Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/xCpTTt1wRZxUJy83ro30pVk-tGs.roa
File: xCpTTt1wRZxUJy83ro30pVk-tGs.roa (raw, json)
Hash identifier: +pLDEi2uyNtFVpGTsTvFaAzRGQwyt1tEAP+HX+n7b3Y=
Subject key identifier: C4:2A:53:4E:DD:70:45:9C:54:27:2F:37:AE:8D:F4:A5:59:3E:B4:6B
Certificate issuer: /CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Certificate serial: 01946475D628D02835D372C26043411D756E
Authority key identifier: 8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/xCpTTt1wRZxUJy83ro30pVk-tGs.roa
Signing time: Tue 14 Jan 2025 10:57:11 +0000
ROA not before: Tue 14 Jan 2025 10:57:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59989
IP address blocks: 91.92.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:64:75:d6:28:d0:28:35:d3:72:c2:60:43:41:1d:75:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Validity
Not Before: Jan 14 10:57:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c42a534edd70459c54272f37ae8df4a5593eb46b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:19:30:58:58:6a:48:0d:10:47:90:70:fb:86:
7c:6f:14:6a:b7:79:50:41:89:0c:34:16:ee:69:0b:
5e:d6:7c:c9:b6:61:db:d3:e8:7c:81:5a:e0:98:0c:
b2:c5:00:d0:56:f6:71:b3:2e:bb:65:97:56:99:2d:
e2:83:89:a3:a3:0f:f8:39:fe:ee:6c:3a:8a:a6:8e:
1e:da:58:35:93:18:8a:98:7c:38:4e:8d:5e:59:ef:
79:ce:2f:3b:39:bd:fa:a2:0d:dc:8b:ba:e2:d4:9d:
12:b5:3c:cf:e3:62:a4:f7:33:e1:23:f1:91:2a:b3:
7e:14:3a:56:9a:92:42:86:6d:4e:d8:c0:d5:24:46:
3f:e2:30:c2:fb:5d:54:d2:12:34:f6:68:cb:0f:e9:
71:29:ae:17:f8:4d:8c:90:e5:62:9f:bc:cd:a6:02:
1e:d0:a3:c5:00:e1:ec:f9:b0:0d:43:d6:4a:af:44:
8e:4f:fd:5e:65:f4:f2:4e:32:4a:7f:88:54:1c:9b:
28:a3:9e:d3:b2:86:8a:2e:56:30:b0:89:51:d6:89:
ea:a1:18:2f:8b:8d:69:57:b1:dc:25:b3:d0:a5:38:
14:c4:e4:dd:4d:f0:42:19:51:94:4e:f0:30:ce:cf:
80:04:9a:19:73:c9:b0:ab:51:e1:66:62:0d:08:8c:
ec:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:2A:53:4E:DD:70:45:9C:54:27:2F:37:AE:8D:F4:A5:59:3E:B4:6B
X509v3 Authority Key Identifier:
keyid:8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/xCpTTt1wRZxUJy83ro30pVk-tGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.92.115.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:9c:a0:fc:dd:a8:a5:89:9b:83:ec:ea:ae:af:a8:40:40:5b:
8b:87:9a:13:4c:da:20:d8:ae:30:25:43:84:20:66:a1:36:d0:
60:8c:91:11:3a:26:f1:d9:b5:5c:34:e6:59:79:40:be:67:18:
7c:c4:7a:ed:5e:56:aa:2c:fd:75:c4:24:14:1a:81:75:f5:af:
69:dc:95:77:11:9f:da:29:9c:d2:ff:0d:1e:09:31:b3:40:37:
d7:2c:61:25:c0:25:12:09:b4:49:be:4b:90:fe:dd:2c:16:08:
b6:82:90:31:d0:13:f9:75:e4:85:6e:b8:01:b2:9d:cc:f3:6d:
90:35:aa:61:24:48:df:db:59:8a:f8:be:7e:e8:70:c2:6f:59:
b9:87:41:25:61:3a:f5:fe:85:97:7a:bf:c3:f0:88:d1:65:01:
7b:5d:e4:1b:e1:34:9a:01:4d:7d:4d:0b:9c:6b:21:36:42:4e:
77:12:a4:a0:6d:de:cd:e2:6f:23:49:b5:d1:23:59:77:ba:58:
01:ca:3f:0b:e4:32:2a:51:9c:b5:fb:28:cf:01:db:70:d5:83:
21:aa:06:05:3a:1f:eb:5a:df:31:20:3a:4b:db:83:e4:bd:f3:
f6:d3:f1:40:06:93:da:24:17:70:57:cc:86:4a:27:98:b2:94:
b6:17:61:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:38:56 2025 by rpki-client