:cb:ee:0d:
d6:d9:b2:8a:f9:34:78:f0:17:51:12:a4:d0:2e:8c:
f7:17:b6:25:ac:09:7f:1f:35:ef:a6:95:1f:fd:8c:
37:ea:dc:a9:5a:d6:95:f5:17:33:e3:f6:1c:15:53:
7e:20:85:79:74:08:93:ce:54:2f:f7:6b:af:09:8c:
98:5a:c9:b5:02:74:96:4b:a1:e7:70:49:47:e6:8b:
e6:ff:a1:81:25:5a:53:04:f3:ef:57:1c:c1:8f:a3:
47:98:5c:1c:28:18:1d:c2:79:35:53:53:a2:20:3b:
c9:87:35:92:94:fb:35:8c:d7:13:1d:28:b3:df:d3:
f0:a2:5d:35:c3:ef:3d:87:53:25:30:7c:8c:83:f5:
db:71:8f:96:03:25:77:61:f1:72:4a:20:73:d6:44:
48:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B1:DA:0B:BD:FD:DF:8F:78:F8:AC:9D:93:52:5D:02:9E:6C:3F:92
X509v3 Authority Key Identifier:
keyid:DC:10:89:C9:42:B6:80:33:68:3B:4D:D5:06:C0:C3:6F:74:BE:0E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/57HaC7393494-Kydk1JdAp5sP5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.31.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:66:3d:8a:f9:81:c9:58:0c:1a:62:b7:43:f6:10:06:eb:19:
d6:4a:06:aa:5c:5d:62:9b:92:6c:7d:cc:43:a2:4f:af:19:32:
df:72:b4:25:aa:e1:d2:1a:09:d0:5a:b5:b4:96:0a:e9:b2:18:
55:07:6e:d6:a5:da:a3:62:4a:f6:4e:f3:44:c1:aa:6f:3e:6c:
7d:77:ad:47:32:e2:5b:7a:4d:90:6d:8c:50:10:6c:3a:54:86:
c6:fe:07:aa:14:56:88:4a:28:68:87:ee:2e:ff:07:cd:1e:5d:
b8:56:e5:9b:b4:f3:1a:12:f3:dd:cb:d6:91:4c:d5:a4:4b:a8:
4f:5b:3b:39:70:3b:2c:08:d1:68:24:5b:a7:9f:7d:1d:4d:34:
96:df:f2:58:83:ea:25:1a:1a:98:76:fa:7b:66:f5:8f:ad:59:
fc:2d:d0:e8:b2:83:28:e4:e0:d2:e5:5a:21:7e:d7:d1:aa:40:
ee:b0:01:f1:3a:ed:22:5a:f0:46:53:b3:7b:cc:3a:76:e9:24:
53:8c:4a:3e:d0:e2:a3:5c:bc:e4:79:9a:88:26:65:f0:9d:f3:
ee:49:a4:0b:f1:13:da:aa:00:68:4b:ab:b4:6e:67:1d:ed:8c:
cb:79:0d:38:d3:22:fe:6f:c5:84:5b:b5:68:70:72:6a:78:d7:
82:58:81:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:08:41 2025 by rpki-client