Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/p_FSgQEAM4g2nhYS8ql_DRruxBY.roa
File: p_FSgQEAM4g2nhYS8ql_DRruxBY.roa (raw, json)
Hash identifier: XuFUW4YZMXKadGfrXRwnjrZ0jcu1TF2ubDN/rDQIhIY=
Subject key identifier: A7:F1:52:81:01:00:33:88:36:9E:16:12:F2:A9:7F:0D:1A:EE:C4:16
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FDC9E31CE1BB7B522242FAC9B9956
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/p_FSgQEAM4g2nhYS8ql_DRruxBY.roa
Signing time: Thu 02 Jan 2025 05:49:32 +0000
ROA not before: Thu 02 Jan 2025 05:49:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62006
IP address blocks: 92.38.43.0/24 maxlen: 24
93.170.101.0/24 maxlen: 24
95.47.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:dc:9e:31:ce:1b:b7:b5:22:24:2f:ac:9b:99:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7f1528101003388369e1612f2a97f0d1aeec416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5c:15:6f:e3:5b:33:d5:f9:88:d5:33:da:56:
47:ba:f7:26:8d:97:f0:c4:2a:77:9d:f6:86:57:ce:
7f:ce:79:63:7f:57:0e:8f:8c:83:5b:ed:8a:b0:33:
ca:7e:c1:59:25:f3:c9:5d:7c:9d:f6:50:4b:ac:2c:
4a:df:c5:96:3c:fd:26:dc:c0:73:67:d4:d9:f8:d9:
d0:09:52:c1:50:51:68:73:6b:5e:5e:b2:6f:67:07:
4f:4e:3d:b1:5c:d8:7e:eb:4c:63:7c:da:5a:18:bb:
2c:5b:2e:c1:87:81:e2:86:ac:06:bc:20:8b:5f:fd:
10:f8:e3:49:dc:5b:4d:4d:0b:b5:5e:c9:44:78:01:
50:7f:d6:50:10:cf:dc:dc:13:81:b8:d3:a3:6e:ca:
4c:77:0a:bb:a8:6e:2d:5d:b2:58:60:ce:af:8b:99:
4d:1c:9f:0a:56:90:2f:6f:3a:b0:ba:55:3a:70:01:
f1:ed:af:0b:22:b9:39:4f:97:78:f5:27:ae:e0:68:
9c:95:6f:1a:ae:48:ba:f2:e0:70:7b:da:d6:ec:31:
cf:eb:fb:c2:f2:d3:8f:52:c2:ff:b6:f0:19:aa:53:
bc:6c:26:08:df:b0:b5:24:62:53:08:3c:de:24:99:
29:00:c2:17:21:b7:3a:9f:02:3d:e1:9b:85:52:64:
8d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F1:52:81:01:00:33:88:36:9E:16:12:F2:A9:7F:0D:1A:EE:C4:16
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/p_FSgQEAM4g2nhYS8ql_DRruxBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.43.0/24
93.170.101.0/24
95.47.103.0/24
Signature Algorithm: sha256WithRSAEncryption
98:bc:a6:08:ba:4f:2b:43:a3:55:6c:35:c1:8b:f9:9b:a5:d4:
1b:ee:b0:91:49:3d:6a:f6:52:1a:29:3b:b2:e6:78:47:79:8b:
68:63:08:be:0f:76:e4:34:5b:65:17:7b:b5:f1:c1:a2:28:b5:
77:9a:44:3e:f7:ac:ad:a1:22:18:3d:e8:63:ca:15:fe:ee:bf:
ee:24:5d:c2:58:f7:c0:e4:b5:c4:ac:3c:76:a1:c6:2e:14:f8:
97:48:17:83:af:06:ac:b0:00:af:fd:aa:60:68:46:ed:81:fa:
2c:9e:b3:e4:6c:4c:b1:ae:7e:79:96:0b:75:21:b2:70:04:bb:
32:54:df:af:22:65:cb:87:75:55:3a:23:68:58:41:45:2a:73:
19:5e:37:79:23:02:14:ae:3d:43:85:fd:37:81:57:99:18:70:
fb:53:0b:54:86:14:51:1d:76:36:9f:0e:76:ef:41:51:8e:85:
71:15:5f:96:3c:df:7e:b0:9b:1d:61:70:e9:d3:76:b1:54:07:
99:22:25:97:2a:67:a1:9f:6e:43:a0:26:75:d5:ea:7e:ea:f1:
3f:ac:77:f8:86:20:c6:9d:a5:8b:46:18:15:20:82:e1:84:a6:
49:20:f6:fa:7a:90:ae:2f:ff:1d:a2:42:7f:a0:c7:5e:32:bf:
99:ba:55:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:29:51 2025 by rpki-client