Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/ksVbRwAzzCZHci4kH2kQ6u8coqY.roa
File: ksVbRwAzzCZHci4kH2kQ6u8coqY.roa (raw, json)
Hash identifier: QaqWPpVajjOVbtuXKzhecjPRXn+V4yoJpRPVeesXbzw=
Subject key identifier: 92:C5:5B:47:00:33:CC:26:47:72:2E:24:1F:69:10:EA:EF:1C:A2:A6
Certificate issuer: /CN=9a7b9a8cd819f4a920334d7e72ec2340870d7749
Certificate serial: 019421B2144D28D323DA4C1F42671B4E76BE
Authority key identifier: 9A:7B:9A:8C:D8:19:F4:A9:20:33:4D:7E:72:EC:23:40:87:0D:77:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnuajNgZ9KkgM01-cuwjQIcNd0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/ksVbRwAzzCZHci4kH2kQ6u8coqY.roa
Signing time: Wed 01 Jan 2025 11:48:26 +0000
ROA not before: Wed 01 Jan 2025 11:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44696
IP address blocks: 85.202.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnuajNgZ9KkgM01-cuwjQIcNd0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 11:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:14:4d:28:d3:23:da:4c:1f:42:67:1b:4e:76:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a7b9a8cd819f4a920334d7e72ec2340870d7749
Validity
Not Before: Jan 1 11:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92c55b470033cc2647722e241f6910eaef1ca2a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:11:de:58:5a:63:d6:17:cd:81:bf:cd:f6:d9:
18:05:22:9a:cd:64:98:80:55:d8:ac:5d:69:c1:26:
12:c2:79:1f:9f:48:44:7a:71:8c:ef:36:08:41:fb:
62:4a:11:f1:9c:18:88:28:8d:60:b6:18:1b:c3:ab:
54:55:af:29:62:4f:48:52:aa:32:54:9c:d4:cb:42:
fe:55:80:b0:f6:ba:60:86:dc:86:f6:12:2b:9c:be:
90:49:f7:80:c7:26:a4:14:52:6e:94:c8:72:d7:44:
6e:e5:69:ee:6f:8f:ac:ea:fe:7a:9d:e0:3a:41:71:
d6:a0:73:f0:99:20:a3:4d:ae:b0:85:ce:40:11:52:
1c:60:9a:54:d0:ba:6d:a3:3a:e6:23:3e:0a:57:ed:
24:c4:09:84:b6:e1:60:a8:e0:75:bb:d2:5a:44:de:
8e:24:76:2a:bf:84:77:2f:f9:a3:6e:a2:36:40:83:
82:fe:bd:3f:d0:17:1c:bf:8e:a9:15:a1:78:b5:ab:
81:ff:9c:81:b6:aa:d4:71:8c:6d:b6:b4:48:4a:1a:
65:25:b8:55:d3:63:17:e3:c1:8e:5a:fc:67:d1:44:
a7:2c:04:9e:54:5e:8c:fe:d3:5d:90:cc:45:fd:27:
82:56:1c:eb:41:2a:ea:1c:8f:1f:f8:16:93:3d:83:
d5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C5:5B:47:00:33:CC:26:47:72:2E:24:1F:69:10:EA:EF:1C:A2:A6
X509v3 Authority Key Identifier:
keyid:9A:7B:9A:8C:D8:19:F4:A9:20:33:4D:7E:72:EC:23:40:87:0D:77:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnuajNgZ9KkgM01-cuwjQIcNd0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/ksVbRwAzzCZHci4kH2kQ6u8coqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.240.0/20
Signature Algorithm: sha256WithRSAEncryption
8a:1b:fd:60:9d:07:5e:a4:5e:d5:cb:3b:00:c0:6d:54:75:82:
11:c9:68:a7:1e:81:00:81:68:e1:30:70:49:3e:6f:e3:4f:3d:
a4:fc:09:59:74:68:0c:8b:df:1b:c1:3f:aa:e5:9c:ac:d6:84:
ae:9e:62:00:fd:89:06:91:b7:8c:31:22:03:32:9b:0c:5a:22:
59:bc:8b:bb:2c:70:c1:5f:08:49:3f:55:7d:40:35:5a:32:dc:
52:61:4d:d5:44:a8:4a:4f:da:33:28:92:e2:92:a4:47:2d:5b:
2e:9e:60:63:3f:35:8e:cf:0b:26:35:da:98:3e:90:b6:c3:14:
72:bb:e2:d7:57:4f:1e:c0:da:89:89:5c:7b:65:65:34:b6:a0:
fe:f0:95:41:09:6d:b5:86:92:d7:3e:30:0b:27:c7:ed:f5:58:
c6:2f:fd:39:4f:80:70:cc:a7:a4:7d:36:37:57:67:d7:bb:03:
5f:97:5f:fd:01:13:87:d6:5f:5f:19:42:db:d8:33:38:7b:7d:
bf:dd:59:11:91:8f:0f:d6:a3:e5:7e:1d:86:59:68:ca:91:4e:
00:41:0e:bf:af:e4:cb:d5:84:56:99:7b:16:04:f2:eb:13:90:
64:5c:85:e7:a1:f8:fd:f4:9b:22:0e:6e:7c:56:06:b8:67:20:
bf:ae:22:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:49:04 2025 by rpki-client