Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/AJ6fmQiDz0GXs7lMqGohkie4ct4.roa
File: AJ6fmQiDz0GXs7lMqGohkie4ct4.roa (raw, json)
Hash identifier: r9hxOjQfXyLSDYE4VLoR0q1v13yTVS1W/Vgz5ZPmFVM=
Subject key identifier: 00:9E:9F:99:08:83:CF:41:97:B3:B9:4C:A8:6A:21:92:27:B8:72:DE
Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Certificate serial: 0194228E08C9EC116E263DF5E1745066CCC2
Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/AJ6fmQiDz0GXs7lMqGohkie4ct4.roa
Signing time: Wed 01 Jan 2025 15:48:40 +0000
ROA not before: Wed 01 Jan 2025 15:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48313
IP address blocks: 92.45.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:08:c9:ec:11:6e:26:3d:f5:e1:74:50:66:cc:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Validity
Not Before: Jan 1 15:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=009e9f990883cf4197b3b94ca86a219227b872de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:38:05:ae:69:86:b1:68:bb:fc:86:56:b4:96:
30:a5:6e:14:8d:ed:f3:a0:31:fc:8e:7b:e3:1a:21:
86:3d:ba:fa:47:cd:6a:45:76:45:bc:04:3d:19:b4:
ac:9e:63:38:2b:f1:1b:4e:ee:64:f8:63:60:40:a9:
7f:a5:a4:93:f2:84:d8:d9:a3:8e:b6:19:99:31:cf:
fe:98:11:94:a4:df:8b:ad:c2:31:86:ab:4c:14:40:
51:1b:2c:d2:10:78:18:17:46:fa:ad:4d:8b:7f:7b:
cb:b9:16:8f:6d:9e:1e:e1:8d:e2:3d:db:e8:2f:6c:
2d:0a:8d:fe:d3:a6:ae:37:e8:a6:ef:14:e4:89:53:
93:e7:34:01:bf:0e:87:35:2e:3c:68:70:df:1f:46:
0d:f1:38:af:4c:42:d7:33:72:c9:33:4b:9d:09:71:
3d:2d:46:11:a1:44:7d:88:e5:2b:ca:64:41:2c:5d:
06:64:40:ef:8a:3d:e6:4e:c3:c1:84:d9:ed:d3:ce:
af:79:f3:c6:d2:c2:1f:4d:d4:b1:df:97:f4:4d:6d:
b3:7c:dd:66:ea:af:32:e0:20:c6:db:9c:03:e1:3a:
db:9d:05:ae:b3:a4:a6:78:c9:07:1c:b3:f2:ce:db:
70:57:d4:a4:0c:0f:c8:37:6d:d0:46:6c:2e:20:04:
ca:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:9E:9F:99:08:83:CF:41:97:B3:B9:4C:A8:6A:21:92:27:B8:72:DE
X509v3 Authority Key Identifier:
keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/AJ6fmQiDz0GXs7lMqGohkie4ct4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.45.64.0/24
Signature Algorithm: sha256WithRSAEncryption
23:49:6a:0f:db:4e:e1:ec:b8:90:32:05:35:ed:bf:11:cb:3b:
05:13:2f:86:26:16:80:b3:c5:4e:25:b5:6f:30:08:5f:be:8f:
53:a0:f7:e1:09:61:eb:98:16:95:81:00:e5:2c:9b:84:7b:ba:
a8:aa:e1:6a:55:1d:1e:6d:f1:a1:8a:43:c4:87:83:ef:4d:59:
27:84:8d:be:26:c6:6d:d7:96:df:3e:4b:7f:88:3c:6d:3b:b1:
de:92:c0:e6:b4:2f:0c:a2:48:f6:f7:65:66:b8:1e:14:d1:94:
4e:be:35:8c:67:9c:e8:48:00:1a:49:db:1a:bf:5a:3c:9b:9b:
6d:c2:3b:79:a7:9e:2c:df:0e:29:36:0d:80:7f:4b:36:e8:00:
32:af:a6:87:ea:0a:6a:26:5f:dc:1f:83:4b:a8:aa:ec:2b:be:
de:7a:5c:7f:ca:a3:b3:4d:48:81:5e:53:b8:01:56:bc:b6:3f:
f0:98:af:8e:ba:34:30:7a:7a:1c:59:75:54:be:80:50:b3:49:
24:bc:e4:09:e7:fa:f2:ea:39:43:6b:5b:af:50:7e:9c:d2:48:
6d:59:9c:90:bf:30:1d:b5:56:d2:c1:89:54:fd:53:e8:f5:8b:
c7:48:ac:2e:3c:8c:16:af:87:95:a5:45:a2:28:a7:f7:fe:c1:
8b:17:62:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:58:34 2025 by rpki-client