Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/DZhk0rmO9GcvMu8Q3N5Y5XX1CpM.roa
File: DZhk0rmO9GcvMu8Q3N5Y5XX1CpM.roa (raw, json)
Hash identifier: MHsKabExHi5xczZ1BIZSKQMTBiWVFTFrZLMkNowPxh4=
Subject key identifier: 0D:98:64:D2:B9:8E:F4:67:2F:32:EF:10:DC:DE:58:E5:75:F5:0A:93
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194259005757176607198E738A828CAD47F
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/DZhk0rmO9GcvMu8Q3N5Y5XX1CpM.roa
Signing time: Thu 02 Jan 2025 05:49:43 +0000
ROA not before: Thu 02 Jan 2025 05:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209926
IP address blocks: 92.38.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:90:05:75:71:76:60:71:98:e7:38:a8:28:ca:d4:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d9864d2b98ef4672f32ef10dcde58e575f50a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c4:1f:8c:6c:91:9d:45:a4:42:48:43:fb:19:
0c:71:89:a3:74:92:22:b0:9c:d2:3f:c3:b7:60:27:
ba:97:71:64:4d:97:5f:b2:da:f2:a1:36:4e:f1:e1:
57:e5:13:d2:ff:49:49:cd:3b:37:59:6a:49:f8:44:
cc:0a:22:d4:e9:b5:3f:91:7d:d7:28:55:69:dc:cd:
47:e8:6b:92:87:29:ee:f8:26:66:3a:db:02:d4:6a:
31:d9:52:f4:1b:84:6a:92:72:c8:1a:77:53:af:e6:
97:e0:7e:87:4b:68:05:8a:df:2c:7b:ed:af:4e:2b:
c5:36:49:13:bc:91:2a:61:54:20:d9:10:76:29:56:
6d:6e:c4:97:ca:97:58:3e:96:b8:88:0a:5d:b0:d0:
37:1b:13:76:4d:10:a9:0b:fc:8f:55:7a:84:0c:a5:
e0:a9:b3:ed:31:72:44:d8:5a:dc:6f:4a:72:fd:72:
88:27:51:f1:f4:a0:7b:e0:9c:46:27:93:f4:6e:9e:
15:18:59:6e:63:b1:98:62:8e:db:3a:57:a1:e4:1f:
e0:fe:fa:d8:bf:72:2e:61:72:55:04:5e:15:d6:0d:
da:95:ac:a2:5d:22:b4:88:bf:02:2c:aa:f3:6f:c9:
51:a5:fc:7f:0b:9f:b2:f4:f8:3b:5a:97:fe:78:4d:
81:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:98:64:D2:B9:8E:F4:67:2F:32:EF:10:DC:DE:58:E5:75:F5:0A:93
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/DZhk0rmO9GcvMu8Q3N5Y5XX1CpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.4.0/24
Signature Algorithm: sha256WithRSAEncryption
13:07:5f:d3:9f:31:b5:fa:f4:e8:2b:00:49:0e:2b:2e:0e:57:
51:97:b8:a8:0e:9d:6e:b2:87:f2:11:7b:24:4a:28:e3:d0:8e:
0b:05:7c:6e:10:8c:65:a0:fc:d2:c2:e5:2c:4f:1a:ed:a2:21:
bc:04:f0:31:1b:66:e8:96:6f:1d:b3:76:9a:b7:42:88:8b:2c:
68:39:d4:eb:11:ea:d6:b7:28:1b:62:4b:df:98:f5:f0:b4:9c:
93:04:23:78:09:42:3f:af:f4:18:b8:9d:c1:08:33:1c:d8:ab:
f2:6f:45:ea:d3:ae:3a:ea:4a:17:c8:c0:6a:ed:43:e7:aa:f8:
94:8f:92:cd:19:ae:3f:ff:ed:6f:dc:87:de:9d:90:39:9b:71:
c4:b2:46:1f:a0:8c:61:6e:42:fd:24:ca:f7:f4:cf:06:26:5c:
29:f7:0d:00:46:c9:ef:94:92:c2:d8:a2:92:92:2a:44:f2:6d:
e5:fd:be:b4:ae:6f:f2:48:44:76:b0:e5:24:bf:5a:cb:5d:20:
77:46:51:36:11:dc:3b:4a:8c:25:f0:0f:aa:08:dd:d8:ea:38:
99:b3:ce:c9:5b:b1:33:13:ef:96:8a:a5:21:ff:28:c2:a3:f6:
93:10:b3:36:f2:37:6b:5d:67:a1:c1:f4:00:60:42:92:3d:6b:
0e:20:29:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:44:13 2025 by rpki-client